Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
File: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer (raw, json)
Hash identifier: iLe8Ihogqe7ysCkuHH8zWmEKYZGeeC5qReKJmYwsV0o=
Subject key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01970CED4B52BE80BE7B632864187C2BBDAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 May 2025 14:09:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215900
IP: 185.50.239.0/24
IP: 2a14:7b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:ed:4b:52:be:80:be:7b:63:28:64:18:7c:2b:bd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 14:09:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:fc:9a:c8:f2:12:9a:2b:30:ad:25:bc:ae:
0a:a7:c8:7f:14:66:8d:66:41:5d:df:ca:cc:8f:33:
b6:dc:d2:08:76:d9:1b:a9:6c:be:2a:05:5f:1d:e3:
8f:8b:85:93:b7:3a:b3:a7:e6:e8:91:31:86:14:39:
07:52:ae:e8:da:58:11:84:a6:28:71:f0:9f:7c:66:
27:10:4f:6b:24:77:33:15:ce:95:4c:fc:d0:92:55:
e8:62:5e:07:7d:26:b9:c4:12:98:8c:62:7f:17:4f:
37:b6:70:24:95:f6:fd:bc:4a:4a:a8:0b:c2:35:10:
f8:9a:71:01:c7:79:e8:bd:84:9f:92:af:1e:66:b9:
4c:64:90:04:19:1e:57:4d:60:b2:29:3b:b3:14:ba:
75:1b:fc:12:eb:c3:33:1a:90:22:84:e0:10:a3:f5:
9d:b9:31:36:a9:04:c8:fe:25:9b:f6:ee:5d:3b:6d:
f4:55:67:12:3c:b1:93:2c:44:7a:2a:cf:31:71:c0:
97:cc:96:73:92:94:ec:61:0a:7e:ef:1c:db:b3:40:
6b:0a:c7:24:77:48:8e:1d:f2:f7:60:0a:3a:e2:ac:
b3:a3:03:1c:0e:30:f4:bc:c8:25:7b:21:84:c4:6a:
33:a9:6b:89:a1:3f:e7:26:10:62:65:eb:01:e0:6a:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.239.0/24
IPv6:
2a14:7b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215900
Signature Algorithm: sha256WithRSAEncryption
2c:d3:9e:f9:5f:7e:ed:9d:bf:55:7a:5b:3a:c8:94:91:0e:07:
69:c0:61:6a:32:27:b7:7d:53:9a:96:27:90:ae:34:f6:ba:15:
db:c5:99:b6:c4:59:d2:42:42:fc:05:ed:3a:6d:0d:6b:35:fb:
5c:90:33:22:91:67:6c:4d:7c:e1:91:e0:c4:2c:07:fd:87:9a:
09:35:ab:d1:e3:da:df:41:3c:c4:73:fa:3a:75:05:dd:3b:58:
c2:68:ce:c5:c6:71:0d:4e:8e:e4:c9:7a:59:4f:4d:56:5a:d7:
8a:3d:40:bb:40:f9:c5:42:ed:04:86:86:a7:ec:c0:60:40:d8:
ac:64:83:2f:69:f4:84:9a:11:97:4f:6a:3b:d8:9e:d2:a4:87:
c1:6d:3f:c8:8e:41:b7:ca:8e:af:75:54:05:2a:05:c6:4b:b8:
05:d7:21:81:b8:6c:97:84:9d:eb:3e:cd:16:03:21:21:20:11:
26:b4:48:60:86:b2:37:5e:e0:15:6c:fe:f8:56:f6:c2:6d:d3:
95:a4:37:67:9d:29:a9:1a:03:7d:19:46:e5:18:47:8a:bf:5e:
b7:98:45:db:52:27:6c:37:a4:3f:7f:82:ff:26:63:bc:38:80:
9f:a1:43:75:c7:f8:fb:79:89:8e:7d:c4:e1:b8:45:fc:14:cb:
01:cc:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:42:20 2025 by rpki-client