Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer (raw, json)
Hash identifier: tC0Ef6mtjjV0GG2DKnF8Nblv3ds1lkMfKqrWT8sniRQ=
Subject key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D3009407204856BFC279D186F35EF110
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 08:12:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216227
IP: 217.65.68.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:00:94:07:20:48:56:bf:c2:79:d1:86:f3:5e:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 08:12:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:57:78:ca:c1:a0:5e:cd:eb:73:e2:96:cd:
d1:b0:f6:e4:1d:ef:e3:25:a2:53:ce:0d:1e:45:1d:
5f:31:7b:84:35:e4:eb:b7:a2:a4:c9:82:21:f5:f3:
78:42:89:b9:f4:17:56:a6:f6:d3:ff:47:63:15:a7:
d0:44:89:ff:92:6e:2c:4f:d2:27:89:be:f8:4b:81:
53:9d:ba:e3:15:e8:dc:f4:f1:dd:91:9f:c5:8a:ea:
3e:b5:84:0a:23:bc:9d:49:fa:c3:e1:1d:3f:db:6a:
61:48:9a:91:38:d1:0c:67:7d:2c:51:11:70:d6:77:
b5:6d:b8:66:5f:85:32:a1:be:bc:ab:0d:a4:cf:42:
04:f1:44:53:af:45:85:9f:91:db:71:06:d3:3a:e5:
a3:0b:c6:6f:81:a1:f7:5a:a0:54:f0:a1:16:ec:9d:
5f:29:08:17:bb:5c:de:88:1e:99:ca:09:3d:59:da:
f5:82:a2:be:80:60:ab:e7:07:71:ef:cd:32:04:9f:
98:ba:09:10:48:a0:3d:ee:73:c2:0d:32:a2:17:89:
1a:35:39:eb:48:64:76:90:26:59:ae:67:52:e2:b6:
cf:9c:ed:85:f0:7d:8b:a0:f4:f8:ac:70:2a:f0:dc:
f4:23:6c:cc:09:19:4b:70:f4:67:dd:87:97:92:86:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.68.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216227
Signature Algorithm: sha256WithRSAEncryption
47:d4:86:25:26:25:25:06:d2:01:56:ee:bf:f4:53:8f:28:a9:
f1:cf:cd:01:67:f3:9f:20:8b:4b:1d:b1:1a:2f:55:93:ee:65:
9a:5f:98:fc:1d:19:fa:38:57:6c:c3:46:f1:6a:99:25:ec:80:
00:79:de:ff:75:1d:97:b3:b2:92:24:aa:1c:5c:99:4c:4d:09:
d4:82:39:13:17:bf:81:78:d3:6c:c8:27:6c:4e:45:3c:88:32:
cd:25:af:cd:8f:b7:01:39:b3:73:25:f3:45:d0:c1:bc:2b:bf:
c5:cb:6a:92:ba:08:8a:cd:26:b1:b4:6b:a1:91:a1:54:3c:97:
51:d4:f4:05:ba:d9:19:15:43:18:92:1c:af:a5:4a:88:d8:5f:
3e:42:44:c1:6f:33:d6:85:1e:54:78:a3:13:2b:64:80:47:df:
7a:44:7b:7e:16:00:89:10:0e:5b:fa:10:d1:34:ff:7e:bf:2b:
16:4a:e3:90:13:44:db:b8:d5:4e:dc:9c:b4:9f:97:8d:f9:e7:
e3:b7:1e:7e:44:b9:67:6b:c4:de:56:c5:c7:01:98:f9:db:24:
37:d6:5c:27:d9:f8:e7:10:d4:de:e9:04:c1:fd:e9:cc:b2:12:
1e:f7:fd:82:9c:11:70:1c:ca:1d:28:20:79:da:87:fb:db:12:
59:f0:4d:5d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZbTAJQHIEhWv8J50YbzXvEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTE1MDgxMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzIxYmYyNGZmMDI1N2IzZDA1Y2Y3MDI5MGExYWNmODdjZWE2NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/NXeMrBoF7N63Pils3RsPbkHe/j
JaJTzg0eRR1fMXuENeTrt6KkyYIh9fN4Qom59BdWpvbT/0djFafQRIn/km4sT9In
ib74S4FTnbrjFejc9PHdkZ/Fiuo+tYQKI7ydSfrD4R0/22phSJqRONEMZ30sURFw
1ne1bbhmX4Uyob68qw2kz0IE8URTr0WFn5HbcQbTOuWjC8ZvgaH3WqBU8KEW7J1f
KQgXu1zeiB6Zygk9Wdr1gqK+gGCr5wdx780yBJ+YugkQSKA97nPCDTKiF4kaNTnr
SGR2kCZZrmdS4rbPnO2F8H2LoPT4rHAq8Nz0I2zMCRlLcPRn3YeXkobDXwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAMhvyT/Alez0Fz3ApChrPh86mQ5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2IzY2I0
Yy02ZTM2LTRjNDgtOGZkZS05NDA0NmFhYmZmOWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvYjNjYjRj
LTZlMzYtNGM0OC04ZmRlLTk0MDQ2YWFiZmY5ZC8xL0F5R19KUDhDVjdQUVhQY0Nr
S0dzLUh6cVpEay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA2UFEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNMozANBgkqhkiG9w0BAQsFAAOCAQEAR9SGJSYlJQbSAVbuv/RTjyip8c/NAWfz
nyCLSx2xGi9Vk+5lml+Y/B0Z+jhXbMNG8WqZJeyAAHne/3Udl7OykiSqHFyZTE0J
1II5Exe/gXjTbMgnbE5FPIgyzSWvzY+3ATmzcyXzRdDBvCu/xctqkroIis0msbRr
oZGhVDyXUdT0BbrZGRVDGJIcr6VKiNhfPkJEwW8z1oUeVHijEytkgEffekR7fhYA
iRAOW/oQ0TT/fr8rFkrjkBNE27jVTtyctJ+Xjfnn47cefkS5Z2vE3lbFxwGY+dsk
N9ZcJ9n45xDU3ukEwf3pzLISHvf9gpwRcBzKHSggedqH+9sSWfBNXQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:57:15 2025 by rpki-client