Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
File: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer (raw, json)
Hash identifier: NuTjdHhDrEG58vsjY4VuEDbZrNLHiaZRmoG+kLxyRA0=
Subject key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A32B05C00FDF466F3F62EF0D63BD45FF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Oct 2025 01:16:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197204
IP: 46.29.8.0/21
IP: 91.224.204.0/23
IP: 91.231.161.0/24
IP: 185.18.108.0/22
IP: 185.78.116.0/22
IP: 185.105.168.0/22
IP: 185.251.148.0/22
IP: 2a01:4360::/32
IP: 2a03:5c80::/32
IP: 2a05:6980::/29
IP: 2a0c:1ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:b0:5c:00:fd:f4:66:f3:f6:2e:f0:d6:3b:d4:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 01:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:13:d3:61:3f:84:40:d3:b8:11:c3:85:c7:
7c:d7:c4:ea:8a:dc:9a:d1:4e:80:55:03:7f:37:89:
58:4d:29:8b:f2:2f:94:b5:ac:8e:fb:a8:e7:10:26:
65:28:ad:26:4e:e0:28:d5:5a:e2:22:fd:d9:63:a0:
17:ff:0a:77:f9:af:3c:9a:fc:3d:eb:ec:40:29:51:
50:0d:33:43:64:00:f4:46:7f:3a:89:e9:87:fe:8a:
cf:95:2d:2d:b7:e9:e4:ac:17:96:5a:d0:01:82:eb:
8a:5b:66:7a:2b:0d:3b:1a:fc:a5:44:8c:e7:56:0b:
29:a0:a3:19:a2:28:1b:7c:68:36:15:8f:83:d2:1c:
34:ac:15:44:14:63:13:ae:31:f1:5a:9f:29:3d:f8:
ef:2c:8c:7e:09:87:6f:1b:80:fa:bf:e3:d4:13:e6:
e9:e3:88:b6:68:5a:ac:0e:1a:22:a0:df:49:f3:2d:
a0:b3:50:32:a7:b4:03:63:50:53:2e:5c:a8:8c:dd:
17:c6:c2:eb:30:e9:9f:fb:8f:6b:9a:56:9c:18:29:
71:04:2b:d9:42:f7:6f:58:0d:d6:ce:30:9d:97:99:
f1:10:4c:98:6b:26:78:08:ab:8a:01:6f:95:b0:06:
e2:9c:6f:48:a3:a3:43:68:10:c9:5d:ba:68:19:3c:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.8.0/21
91.224.204.0/23
91.231.161.0/24
185.18.108.0/22
185.78.116.0/22
185.105.168.0/22
185.251.148.0/22
IPv6:
2a01:4360::/32
2a03:5c80::/32
2a05:6980::/29
2a0c:1ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197204
Signature Algorithm: sha256WithRSAEncryption
43:8f:47:3f:c5:e6:13:5d:54:f5:b5:de:43:3e:a6:3d:15:43:
af:52:b1:f0:66:d1:8e:36:9d:20:b4:c9:fc:ba:aa:31:93:cb:
47:93:5c:a3:56:b4:c4:f1:75:63:31:1b:e8:12:8c:ff:36:93:
02:65:f8:2b:47:bf:f8:aa:4e:18:01:9b:a0:29:ba:13:eb:51:
be:7f:7e:8e:29:8a:9c:b7:56:f7:8b:1d:07:c3:7d:9c:a3:95:
8b:01:ae:5e:8d:8b:e2:19:b3:2e:a0:78:1d:42:d9:05:ca:67:
38:f4:ad:42:19:bb:b3:a4:4d:7f:a1:a9:7b:a7:ea:08:e1:d7:
8a:2a:0e:81:39:2b:21:74:da:fc:69:67:bf:33:e0:b2:e8:92:
d5:d5:ea:e8:50:85:11:0f:8c:0d:51:f5:81:fd:ea:4b:9e:c8:
f6:cb:aa:af:32:ea:44:0c:75:13:b3:6d:51:65:fb:0e:ab:ae:
83:05:43:5c:d4:62:79:cb:df:b9:37:88:9e:f2:12:2f:90:a2:
5b:14:60:95:80:87:11:71:33:d2:32:dc:1c:50:67:2e:28:8a:
8d:e1:fe:d5:f4:d4:d8:cd:56:a3:52:58:37:05:46:a2:da:a2:
fb:68:09:ae:c0:99:6a:2e:15:29:14:2e:b8:a5:29:47:bd:5d:
e7:9f:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:43 2025 by rpki-client