Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
File: AEUKhqpPfvd-WnXdluyzwqaPrRw.cer (raw, json)
Hash identifier: r4AOela5o8aSpZ0mA1jlXrhmDST8WYLxxXBPdKQ0HcA=
Subject key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A6D6BE1D2359B0CFC3C8A7101E80F12C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Nov 2025 10:59:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50034
IP: 193.104.95.0/24
IP: 2001:67c:4c8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:6b:e1:d2:35:9b:0c:fc:3c:8a:71:01:e8:0f:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 10 10:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:39:99:9c:c6:d2:2e:f2:45:f7:1b:11:b2:
f0:0c:a8:39:3e:9c:81:db:73:24:6c:8b:2a:32:0f:
3f:34:3c:99:38:b6:9a:fe:59:27:ea:e9:88:f0:c2:
33:ef:9b:5d:32:f9:32:d2:b3:8f:38:30:f1:65:8d:
b9:f3:57:0d:13:8d:d9:48:59:8c:fe:66:3d:af:c1:
1e:0b:e9:e7:7a:e7:3f:c5:40:66:3e:dc:7e:25:3a:
ef:bf:81:b7:0a:c7:8f:08:10:53:f7:33:94:af:2e:
ee:7d:58:84:19:1d:3b:bd:1f:39:1c:89:f8:82:45:
51:6d:c5:b0:77:66:65:b1:fc:17:4e:18:12:11:7a:
5a:bd:33:c6:c9:54:1e:bd:4b:71:01:a5:34:0c:3d:
91:4f:a3:90:26:64:b8:bb:ff:5b:5c:83:0a:2d:9f:
64:47:07:63:e8:14:81:ae:50:c3:66:70:c8:2a:9b:
e1:90:f2:1f:2f:8a:8b:51:27:45:49:1d:7d:76:35:
f5:b8:56:b3:87:a3:e5:19:b9:b0:67:55:c7:c3:f9:
b9:85:08:55:1d:27:a7:60:c7:66:be:2f:55:3f:51:
3b:3f:1a:0d:35:b6:45:4f:82:20:62:90:99:3d:0a:
a4:d9:fb:f0:5f:b6:c8:a8:5f:ff:05:9c:64:13:66:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.95.0/24
IPv6:
2001:67c:4c8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50034
Signature Algorithm: sha256WithRSAEncryption
88:38:9e:ec:c0:32:a4:71:78:ea:9a:94:56:19:02:59:8a:eb:
4a:2a:66:47:81:99:ec:0c:9d:68:3f:80:1e:49:3d:1e:08:85:
52:ef:ed:e9:12:10:8e:62:65:92:d4:c5:45:30:98:9a:f8:36:
30:bd:13:c1:3e:9d:f8:57:71:09:bd:1b:6e:a8:ab:21:a3:77:
2b:14:7d:da:de:9d:7f:03:35:d2:91:36:aa:5c:df:5a:bf:49:
57:e5:33:b5:44:c8:36:0d:c2:9f:31:be:09:02:e6:15:52:86:
8e:38:a2:6d:e9:17:9c:f7:a4:b2:e5:97:6a:22:5b:7a:40:2d:
04:c8:b9:be:4a:59:ca:e1:34:d8:f0:16:53:20:eb:e6:b2:da:
36:ff:0a:54:ff:63:a2:c0:62:94:c0:6e:e2:1f:d2:52:3d:ad:
cb:9c:ce:01:e0:48:70:44:73:1c:7f:c4:f3:b4:6e:a4:67:30:
39:6b:4a:2e:cc:88:42:da:d4:27:db:f4:81:a9:2d:ff:66:f6:
30:d3:a2:69:66:58:0e:45:44:0e:c4:33:8e:9c:b5:13:cd:1e:
f3:97:20:c4:8b:f9:08:e8:b3:f5:89:70:90:77:c1:24:66:33:
9c:88:f3:46:b2:aa:97:05:43:f7:a4:e1:98:a7:64:c3:8f:67:
64:6e:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:28 2025 by rpki-client