Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer (raw, json)
Hash identifier: QxAy9BQ2ZL9PSy57v0TZyuA5Ks5wdMd/YqmmszSCcAw=
Subject key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D4538B99980233DC325AFA1C741DF342
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 14:22:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.221.12.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:53:8b:99:98:02:33:dc:32:5a:fa:1c:74:1d:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 14:22:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:6e:01:1a:c3:19:18:25:f4:36:d4:89:57:
c3:21:38:83:7e:15:a1:c1:08:b8:1f:ad:3c:ac:3c:
ec:5c:21:32:73:c6:65:ca:56:d3:f2:50:48:2a:e9:
ef:85:7f:23:b4:73:f3:5f:79:33:88:d9:67:a7:f2:
01:ae:7d:cb:51:e4:29:9d:5a:5a:06:4a:d7:52:96:
b6:cc:75:e9:10:7e:42:11:5a:e2:2f:16:73:14:6b:
5a:6d:84:1f:7e:c8:71:1c:d2:f2:29:e8:4f:bd:11:
7f:94:a3:be:14:f5:4f:5a:7a:c3:c2:b7:a5:19:06:
52:34:fc:2e:11:ba:40:6c:3d:5e:c7:be:c6:65:6c:
c5:e4:41:d9:0e:56:b8:8a:25:f3:d2:8b:17:58:4e:
f0:65:5e:54:a2:5a:fd:dd:5a:fe:4a:ee:48:fc:7d:
a7:e9:5e:8a:a7:6d:e4:9c:8b:3f:78:24:9d:18:6f:
a2:33:5b:87:d3:9b:5f:36:b9:c6:73:30:b1:be:ba:
1e:95:ef:7a:ee:31:fb:66:5c:d0:b3:01:f3:8e:1f:
da:87:e4:d3:ac:fd:6f:83:e4:64:bb:93:a7:18:cb:
57:c4:71:b2:96:49:d1:08:6e:2e:d6:c6:b1:4e:ae:
66:84:7b:fa:bf:9a:c5:20:61:81:87:55:12:71:80:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.12.0/23
Signature Algorithm: sha256WithRSAEncryption
88:5d:11:4c:71:1b:94:ee:b8:98:92:c2:75:4a:de:6b:6f:f7:
0b:36:81:1a:be:b8:29:87:0e:0a:52:32:a3:35:45:3e:1f:a1:
4e:b7:5d:a5:b9:97:37:05:43:82:10:d4:9a:e3:6d:03:f8:3b:
08:bd:3c:18:dc:0d:73:cc:74:c7:90:8f:ef:68:af:03:77:8f:
b2:e3:a0:02:0c:d4:2a:e1:e3:5f:a3:5d:c6:a0:1d:24:12:d7:
bb:e2:c0:26:aa:92:9f:cc:2c:99:22:ac:04:93:e4:80:c2:0e:
e6:0d:b3:6d:a2:0f:82:e4:e2:a5:77:d4:6c:97:b6:f0:0a:55:
c5:7b:9f:f3:00:a1:68:4b:a8:8f:87:32:ae:45:23:a8:d8:5c:
c9:3f:89:5e:94:04:68:3e:6a:27:2f:b0:51:b3:0b:a3:1a:37:
68:d5:0e:7a:9b:02:5d:7d:80:43:1d:52:0f:92:22:37:2a:ee:
25:61:8a:73:1f:64:1d:8f:2e:54:92:c9:26:a0:0d:d5:dd:30:
f2:ea:ec:56:5c:7a:84:a6:ce:71:89:93:93:73:3f:e2:08:89:
71:72:8a:ce:c3:10:e9:22:bd:8d:ca:bf:d6:26:be:66:4d:fe:
70:ed:2d:ae:d3:78:28:50:5a:54:5c:81:d1:be:78:28:60:5c:
77:a0:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:55:18 2025 by rpki-client