Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer (raw, json)
Hash identifier: J9RAR1PSC20rs/AMNnHiwwmXQo9geTa/7cM81Rw9SBg=
Subject key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01983CB449A58BF99FC9D3006B06D7A27443
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Jul 2025 13:51:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1895
IP: 131.188.0.0/16
IP: 192.44.81.0 -- 192.44.90.255
IP: 192.129.10.0 -- 192.129.14.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:b4:49:a5:8b:f9:9f:c9:d3:00:6b:06:d7:a2:74:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 13:51:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:93:52:47:73:49:3c:6c:d6:dd:42:fe:53:
95:ab:c2:e8:86:a0:c7:ee:a4:1e:cb:35:d6:4c:86:
d7:c3:33:a9:e3:8a:f4:0a:b1:84:b4:10:b5:08:77:
fd:b1:1d:1c:65:fc:6e:42:8c:e6:81:18:8e:5f:3c:
1e:83:29:6e:c5:69:78:8a:bc:74:a0:d6:0d:7e:ad:
bd:37:57:7c:b5:9a:4d:a4:74:65:e5:9e:ca:25:5e:
15:8b:73:24:4c:1b:33:bb:8f:c3:4a:6d:dc:38:18:
40:30:0b:79:ec:70:f3:2b:30:03:ae:19:5f:d3:88:
f0:a7:3f:d8:80:61:bb:db:c5:04:12:00:ec:79:6e:
ba:74:e3:bd:d7:a3:ae:65:f0:db:69:6a:6e:fb:24:
3e:62:5f:62:a6:e3:da:ed:f7:f0:34:39:69:6d:d7:
6a:24:b7:ec:f9:33:c4:22:e5:fe:85:5d:02:f9:c2:
ff:77:24:e8:9b:43:01:5f:40:1c:2d:b6:83:17:d4:
81:8d:c9:92:9b:c9:12:fb:63:47:74:dd:34:55:e6:
24:60:27:ff:ef:1d:4e:a1:84:91:68:32:86:ce:70:
9d:89:0f:62:ab:31:33:64:a9:f0:66:dd:aa:9e:05:
ba:09:f7:66:55:d3:80:4a:9d:98:c0:d4:b7:92:83:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
192.129.10.0-192.129.14.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1895
Signature Algorithm: sha256WithRSAEncryption
21:c2:24:9b:ef:2d:cd:a1:89:61:c0:ca:8c:86:13:c3:c9:cf:
ba:66:12:24:4b:82:26:8c:2f:1c:8a:df:1e:ca:63:3b:f1:bb:
5e:17:eb:3a:60:b5:e0:9f:b6:a7:0f:cf:2a:f8:6c:db:a6:da:
eb:33:83:92:53:fd:a2:9b:38:52:09:a8:ca:0b:36:14:41:86:
40:49:01:0a:1d:44:e2:35:64:e7:30:16:e1:d8:5d:2c:db:ae:
b5:86:59:cc:ae:9c:b5:87:06:b4:85:70:12:a7:c5:59:94:84:
7e:00:7c:03:3e:2f:2e:f2:44:2e:40:17:df:c3:cb:0d:28:36:
22:1a:98:7c:06:ff:c7:c9:4f:c1:cd:f6:8a:d0:b5:68:a0:f2:
b5:50:c2:bf:7e:f0:56:a5:d3:73:01:57:ad:69:d4:f1:85:d5:
e0:da:d2:72:1a:64:8a:ff:26:0e:81:cf:ef:8b:e4:6a:ca:da:
b3:e2:2c:0a:8f:a8:59:66:bd:0d:d7:19:a2:c3:6c:fa:6c:53:
90:b8:93:28:fa:e1:9a:4c:13:a6:e8:af:6d:4a:fc:1c:6b:96:
63:2d:b4:44:6c:fc:4b:45:4c:de:fe:ba:7f:af:bd:49:7b:80:
f2:fa:90:4c:c2:3d:bb:52:05:ba:b6:8e:8a:7d:cd:ab:2e:9b:
23:9d:ed:f6
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZg8tEmli/mfydMAawbXonRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzI0MTM1MTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGI0OWJhZjE3ZjA2YzM2NGEwMGY4ZTY0Yzg5MWM1MzcyOWY3YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOTUkdzSTxs1t1C/lOVq8LohqDH
7qQeyzXWTIbXwzOp44r0CrGEtBC1CHf9sR0cZfxuQozmgRiOXzwegyluxWl4irx0
oNYNfq29N1d8tZpNpHRl5Z7KJV4Vi3MkTBszu4/DSm3cOBhAMAt57HDzKzADrhlf
04jwpz/YgGG728UEEgDseW66dOO916OuZfDbaWpu+yQ+Yl9ipuPa7ffwNDlpbddq
JLfs+TPEIuX+hV0C+cL/dyTom0MBX0AcLbaDF9SBjcmSm8kS+2NHdN00VeYkYCf/
7x1OoYSRaDKGznCdiQ9iqzEzZKnwZt2qngW6CfdmVdOASp2YwNS3koPcGwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFI20m68X8Gw2SgD45kyJHFNyn3ovMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzljMWVj
OC1jYzM5LTQzODktODU4NC04NTE3M2U1N2ViNTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvOWMxZWM4
LWNjMzktNDM4OS04NTg0LTg1MTczZTU3ZWI1Mi8xL2piU2JyeGZ3YkRaS0FQam1U
SWtjVTNLZmVpOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAnBAIAATAhAwMAg7wwDAMEAMAsUQMEAMAsWjAMAwQBwIEKAwQA
wIEOMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgdnMA0GCSqGSIb3DQEBCwUAA4IB
AQAhwiSb7y3NoYlhwMqMhhPDyc+6ZhIkS4ImjC8cit8eymM78bteF+s6YLXgn7an
D88q+GzbptrrM4OSU/2imzhSCajKCzYUQYZASQEKHUTiNWTnMBbh2F0s2661hlnM
rpy1hwa0hXASp8VZlIR+AHwDPi8u8kQuQBffw8sNKDYiGph8Bv/HyU/BzfaK0LVo
oPK1UMK/fvBWpdNzAVetadTxhdXg2tJyGmSK/yYOgc/vi+Rqytqz4iwKj6hZZr0N
1xmiw2z6bFOQuJMo+uGaTBOm6K9tSvwca5ZjLbREbPxLRUze/rp/r71Je4Dy+pBM
wj27UgW6to6Kfc2rLpsjne32
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:48:38 2025 by rpki-client