Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
File: ISuozPNF7vDc99AVSSCBjzGcJfg.cer (raw, json)
Hash identifier: v+wRvuTUFzayBCeuVW6CliLITAAQ6jMziLTHwuRSRM8=
Subject key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A6DFC7994B26A653B86B0D3691FBBB031
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Nov 2025 13:37:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204255
IP: 2001:678:1120::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:fc:79:94:b2:6a:65:3b:86:b0:d3:69:1f:bb:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 10 13:37:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:05:fe:32:3a:85:d1:30:f4:ea:d8:7d:d6:
5c:71:db:15:f6:5b:f0:fd:2d:2b:bd:28:03:74:d6:
f9:4d:3c:4e:9c:87:a2:68:52:57:68:66:06:1c:65:
a7:67:30:93:a3:a7:e6:e5:37:66:5f:c8:07:d8:02:
d1:ac:e7:c1:8a:e6:8f:90:5d:39:79:27:ec:07:ae:
66:90:94:e6:3a:4f:86:6d:41:ed:fc:b7:0d:e4:f3:
77:a5:1f:75:bc:0a:b9:e9:c2:48:b2:03:02:e8:f8:
8b:31:77:c0:1e:da:0a:bf:18:a2:53:26:e7:61:9e:
1b:5b:d4:b1:e1:c2:29:47:b4:49:b2:3d:be:fb:15:
94:35:ce:cb:76:48:24:46:46:d2:e4:e1:9d:f2:af:
a3:1e:14:e9:14:e4:dd:94:df:68:bb:1f:d3:c1:f3:
54:1f:34:69:42:70:53:6f:c1:0a:26:6b:17:73:3b:
3c:5b:d8:77:6e:5f:11:03:a2:f3:9b:1e:7a:6e:23:
6e:06:36:be:a6:a9:87:84:bc:b3:d2:4d:3b:41:78:
c7:71:fa:7c:fd:32:78:9b:db:b2:ee:59:3a:e1:19:
01:a2:d5:d0:8b:a2:9b:c0:54:a7:68:30:88:dc:44:
69:71:89:e0:6c:08:d7:fd:af:dc:b8:58:96:e4:2b:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1120::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204255
Signature Algorithm: sha256WithRSAEncryption
ac:f7:e0:71:c1:71:01:0f:e9:7c:5d:11:ae:0c:6e:d4:2a:56:
bf:88:a3:13:eb:67:63:0f:58:e0:4f:ee:ef:de:b0:ae:a7:85:
5b:fc:58:60:10:2c:e3:a8:5f:b8:c6:31:76:7b:65:b4:8f:99:
99:90:95:06:e9:ff:78:81:3d:18:a0:88:3d:a2:c5:de:73:30:
64:f9:6f:92:06:a8:85:35:3c:a4:13:5b:cc:8f:80:b4:58:3b:
64:93:b5:1e:36:b5:a0:fb:a0:63:a8:f0:7f:42:c3:aa:81:3e:
94:76:f9:5f:04:b8:44:5a:36:4f:23:96:24:35:86:5d:f1:c2:
0e:30:4e:86:2e:29:c5:3d:38:fc:c1:a8:0e:cc:0e:10:aa:34:
ef:18:22:5d:a0:57:79:db:c7:b4:64:c5:5d:58:01:77:d9:c1:
01:82:ad:c6:93:30:f5:ef:fb:f8:99:38:7c:3f:71:c1:c6:f4:
91:8e:34:5c:41:ce:52:f0:51:27:fd:21:c8:da:6d:29:64:80:
e6:86:f2:f7:fe:a9:57:98:d8:c8:bb:2f:d6:ed:63:02:62:03:
0a:49:67:fe:c5:55:ec:12:34:be:f8:03:ba:36:41:a7:bd:5c:
30:26:3d:56:04:fd:73:66:dc:70:8d:e3:5f:c4:bd:1f:34:55:
d9:e7:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:56 2025 by rpki-client