Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
File: 10itqKdHT1rZkMmB_2snzj3hRxM.cer (raw, json)
Hash identifier: b8FTAJma3u+JN5dI5b238DQOfh4mGOwoyKaG4CCrsA8=
Subject key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0BB968DB361BB74B35A82332AB3D755C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Oct 2025 11:41:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48812
IP: 95.129.24.0/22
IP: 2a0f:3f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:b9:68:db:36:1b:b7:4b:35:a8:23:32:ab:3d:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 11:41:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:2d:76:41:ad:ea:54:43:89:b3:5f:6a:87:
5f:7a:6a:0a:99:d6:3e:fb:0c:50:c2:93:f8:b6:14:
52:75:ef:92:fa:40:1f:d6:67:00:91:6f:fb:7c:0e:
d0:7b:d2:d9:0c:30:c3:b6:d9:12:01:42:74:c3:8f:
62:5d:f4:b3:be:88:50:c7:fd:62:91:1c:2e:7d:8a:
0a:1b:40:70:db:23:b1:09:63:b0:56:4a:72:d5:58:
de:81:a2:96:a6:f5:ae:89:fa:f9:f9:2d:12:39:0a:
9d:f8:eb:4e:07:95:ab:29:10:a8:d5:cc:74:46:4a:
e1:ad:4b:9c:11:9c:b3:45:ea:b9:11:d2:db:5f:c9:
07:9e:5d:17:3b:4f:47:0d:00:16:5c:06:02:9d:61:
a1:6c:2b:b5:d1:a0:d3:b0:6c:73:f0:10:d6:01:47:
80:08:18:3b:47:5a:ed:e6:15:e5:55:0c:60:87:aa:
5a:05:2d:68:ff:77:9b:b9:b3:0a:13:1f:91:f1:6d:
ff:28:61:30:53:24:e2:70:7c:12:d1:96:d4:b6:02:
8c:18:10:ec:b3:23:60:4e:60:57:c3:a0:ec:88:be:
4d:a7:a8:58:ba:46:bd:9a:fa:8f:d7:a7:ed:b5:c8:
f4:cc:7a:42:61:08:90:73:c6:09:52:62:bc:a2:4a:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.24.0/22
IPv6:
2a0f:3f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48812
Signature Algorithm: sha256WithRSAEncryption
71:6e:e5:c1:35:dd:1c:84:c7:a1:1e:02:bf:bf:ba:a6:cd:06:
3c:05:f0:13:f8:21:b3:60:ce:36:a7:17:c7:85:3e:25:d8:16:
fe:09:3a:9d:ee:2c:6d:06:93:39:f6:32:c5:0d:ac:e3:8b:d5:
aa:a5:16:62:d4:de:cc:5f:4e:9a:f5:9e:e5:5c:b6:a6:ee:2a:
be:78:c6:f7:d2:d4:fd:cd:b1:1b:cf:d6:ad:f5:f7:e8:77:89:
00:f1:bf:eb:f5:bc:1a:8e:67:47:2e:e3:19:6b:ff:ff:59:eb:
2f:6e:d0:2d:86:49:aa:1e:63:9b:c2:fd:58:f3:0f:aa:3d:46:
b9:45:48:b3:3e:f0:2b:1b:79:bf:de:da:3a:24:63:d7:e2:9e:
06:8f:f7:59:f8:6c:09:d6:76:68:8a:3f:8e:f0:f9:27:c1:96:
01:78:11:33:6a:3c:b5:57:4e:61:23:57:a5:1b:3f:8a:d7:48:
22:6f:79:cf:bd:6d:cb:2f:34:f3:1d:5d:ae:cd:d6:b5:58:82:
57:ad:ba:c1:82:91:38:a8:2f:c8:ac:07:34:65:e3:41:ea:b5:
ad:41:cc:e2:ea:4f:c0:3c:b1:b7:be:3c:cd:2a:a0:dd:5a:cd:
3a:d8:94:11:7c:60:74:2b:9d:9f:6e:cd:df:d0:21:df:86:3e:
81:a5:ba:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:00:09 2025 by rpki-client