Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.cer (raw, json)
Hash identifier: 0fJOISp8H4xmzj7wibDn1BU+8G3snY8xp8iT6VNC5yk=
Subject key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197CB32F496D7DBE390297A75370CADEE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Jul 2025 12:53:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215767
IP: 195.211.71.0/24
IP: 2a04:aa00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:32:f4:96:d7:db:e3:90:29:7a:75:37:0c:ad:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 12:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=883f7260650026b973a18a7f3e9958d321ece1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:7b:32:7a:00:18:4a:4d:93:ba:c1:37:68:
0c:2c:fe:86:9e:28:3e:78:05:2f:2f:9e:38:d8:f0:
f0:a1:c4:cd:0d:f6:aa:0b:45:02:70:3f:60:0e:7b:
45:ad:4f:31:2b:a9:ce:6c:dd:8f:0c:5e:5f:02:8d:
f2:67:f6:73:04:5c:4d:1f:35:e6:d3:04:58:74:aa:
a1:33:81:9a:bb:31:63:b9:16:f8:31:ca:20:c9:5c:
06:9e:82:96:49:dc:c3:64:1a:99:01:cd:41:29:fe:
97:c8:8a:4d:f2:bc:62:23:52:23:fc:73:c6:4c:71:
81:23:d9:0e:49:85:13:a7:9e:a8:ec:3a:65:0a:13:
67:b2:ad:39:81:59:59:27:68:e1:6e:6e:3b:f2:8b:
aa:bb:bd:b3:e7:f2:18:6d:bb:4b:2f:d7:59:24:a3:
8f:08:54:ec:7d:5c:b3:17:e1:4f:ef:20:1b:1a:67:
5e:0d:8e:35:bd:52:3b:15:88:bc:f5:dc:ad:2a:44:
c0:4b:c9:6e:31:0a:d2:e9:07:0a:b8:f6:3f:2d:43:
01:ec:e1:08:40:ea:7e:2b:e6:01:aa:8b:18:91:e7:
d5:22:91:a2:e3:84:bf:c7:cd:da:a6:67:b8:f5:6f:
a4:b7:08:d5:6a:3d:8c:14:65:b7:af:ae:c1:f1:4c:
6c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.71.0/24
IPv6:
2a04:aa00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215767
Signature Algorithm: sha256WithRSAEncryption
4b:c9:57:bf:5d:a2:6b:6b:2a:49:ac:81:91:72:6c:bf:2b:85:
7d:af:c9:98:f5:3e:0e:01:4f:70:b9:32:68:d5:ac:86:09:1b:
dc:4c:6f:21:5e:f2:30:b6:f6:8d:43:4f:87:4f:c1:7f:b7:5b:
9c:36:0b:c2:51:46:11:3a:46:40:35:cb:79:7e:a4:ab:cf:79:
af:6a:e5:0c:6a:19:89:f6:c0:d2:a5:a8:a3:5a:4b:1a:77:8a:
35:7e:ab:77:02:15:a4:e5:96:ff:e6:b5:cf:6d:d6:a5:1b:9c:
a2:ce:ff:ab:0e:d7:3f:76:8f:4a:dd:e1:28:a7:68:e5:76:57:
cd:ed:85:9c:ec:a6:94:b1:0a:be:51:e4:29:ce:9b:b9:9c:7b:
1c:d5:2a:80:60:13:13:e5:74:f1:e7:15:aa:af:dd:3e:f5:36:
fd:5a:6a:cb:92:7e:8e:55:d3:9b:e4:de:10:ac:a3:23:ee:38:
ba:2c:d7:f7:34:cf:8a:d4:2b:66:1e:db:75:8d:f4:46:2f:8c:
02:05:4b:e2:a9:19:8d:e9:98:49:56:0c:39:c0:5d:b9:df:5b:
c9:e8:b1:44:8f:04:b5:4f:eb:66:3d:76:f9:c7:5c:d4:be:f4:
cd:be:d4:63:de:ff:47:97:2b:da:9c:5c:8a:f9:5b:18:16:cf:
70:02:1c:a5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZfLMvSW19vjkCl6dTcMre6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzAyMTI1MzIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODNmNzI2MDY1MDAyNmI5NzNhMThhN2YzZTk5NThkMzIxZWNlMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaV7MnoAGEpNk7rBN2gMLP6Gnig+
eAUvL5442PDwocTNDfaqC0UCcD9gDntFrU8xK6nObN2PDF5fAo3yZ/ZzBFxNHzXm
0wRYdKqhM4GauzFjuRb4McogyVwGnoKWSdzDZBqZAc1BKf6XyIpN8rxiI1Ij/HPG
THGBI9kOSYUTp56o7DplChNnsq05gVlZJ2jhbm478ouqu72z5/IYbbtLL9dZJKOP
CFTsfVyzF+FP7yAbGmdeDY41vVI7FYi89dytKkTAS8luMQrS6QcKuPY/LUMB7OEI
QOp+K+YBqosYkefVIpGi44S/x83apme49W+ktwjVaj2MFGW3r67B8Uxs8wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIg/cmBlACa5c6GKfz6ZWNMh7OHbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzExZDRl
Ny1lOTc4LTQwMzctYWIwOS1jMDlmZjE2ZmMzNGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMTFkNGU3
LWU5NzgtNDAzNy1hYjA5LWMwOWZmMTZmYzM0Yi8xL2lEOXlZR1VBSnJsem9ZcF9Q
cGxZMHlIczRkcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAw9NHMA0EAgACMAcDBQMqBKoAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNK1zANBgkqhkiG9w0BAQsFAAOCAQEAS8lXv12ia2sq
SayBkXJsvyuFfa/JmPU+DgFPcLkyaNWshgkb3ExvIV7yMLb2jUNPh0/Bf7dbnDYL
wlFGETpGQDXLeX6kq895r2rlDGoZifbA0qWoo1pLGneKNX6rdwIVpOWW/+a1z23W
pRucos7/qw7XP3aPSt3hKKdo5XZXze2FnOymlLEKvlHkKc6buZx7HNUqgGATE+V0
8ecVqq/dPvU2/Vpqy5J+jlXTm+TeEKyjI+44uizX9zTPitQrZh7bdY30Ri+MAgVL
4qkZjemYSVYMOcBdud9byeixRI8EtU/rZj12+cdc1L70zb7UY97/R5cr2pxcivlb
GBbPcAIcpQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:35 2025 by rpki-client