Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
File: IyOUGrruEMnSxK69z7jHUfw7bXk.cer (raw, json)
Hash identifier: v0EBC4Rsx6BK2eWUFqvDp7QVPxzQB+l4QwqWeUEhB/k=
Subject key identifier: 23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01996AB36BC55BB62AA5876A8F6581999B2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 21 Sep 2025 05:16:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210352
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 15:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6a:b3:6b:c5:5b:b6:2a:a5:87:6a:8f:65:81:99:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 05:16:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:a5:33:9b:8c:52:d8:ea:62:55:1e:7b:6a:
c6:ca:4f:82:9a:1a:0b:65:df:fa:1e:f5:20:48:bc:
5e:61:22:7f:ce:af:22:19:9a:98:c5:4b:9a:ae:e4:
5f:7f:b2:b6:60:5a:d5:3d:3d:af:f5:5d:7b:52:45:
93:47:0e:45:11:37:86:aa:31:9e:ee:3d:58:56:a9:
5b:ff:93:bb:db:09:8d:c8:3a:75:6c:28:5d:2c:00:
c3:bd:cc:c6:8b:0e:09:42:ce:87:8a:ab:1f:71:17:
0a:1a:1f:f3:81:ee:9f:cb:46:00:06:2a:65:1e:f3:
82:54:b4:26:45:d3:b3:78:96:48:cc:b9:c6:12:cc:
29:4c:5a:13:fd:d3:d2:d2:62:50:08:31:1b:e7:a4:
2d:d0:d3:df:47:78:98:9e:bc:c1:5c:34:01:6a:6c:
68:a9:02:cc:a6:9b:46:bb:e5:46:37:18:8b:59:72:
3e:cd:af:cd:66:f0:26:55:06:19:0c:a9:1c:b1:2f:
91:9f:21:5a:26:d1:64:fe:cc:80:86:1d:c7:eb:c7:
65:d5:80:08:36:5e:aa:57:8b:8b:69:ea:75:2f:97:
eb:65:d9:f3:93:e6:7f:5d:8b:2f:9c:5f:59:12:2c:
8f:9f:be:40:f6:0b:b9:5e:e4:78:ee:d4:7b:0e:c4:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210352
Signature Algorithm: sha256WithRSAEncryption
4e:ed:43:f1:cf:b7:c1:68:75:e3:43:3b:1c:fe:29:98:f3:b1:
55:08:15:e0:ed:fa:a9:5f:a4:e9:1c:c4:4a:ce:21:3b:2d:3a:
70:da:68:1b:64:e4:05:9d:a0:e8:3e:c5:58:51:66:6b:30:b8:
f8:eb:30:11:80:88:7b:af:35:b3:3f:28:0d:9b:ac:da:81:3d:
d8:61:98:0b:5e:8e:9b:b6:38:91:32:f8:e3:8d:f1:96:96:8d:
dc:33:63:dd:d3:60:fb:0b:5f:b7:9b:22:ad:df:f4:f1:06:5d:
1d:44:a1:68:aa:c2:1a:8d:d4:ef:0d:a7:19:a2:0d:de:dc:ec:
45:1f:5e:9e:9f:bb:58:83:89:f2:32:d8:cd:ce:a1:22:4d:fb:
19:4a:06:f0:d2:b6:2c:3d:a2:b4:01:15:58:b0:32:39:ad:3e:
7e:4d:e9:bb:0d:83:a7:f6:82:2a:8a:b9:92:f8:a3:8b:e1:c4:
52:00:b2:c0:fe:10:b8:06:1b:a0:d8:2d:63:74:a0:13:6a:21:
22:51:b2:27:bc:cb:30:9b:94:59:59:43:f2:cb:c9:56:9a:29:
15:f2:00:cd:1b:74:ec:68:70:99:2c:01:4b:00:9a:e9:30:12:
b7:98:9e:7d:8f:22:6b:45:53:23:0b:fd:72:61:22:54:77:17:
30:77:a9:b1
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZlqs2vFW7YqpYdqj2WBmZssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTIxMDUxNjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzIzOTQxYWJhZWUxMGM5ZDJjNGFlYmRjZmI4Yzc1MWZjM2I2ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmulM5uMUtjqYlUee2rGyk+CmhoL
Zd/6HvUgSLxeYSJ/zq8iGZqYxUuaruRff7K2YFrVPT2v9V17UkWTRw5FETeGqjGe
7j1YVqlb/5O72wmNyDp1bChdLADDvczGiw4JQs6HiqsfcRcKGh/zge6fy0YABipl
HvOCVLQmRdOzeJZIzLnGEswpTFoT/dPS0mJQCDEb56Qt0NPfR3iYnrzBXDQBamxo
qQLMpptGu+VGNxiLWXI+za/NZvAmVQYZDKkcsS+RnyFaJtFk/syAhh3H68dl1YAI
Nl6qV4uLaep1L5frZdnzk+Z/XYsvnF9ZEiyPn75A9gu5XuR47tR7DsSDkwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFCMjlBq67hDJ0sSuvc+4x1H8O215MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJjMjY3
NjNlLWFkZGYtNDNmZC1iZjJlLTdjN2UzODkyM2U3Yy8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmMy
Njc2M2UtYWRkZi00M2ZkLWJmMmUtN2M3ZTM4OTIzZTdjLzEvMjMyMzk0MUFCQUVF
MTBDOUQyQzRBRUJEQ0ZCOEM3NTFGQzNCNkQ3OS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNbAw
DQYJKoZIhvcNAQELBQADggEBAE7tQ/HPt8FodeNDOxz+KZjzsVUIFeDt+qlfpOkc
xErOITstOnDaaBtk5AWdoOg+xVhRZmswuPjrMBGAiHuvNbM/KA2brNqBPdhhmAte
jpu2OJEy+OON8ZaWjdwzY93TYPsLX7ebIq3f9PEGXR1EoWiqwhqN1O8NpxmiDd7c
7EUfXp6fu1iDifIy2M3OoSJN+xlKBvDStiw9orQBFViwMjmtPn5N6bsNg6f2giqK
uZL4o4vhxFIAssD+ELgGG6DYLWN0oBNqISJRsie8yzCblFlZQ/LLyVaaKRXyAM0b
dOxocJksAUsAmukwEreYnn2PImtFUyML/XJhIlR3FzB3qbE=
-----END CERTIFICATE-----
Generated at Fri Oct 17 20:11:35 2025 by rpki-client