Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer (raw, json)
Hash identifier: 18r5G6jYbeQQaBi1nFp06UPfCsXmtozN9fbxnih4XN8=
Subject key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0609AFF17AF128FCC6F10D442C7E1F58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Oct 2025 09:11:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49798
IP: 91.219.132.0/22
IP: 91.221.4.0/23
IP: 185.140.28.0/22
IP: 2a0c:c500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:09:af:f1:7a:f1:28:fc:c6:f1:0d:44:2c:7e:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 09:11:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:64:3e:b9:cc:16:0a:ed:9c:09:c0:ad:79:
1c:80:7c:73:5a:68:2e:aa:7c:b9:c5:b1:a6:de:ff:
25:36:ea:d9:d6:2d:c9:72:67:5a:06:1c:13:96:df:
21:ed:49:16:e4:b7:be:83:7d:e4:74:e6:6e:ff:fe:
f0:87:b6:e6:ec:fd:5b:c5:86:00:80:e6:4d:6c:66:
c5:ea:91:0a:c0:82:e0:68:5e:fa:7e:6a:09:70:4d:
56:46:08:f8:c8:38:25:06:6a:60:cb:36:8b:3b:92:
83:d0:09:6f:79:38:a1:48:ff:6c:61:47:be:55:68:
ba:e6:3f:78:00:79:55:83:7b:ba:0d:15:f5:df:3f:
42:93:2f:c4:cb:f7:b9:79:7d:e2:cb:b0:75:75:59:
53:68:e9:57:51:3c:88:26:94:ce:ab:6a:68:d5:d1:
eb:4f:a4:05:3a:9a:03:0d:d8:0e:0f:3c:d3:42:68:
db:d4:c9:f9:98:c3:51:be:09:9c:01:0a:4a:5c:74:
79:a9:af:5c:32:ae:b6:4f:93:c0:d0:e0:7d:88:48:
16:b8:82:7d:65:e6:f3:b0:d1:14:9b:70:43:9f:e2:
78:02:86:26:86:d7:3d:a7:6b:f5:02:6c:e3:20:0d:
cc:be:04:38:8a:19:9f:76:4b:89:6b:eb:db:24:3e:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.132.0/22
91.221.4.0/23
185.140.28.0/22
IPv6:
2a0c:c500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49798
Signature Algorithm: sha256WithRSAEncryption
9e:6a:b0:fd:78:74:1b:14:b2:b0:95:dd:c8:82:05:1d:67:78:
99:1d:0a:0a:28:ca:84:19:72:e4:0b:f5:1b:cc:9a:e2:0d:0f:
4a:68:d6:0f:fa:1a:15:c9:61:08:61:2d:18:37:20:03:ac:1f:
54:41:4f:ee:43:35:b0:8f:85:8b:57:9c:56:1c:91:39:32:b2:
6b:b4:61:6f:d8:1d:a3:0d:de:2e:0c:ad:79:0b:66:44:2f:94:
d1:0e:02:73:c6:5b:0a:59:5b:16:a6:b7:b2:5d:93:2c:66:47:
4b:ba:00:52:a9:92:26:61:9f:30:34:1d:25:6e:41:f6:58:46:
b7:a3:5c:75:a2:5a:45:e1:be:93:1f:c1:6c:ac:93:66:2b:30:
b4:98:5d:62:cd:8a:9d:b5:a7:5e:98:e0:c0:79:b5:3d:f2:38:
60:d8:1d:c1:f5:65:af:ae:b7:da:cd:bb:42:72:74:6a:f1:d4:
7b:44:f5:a6:e0:02:ff:f0:01:9a:10:fa:c5:1f:9b:7e:33:44:
80:d0:46:4a:7d:7a:2b:fc:10:c0:37:b9:15:17:42:8d:bf:fd:
45:b3:f0:b4:b3:76:7c:81:4d:00:4e:c9:a1:6a:ca:6b:14:4b:
2f:f3:21:28:7b:b2:54:4c:26:25:1a:70:91:f4:b0:b8:04:ca:
c7:70:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:53:23 2025 by rpki-client