Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer
File: kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.cer (raw, json)
Hash identifier: zI9MXedjGLp8uOyEBWb1RHTM0cm6w87rhpeugpsFMTQ=
Subject key identifier: 91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01980934E636A733E297A94688E6C66A5911
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Jul 2025 13:51:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200403
IP: 217.26.220.0/24
IP: 2a13:58c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:34:e6:36:a7:33:e2:97:a9:46:88:e6:c6:6a:59:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 13:51:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91d2767aa910e957dc5358025026e6c370570a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:09:05:ac:61:55:c1:a8:69:a9:96:e4:4f:
a5:e7:96:9d:78:b8:c8:39:59:49:53:b9:f4:8d:ea:
8c:ae:25:77:13:2b:6e:40:fc:00:d4:46:80:aa:21:
82:ea:15:cb:65:00:26:77:7d:06:88:c0:f3:bf:7e:
fd:cc:cb:29:33:1c:34:ab:4b:b5:73:98:a6:99:ed:
73:4b:3d:91:8b:b6:17:b7:f5:bb:ad:01:64:9a:fe:
ff:3e:8d:95:2a:50:b2:92:7c:23:e0:1d:fb:9d:77:
11:d6:90:ff:97:61:8a:8f:d5:f0:7e:a3:ba:12:f0:
f9:5e:05:d1:ca:bc:04:9f:83:23:73:03:05:c7:12:
58:74:9b:2b:68:1f:1f:b2:62:e7:d1:21:ce:e9:60:
b8:13:40:07:e5:f7:80:bc:51:62:01:3e:19:e3:fe:
e9:bc:6f:89:d6:4d:5e:da:4c:dc:f1:a9:7d:b2:be:
3e:51:7a:11:4f:1d:fd:c5:20:de:e6:8b:cb:e1:e7:
8e:76:54:a4:5a:d4:6d:db:6f:17:e1:ae:95:76:ee:
2a:b6:e3:ae:0c:d4:66:b7:d1:88:bb:fd:72:80:1a:
4d:31:ac:07:d4:c3:6e:56:b9:ed:9a:a9:c3:d2:85:
c5:41:22:af:1e:79:82:5b:23:a1:9e:38:6e:8b:5a:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:76:7A:A9:10:E9:57:DC:53:58:02:50:26:E6:C3:70:57:0A:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/44faa2-603b-4376-b87d-c47552549741/1/kdJ2eqkQ6VfcU1gCUCbmw3BXCi0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.220.0/24
IPv6:
2a13:58c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200403
Signature Algorithm: sha256WithRSAEncryption
76:c1:e6:61:28:41:38:45:49:b6:cb:a7:b7:2f:e0:32:a2:e4:
d1:c3:20:d1:76:3b:cc:dc:51:19:77:66:bd:ed:65:85:e6:ff:
ce:46:1a:a9:42:82:7d:7b:96:ad:91:18:18:2e:8f:a2:6d:c4:
df:8d:94:44:f2:b0:23:ca:6f:b0:81:50:34:82:30:d3:2d:60:
c3:97:cd:b9:83:d4:96:0b:9d:0a:a0:20:0d:e2:50:f3:62:58:
68:5c:a9:bc:37:08:64:7e:12:d6:fe:34:3b:9d:28:36:85:51:
5b:62:c1:2b:13:43:58:30:77:0f:ca:3a:ca:06:18:98:83:e7:
17:33:4a:bc:61:a8:1b:84:10:f4:2c:dc:b7:a6:3a:93:23:43:
79:98:f3:03:17:ad:fb:7e:48:71:3a:22:5e:4c:b3:22:e6:66:
d4:5b:aa:fd:3e:b2:52:d1:e3:29:ad:79:30:1c:54:ff:84:b6:
b8:2f:1e:f6:5f:ca:3b:04:1e:b5:6d:52:ae:df:9e:d3:e1:a6:
21:96:c9:3a:cc:6d:91:6a:14:8f:8f:15:84:69:52:da:d8:e9:
f8:19:9a:ba:5b:0c:bb:ba:97:50:ac:fe:5c:29:98:51:16:8d:
03:3c:c9:d1:11:ca:eb:04:e5:4c:ff:0c:1b:c6:6b:52:7d:9b:
d5:1b:dc:f5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZgJNOY2pzPil6lGiObGalkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzE0MTM1MTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWQyNzY3YWE5MTBlOTU3ZGM1MzU4MDI1MDI2ZTZjMzcwNTcwYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0gJBaxhVcGoaamW5E+l55adeLjI
OVlJU7n0jeqMriV3EytuQPwA1EaAqiGC6hXLZQAmd30GiMDzv379zMspMxw0q0u1
c5imme1zSz2Ri7YXt/W7rQFkmv7/Po2VKlCyknwj4B37nXcR1pD/l2GKj9XwfqO6
EvD5XgXRyrwEn4MjcwMFxxJYdJsraB8fsmLn0SHO6WC4E0AH5feAvFFiAT4Z4/7p
vG+J1k1e2kzc8al9sr4+UXoRTx39xSDe5ovL4eeOdlSkWtRt228X4a6Vdu4qtuOu
DNRmt9GIu/1ygBpNMawH1MNuVrntmqnD0oXFQSKvHnmCWyOhnjhui1oWgQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJHSdnqpEOlX3FNYAlAm5sNwVwotMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzQ0ZmFh
Mi02MDNiLTQzNzYtYjg3ZC1jNDc1NTI1NDk3NDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNDRmYWEy
LTYwM2ItNDM3Ni1iODdkLWM0NzU1MjU0OTc0MS8xL2tkSjJlcWtRNlZmY1UxZ0NV
Q2JtdzNCWENpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA2RrcMA0EAgACMAcDBQMqE1jAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMO0zANBgkqhkiG9w0BAQsFAAOCAQEAdsHmYShBOEVJ
tsunty/gMqLk0cMg0XY7zNxRGXdmve1lheb/zkYaqUKCfXuWrZEYGC6Pom3E342U
RPKwI8pvsIFQNIIw0y1gw5fNuYPUlgudCqAgDeJQ82JYaFypvDcIZH4S1v40O50o
NoVRW2LBKxNDWDB3D8o6ygYYmIPnFzNKvGGoG4QQ9Czct6Y6kyNDeZjzAxet+35I
cToiXkyzIuZm1Fuq/T6yUtHjKa15MBxU/4S2uC8e9l/KOwQetW1Srt+e0+GmIZbJ
OsxtkWoUj48VhGlS2tjp+BmaulsMu7qXUKz+XCmYURaNAzzJ0RHK6wTlTP8MG8Zr
Un2b1Rvc9Q==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:52 2025 by rpki-client