Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
File: RehkjkRdzNDY7mmfUUC7gU5Drhs.cer (raw, json)
Hash identifier: JoYp3gT9zGmunqhSTm0oF3Ggcl9Zizd/6Ju5HjW4nL0=
Subject key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A49A12F08A9A9A4CE0D7CB175A1848CFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 03 Nov 2025 12:11:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48592
AS: 210134
IP: 77.81.76.0 -- 77.81.83.255
IP: 91.209.179.0/24
IP: 128.65.160.0/20
IP: 185.39.180.0/22
IP: 188.214.232.0/22
IP: 193.246.164.0/23
IP: 194.26.2.0/23
IP: 194.26.20.0/23
IP: 2a04:7d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:a1:2f:08:a9:a9:a4:ce:0d:7c:b1:75:a1:84:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 12:11:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:ba:4a:ca:ad:a0:f8:7f:51:61:eb:25:11:
4c:f3:bc:c8:4a:96:3c:5d:cb:38:fb:ff:85:c1:14:
20:dd:54:49:ef:9d:02:dc:f3:2b:49:1b:bf:04:de:
3c:b6:42:0d:56:5c:be:b5:ff:0e:6f:8a:a3:72:53:
dd:8c:19:83:4f:8b:95:8c:c7:4f:05:54:09:9f:4d:
86:85:1a:92:f7:d5:01:6e:eb:57:80:75:0e:5f:26:
c3:1b:64:fd:14:33:ab:bb:78:c7:3c:ef:2b:ff:2c:
a9:d7:74:07:34:85:54:67:80:e6:a1:20:ba:ad:15:
46:58:3e:52:d0:3e:6f:91:8f:92:f3:d7:54:56:83:
4d:fa:f1:58:d0:29:46:8d:39:34:56:bd:48:d6:d2:
00:ba:13:70:86:40:02:7e:ee:cf:8f:13:fe:bd:93:
71:5b:ee:38:6f:26:bd:e1:00:8f:f9:0b:44:0b:07:
63:5f:d3:cd:16:b3:97:07:dd:34:12:20:72:8e:b0:
16:b1:0c:2d:aa:39:56:ea:f8:4d:19:8f:30:07:7c:
98:95:fd:12:0c:99:56:62:7a:0e:be:f0:57:cd:1b:
5f:bd:bc:56:fc:6b:a2:08:d5:09:da:91:8e:03:e2:
cf:a3:ee:60:8e:e7:e4:fb:39:1e:70:7b:60:97:2d:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0-77.81.83.255
91.209.179.0/24
128.65.160.0/20
185.39.180.0/22
188.214.232.0/22
193.246.164.0/23
194.26.2.0/23
194.26.20.0/23
IPv6:
2a04:7d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48592
210134
Signature Algorithm: sha256WithRSAEncryption
84:a9:33:75:8a:90:47:bc:c6:5d:d8:c6:64:a0:d7:43:b3:5f:
c4:00:4f:8c:45:81:69:6e:c3:18:92:7e:93:72:c2:40:e9:a4:
0b:59:64:7f:5d:41:2b:07:5f:1a:8f:19:e1:c1:98:67:32:a6:
8a:7f:43:18:e2:16:b7:b6:90:6d:98:c2:8f:9b:ac:73:c1:8d:
29:7a:81:f5:f8:4e:4f:4d:cf:cb:62:39:17:c1:45:e4:7e:e2:
fc:63:92:59:50:3a:7b:d6:18:0e:5e:e5:55:52:9f:06:0b:bf:
d7:c4:85:d3:17:15:c9:81:2d:d9:ed:87:8a:6a:9b:c2:29:fc:
21:d9:23:a4:7d:3c:4c:2c:2e:39:49:3c:21:e3:a7:0a:6b:77:
29:fc:d4:e3:52:d4:72:f2:29:d2:f7:d0:4e:fa:0d:83:f1:a2:
c4:f4:2c:ce:28:95:9b:6b:81:74:0b:a7:94:07:b7:b6:a9:60:
8b:df:9c:48:5a:0a:5d:64:ea:25:eb:12:d8:1e:b6:f4:e3:4a:
10:cf:d8:d0:91:ee:84:01:66:f6:1e:81:87:78:a3:33:64:e5:
e5:5e:fc:34:f5:c0:8c:52:38:e2:c7:1e:56:8f:77:02:11:f7:
bb:7d:be:99:ef:26:0f:06:49:ab:62:48:8a:1b:5b:b4:d6:20:
bf:22:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:37:46 2025 by rpki-client