Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
File: QA4H15n7NVyVICXz0nsA6bTuNO0.cer (raw, json)
Hash identifier: jvW7ogn6OIlGOW5ppYz8KGLkVcOo9iF15s6QKIB/2Ow=
Subject key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196E73CC3BB2714D01263892CD147EB1FE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 19 May 2025 06:30:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61102
AS: 213391
IP: 89.33.28.0/23
IP: 107.150.178.0/23
IP: 176.223.65.0/24
IP: 185.18.204.0/22
IP: 185.37.148.0/22
IP: 185.217.96.0/22
IP: 188.210.255.0/24
IP: 193.201.147.0/26
IP: 2001:7f8:62::/48
IP: 2a03:ff40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:3c:c3:bb:27:14:d0:12:63:89:2c:d1:47:eb:1f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 19 06:30:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:c1:91:bb:58:a1:48:4e:05:04:cf:d5:07:
1f:cf:c1:14:59:15:9c:ae:88:77:ee:03:8c:83:e6:
13:ff:37:bc:e2:e5:f5:a2:7e:3c:93:31:11:36:2e:
22:54:6a:08:28:17:ee:7e:de:71:6c:07:87:c2:1a:
a0:77:45:35:c8:cf:8c:e8:61:0a:02:fc:e7:ae:b4:
89:4e:2f:64:72:fc:0a:a8:7b:67:d0:2b:59:1c:7e:
bf:11:f1:07:fd:20:86:4f:7f:c4:b9:99:5b:df:ee:
42:00:a2:2e:1c:6b:0f:7d:98:ad:c1:a9:b0:37:9d:
cc:48:76:a6:c0:82:7f:8b:b2:61:09:2d:14:34:7c:
c2:1c:5f:22:3c:2a:b3:7e:19:3a:60:16:a7:ad:3e:
6b:f1:35:03:be:69:e8:94:38:ee:58:16:32:63:18:
17:b8:c7:98:68:17:40:66:01:76:41:58:a5:5e:1c:
7f:4c:6c:d5:c9:0d:71:70:f5:fd:60:ac:af:2b:75:
97:58:01:c4:95:e8:54:b5:1e:14:62:c1:fb:30:e7:
6f:4c:67:c2:df:c1:c2:d0:94:e6:41:77:64:af:a2:
f9:fc:ff:e4:a9:20:8c:67:93:68:cd:d8:b3:a0:d4:
bd:c4:79:55:41:10:dd:bb:3c:c0:5b:99:b4:89:84:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
193.201.147.0/26
IPv6:
2001:7f8:62::/48
2a03:ff40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61102
213391
Signature Algorithm: sha256WithRSAEncryption
98:fc:4f:68:7f:5a:56:dc:f7:86:29:94:ec:8b:bf:b0:8c:2b:
d0:8d:61:07:47:ab:d4:ae:99:3b:f5:6a:63:ef:ca:d6:52:fe:
d2:9d:e8:10:87:eb:0d:a6:fe:e7:f5:19:7e:cf:e9:f3:ce:84:
d2:36:f0:59:ff:11:fe:24:74:b5:de:61:cd:6a:38:8a:d9:ca:
86:27:77:bb:1a:27:91:63:a2:26:a4:a2:f5:a7:47:a5:3f:8f:
b1:19:ad:da:28:19:74:a0:b9:cf:f5:05:e2:5f:90:a0:3c:fb:
70:b4:eb:5a:a3:34:6d:51:8f:d5:55:7e:a2:84:42:42:13:2f:
ac:ce:ca:e6:a4:fb:d5:be:e3:3a:0c:31:e1:65:af:93:10:16:
46:6e:a9:78:cb:48:eb:85:40:c9:79:54:a6:b7:4b:b7:f6:6b:
9d:bd:6e:f4:d5:ea:9b:5b:d6:5d:d5:dd:e7:ba:18:3b:cc:9a:
2c:94:e7:18:99:53:86:20:08:76:62:97:2e:6b:5a:49:24:84:
ec:97:1f:3a:c8:06:ec:6a:80:58:92:eb:0e:95:86:9c:63:1f:
15:c5:c1:ce:51:c1:65:a0:89:5c:59:23:39:4a:f9:ba:b3:78:
44:ca:b6:20:90:6e:ca:71:ce:f0:f1:1c:b3:c6:63:f7:08:7b:
7d:57:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:40:04 2025 by rpki-client