Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.cer (raw, json)
Hash identifier: Ic7MI68jdkCRrxFipSXfj+OG/aHB30+W9ZHrtczoDDs=
Subject key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A54FE75D26948B307AAFCC310502B0662
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Nov 2025 17:09:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49573
IP: 185.211.188.0/22
IP: 2a0b:6940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:fe:75:d2:69:48:b3:07:aa:fc:c3:10:50:2b:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 17:09:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:f5:03:31:74:ab:ab:b0:7d:af:1a:28:44:
96:41:22:13:f9:a3:84:e0:e8:29:07:72:d2:0d:5b:
96:fe:65:50:66:ee:a4:96:ac:53:83:32:2a:eb:51:
e9:53:f6:75:2c:55:ff:06:c6:91:20:5f:cf:c2:aa:
60:ae:cf:a4:55:a6:56:c0:0b:3a:3b:5d:56:6d:5c:
86:10:1a:88:4d:63:4d:1a:2f:67:da:99:9d:89:40:
bc:ef:c2:6b:bb:98:fd:d8:81:03:71:eb:15:f2:21:
18:25:e6:37:3d:69:79:c0:5d:3d:20:49:b7:9e:74:
e4:b7:3a:b2:92:34:1d:8b:ca:d7:02:a2:0a:24:d9:
66:54:73:f9:35:3b:cd:1d:b7:4d:7a:33:0f:c4:9b:
ba:da:7d:3d:0b:28:f5:25:5f:26:40:6d:87:ab:fc:
db:d0:72:78:9d:9f:70:a9:a4:60:cd:dd:c6:29:1a:
4c:5e:f1:e7:77:eb:35:ce:c6:30:28:94:2a:3e:fc:
08:8c:46:c2:df:82:1d:94:11:b0:8f:2a:e2:5f:a5:
91:95:b6:ff:d0:42:d9:1f:41:8b:7e:47:64:05:ed:
25:49:cd:c5:6b:89:5a:48:02:13:19:79:22:9f:2c:
56:f3:15:b5:8e:22:4f:cf:f4:77:68:f4:ef:77:9f:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.188.0/22
IPv6:
2a0b:6940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49573
Signature Algorithm: sha256WithRSAEncryption
60:60:d1:b1:09:b8:9a:1a:3f:9e:33:b4:cb:73:da:5b:ff:02:
6c:14:47:bc:c9:5b:15:7e:10:16:3c:39:01:f4:5f:b4:11:39:
97:2e:74:ab:8d:31:b7:70:08:ca:5c:28:26:bf:11:7e:a7:94:
8e:02:fc:a3:26:ae:7c:45:2f:1e:fb:dd:19:bf:ae:24:82:fb:
12:73:b0:fc:7f:63:1f:2f:ec:7a:bb:a1:65:c8:62:ac:97:8b:
f1:8f:87:1c:21:e9:61:25:f7:e4:17:f2:a9:90:2e:d9:04:26:
52:82:4d:7a:af:99:d8:fe:ce:8c:e8:10:94:33:1a:4d:32:77:
30:f6:ee:e1:68:ff:04:82:32:f8:51:e1:0f:ab:94:95:2d:b3:
e7:26:9c:e8:2b:be:c7:f7:93:5d:57:ae:2a:08:45:a7:4f:d1:
e8:9e:67:91:46:92:9e:57:87:8b:5c:f9:69:6a:19:10:69:ac:
96:0f:a7:90:c5:16:51:3d:87:b6:99:7a:a1:8c:c5:f6:fa:51:
3e:06:77:25:dc:c5:c5:92:d3:33:e6:5b:d3:f5:b9:a0:3a:b6:
c4:7f:5b:35:05:03:01:55:6b:2f:ed:40:68:e4:fb:12:b5:2d:
1f:53:79:29:7d:77:db:0f:5e:d7:a2:88:a1:ec:08:b3:61:c8:
d2:f1:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:44 2025 by rpki-client