Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
File: AhtowZzVXWul-GX7DdDW-MnZ49o.cer (raw, json)
Hash identifier: gZ6MMc9e9oWwEXcZgnsWD327Y6OnOcxq+0iDKPa8uso=
Subject key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDB4B7E3732532EF3252E58A6189E3F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:39:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210587
AS: 210620
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:b4:b7:e3:73:25:32:ef:32:52:e5:8a:61:89:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:58:7d:4a:1d:43:82:f7:96:c7:d1:a3:63:
ce:e2:1f:47:f3:86:a7:f1:c1:f3:78:08:5b:ab:1b:
75:b5:a3:e4:2e:07:71:ea:30:70:bd:4c:73:79:e8:
1c:ad:c9:fd:56:d3:8c:29:e5:6a:ed:1b:34:91:b0:
91:cb:c0:32:fc:7b:8d:e1:47:4d:f6:b4:35:90:04:
27:25:01:46:94:a3:a0:c0:1a:a1:fd:97:9f:a1:2a:
43:2b:79:45:36:d0:5b:f2:a9:98:62:bd:ed:9c:3e:
61:39:93:c3:73:37:0a:4b:92:43:0a:c2:33:46:7c:
2a:05:f3:87:4e:49:c0:a5:4e:b7:cf:98:a9:74:ae:
85:ae:43:ec:1f:19:b5:20:2e:dd:7c:d4:f1:82:82:
9d:a8:e8:61:ee:e5:3d:72:2e:94:e8:23:2c:4a:91:
9a:d6:81:ca:6c:c0:35:d7:03:35:6e:c7:9b:0a:7b:
04:97:e3:87:33:b3:94:1c:3d:3d:52:01:01:c7:7a:
4e:69:cb:12:15:68:3b:b7:36:2d:6a:90:6e:02:f8:
53:71:7d:b8:81:0b:2c:ad:80:2f:22:94:8b:0b:ea:
1a:04:36:77:bf:d8:db:ee:a1:72:54:a4:73:48:71:
99:b5:60:bf:33:02:36:b7:8e:68:93:88:7f:c7:7c:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210587
210620
Signature Algorithm: sha256WithRSAEncryption
6a:27:d9:7c:d9:e8:1b:89:5c:4a:a5:89:82:27:9b:a0:45:56:
c7:08:0e:03:45:03:a4:ed:f9:14:dd:0d:55:2f:2e:65:15:28:
be:a0:ce:d3:29:e4:6c:9c:ee:ef:69:a7:bf:14:0f:24:1c:f4:
99:76:db:bb:cf:fb:1b:0e:ae:14:05:ad:23:2f:e7:bd:38:57:
ce:65:f5:df:d1:54:f9:d0:79:07:6f:31:cf:d6:5e:b6:80:ec:
43:fd:b1:87:5d:7e:69:3c:5b:03:c9:bc:34:97:ee:ca:bc:4f:
a6:8c:f6:de:05:4c:aa:0a:66:d6:c2:49:2d:d0:31:16:51:c6:
05:98:a5:9f:f0:12:87:2a:4f:81:05:b3:72:f5:93:f3:4e:31:
0b:ce:23:c2:17:48:71:70:9d:a9:4c:a4:5a:96:ca:2d:61:aa:
66:bf:ab:ef:8f:1a:bc:9c:40:9e:f1:77:69:cc:bd:72:0c:e5:
30:f3:98:f6:9c:da:e1:b9:31:81:54:28:3a:90:c6:b4:4c:2c:
43:c6:4a:49:92:c5:a7:10:2e:87:0b:28:f1:4d:7f:ba:1a:df:
38:85:a9:c5:fa:cd:cb:69:30:e6:3f:7e:78:0e:a7:b6:04:50:
50:93:01:80:cb:12:dd:74:96:3f:c2:b3:fd:fa:6e:97:04:85:
2c:62:aa:47
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZbttLfjcyUy7zJS5YphieP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTIwMTIzOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjFiNjhjMTljZDU1ZDZiYTVmODY1ZmIwZGQwZDZmOGM5ZDllM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkBYfUodQ4L3lsfRo2PO4h9H84an
8cHzeAhbqxt1taPkLgdx6jBwvUxzeegcrcn9VtOMKeVq7Rs0kbCRy8Ay/HuN4UdN
9rQ1kAQnJQFGlKOgwBqh/ZefoSpDK3lFNtBb8qmYYr3tnD5hOZPDczcKS5JDCsIz
RnwqBfOHTknApU63z5ipdK6FrkPsHxm1IC7dfNTxgoKdqOhh7uU9ci6U6CMsSpGa
1oHKbMA11wM1bsebCnsEl+OHM7OUHD09UgEBx3pOacsSFWg7tzYtapBuAvhTcX24
gQssrYAvIpSLC+oaBDZ3v9jb7qFyVKRzSHGZtWC/MwI2t45ok4h/x3xJSwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAIbaMGc1V1rpfhl+w3Q1vjJ2ePaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzljNjE2
Ny1mZjlkLTQ1MWItODRlYi03NzcwZTc5MDcyMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvOWM2MTY3
LWZmOWQtNDUxYi04NGViLTc3NzBlNzkwNzIwZi8xL0FodG93WnpWWFd1bC1HWDdE
ZERXLU1uWjQ5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwM2mwIDAza8MA0GCSqGSIb3DQEBCwUAA4IBAQBqJ9l8
2egbiVxKpYmCJ5ugRVbHCA4DRQOk7fkU3Q1VLy5lFSi+oM7TKeRsnO7vaae/FA8k
HPSZdtu7z/sbDq4UBa0jL+e9OFfOZfXf0VT50HkHbzHP1l62gOxD/bGHXX5pPFsD
ybw0l+7KvE+mjPbeBUyqCmbWwkkt0DEWUcYFmKWf8BKHKk+BBbNy9ZPzTjELziPC
F0hxcJ2pTKRalsotYapmv6vvjxq8nECe8XdpzL1yDOUw85j2nNrhuTGBVCg6kMa0
TCxDxkpJksWnEC6HCyjxTX+6Gt84hanF+s3LaTDmP354Dqe2BFBQkwGAyxLddJY/
wrP9+m6XBIUsYqpH
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:32:33 2025 by rpki-client