Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.cer (raw, json)
Hash identifier: bxUjmxBURtj3BJf6ItlaGi/JZ00heISWgLwy9ibFLX0=
Subject key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D3B5FAF18E6BB36D947CA8641975C614
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 11:30:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212586
AS: 214019
IP: 79.174.2.0/23
IP: 185.97.215.0/24
IP: 185.231.234.0/24
IP: 2001:678:e58::/48
IP: 2a13:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:b5:fa:f1:8e:6b:b3:6d:94:7c:a8:64:19:75:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 11:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:bd:36:d3:ce:1e:5e:77:36:1f:ce:aa:24:
57:6b:b9:07:fc:db:01:a9:c8:80:63:c9:e4:26:8a:
ff:25:c9:7c:22:f4:ec:28:fc:a9:e9:85:85:a2:02:
f1:f4:91:48:1c:64:07:6d:9a:2d:5d:e9:23:40:f6:
96:eb:38:da:04:ec:62:b3:9a:aa:52:33:13:85:ae:
8e:07:96:22:55:23:11:7d:8e:30:72:92:6d:5d:b0:
b6:69:78:b2:26:9b:57:cd:87:61:f3:7f:b1:34:3b:
1b:c0:22:14:a2:3b:e5:b0:7c:7e:15:81:7b:48:7f:
9c:3d:71:4b:8b:78:18:d6:5f:1b:d7:f8:bf:83:de:
8f:98:48:5d:38:96:a4:62:74:1d:0b:7a:32:61:39:
e5:36:29:04:fa:c5:f5:f7:02:01:c0:d6:93:e6:39:
0f:de:ba:cd:40:4c:74:b4:e3:2a:0c:4e:b6:6a:ba:
c4:3c:dd:01:bd:35:e4:63:09:57:fb:3c:22:5b:1a:
93:3c:fa:5d:4d:31:8e:92:1c:be:8b:30:49:30:5f:
9e:32:65:96:ca:6a:d0:36:71:7a:45:4a:6b:b5:3e:
3a:42:74:a8:b0:18:e0:7f:42:a9:67:de:b1:61:d1:
31:5d:32:7d:31:1d:cb:b1:6a:eb:62:6e:3c:93:a7:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.2.0/23
185.97.215.0/24
185.231.234.0/24
IPv6:
2001:678:e58::/48
2a13:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212586
214019
Signature Algorithm: sha256WithRSAEncryption
45:ac:c4:c0:49:69:51:3d:66:8c:73:ad:b8:20:5f:4b:86:c8:
2a:f8:51:ca:8c:3a:73:96:d9:2e:62:9f:05:f0:31:9a:91:f2:
24:64:bf:ce:55:b7:83:48:9d:74:a2:20:05:6c:f9:80:95:f8:
eb:45:63:f0:f5:0d:ce:04:18:70:d7:c6:85:99:81:24:e3:64:
aa:58:2e:ed:38:1e:45:a7:9d:30:1e:c3:30:8d:27:14:33:d6:
ba:ca:e9:d8:70:d4:7c:3f:4b:7b:61:b2:5c:86:f4:7b:02:ff:
22:f0:b5:1b:d2:8a:d8:26:66:5d:dc:5f:e0:26:2c:8a:b8:5b:
44:97:82:e8:24:dd:1f:be:b8:b5:15:06:8a:1d:32:48:2f:9d:
4a:0e:b0:d0:b7:f0:72:af:a4:6d:73:47:d9:e0:20:d3:9e:2d:
10:6a:72:bd:31:01:7b:84:d5:8c:1d:67:7b:e6:c6:c1:b9:9f:
a1:c9:18:35:b1:d3:0d:b3:04:9a:c2:6f:9d:93:92:5b:5d:7f:
b0:ea:24:eb:31:5c:ab:fc:fe:36:41:54:a1:4c:c2:60:90:61:
a4:79:77:22:0c:8a:6b:21:07:f8:62:db:85:8c:e8:5f:d1:76:
76:15:63:79:71:a6:ad:5e:07:e5:17:29:71:25:0d:40:a3:78:
0c:d8:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:28:23 2025 by rpki-client