Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.cer (raw, json)
Hash identifier: gPs+YZdUohvXR6Y5qPw111cpuw05W6MI+PMAOAaBhVA=
Subject key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A3523300312B24A9DD6B5EDC3F02EDB72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Oct 2025 12:41:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215573
IP: 46.245.233.0/24
IP: 185.246.176.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:23:30:03:12:b2:4a:9d:d6:b5:ed:c3:f0:2e:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 12:41:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0d444bc7d5334da14de805172b2625e9830763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ce:b0:c7:8d:d9:de:3b:91:db:7a:32:02:
52:88:3e:86:87:9f:be:f6:29:ad:77:86:12:ad:ac:
7b:60:23:a0:cc:91:d9:d0:39:d0:b4:3a:7e:59:ef:
ad:7a:6a:58:6d:85:c4:92:19:39:21:6a:b3:ef:1c:
90:e3:c4:b8:53:27:67:cf:18:e4:77:34:b2:b2:24:
73:1e:70:d6:04:d3:91:fc:7e:b3:ed:a8:78:f3:ee:
e6:3f:fb:1f:31:19:47:23:b3:71:4b:49:21:1b:1c:
fb:8b:d4:95:ad:9a:fa:f8:14:98:ee:73:9f:c5:e7:
71:6f:b7:48:c0:4e:ad:71:f8:5b:30:af:97:d1:a0:
fb:39:cb:39:cb:d8:80:50:4d:da:10:d3:fd:bd:77:
91:98:ef:30:c1:ae:d2:79:29:45:68:76:90:ea:e5:
9a:71:2b:6b:83:02:1e:66:ca:f1:77:99:3b:3c:0b:
87:0a:f1:f1:fe:dd:22:87:c0:dc:8e:51:8a:9d:8e:
84:10:1a:12:10:a4:0a:3b:53:96:54:1d:a2:e1:d3:
b6:cf:3e:17:69:4c:be:13:dc:4a:11:80:10:16:89:
c3:e6:45:80:9d:d5:fb:38:a1:5b:80:66:51:97:14:
3c:aa:d4:a7:45:85:9a:10:3a:f9:ba:da:ff:a5:40:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.233.0/24
185.246.176.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215573
Signature Algorithm: sha256WithRSAEncryption
5c:4e:63:88:f6:6d:32:5a:38:03:fb:bc:8a:2c:c9:ef:93:9e:
a0:3d:97:5a:15:66:f6:a2:1f:6f:53:41:80:4e:30:dd:c2:fd:
cc:21:e7:54:9f:ae:7b:ea:87:26:2f:11:a2:59:d7:61:af:2e:
a8:f9:a5:7f:41:d3:0d:4f:27:c4:ef:c8:59:d4:5e:ee:76:9a:
63:53:06:26:65:ae:08:4f:68:6b:76:27:0f:0a:b1:71:94:fa:
79:2e:e1:27:74:c1:36:a9:5e:21:e1:7a:08:ef:01:d8:27:14:
11:2a:d9:2a:ee:39:3c:94:78:94:c0:94:f6:8e:83:cb:4d:70:
92:ad:79:6d:d6:a5:38:12:3c:aa:ce:d7:c8:b3:6c:97:17:56:
64:ca:f6:78:3c:c9:a4:80:05:55:77:76:88:af:c1:08:85:1f:
a0:02:b6:a5:b8:6c:c8:2c:75:8f:41:72:b0:63:6d:dc:48:27:
63:4c:e5:cc:d5:23:d7:89:30:95:e8:50:77:dc:c0:43:d7:90:
f7:53:30:1a:a1:a6:fc:fc:bc:8e:be:50:4c:6e:64:dc:63:34:
73:32:c0:50:e3:f0:aa:2f:02:8c:cc:6d:02:f3:f3:b6:38:6c:
a9:7e:cf:cd:39:f2:3c:8f:51:a8:49:d7:e9:ba:10:37:59:db:
3b:48:c1:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:42 2025 by rpki-client