Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer
File: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer (raw, json)
Hash identifier: 2cOSHuF5fOXAOUmFtc+l+WUlTpliW6QNqoY0ir0gOh4=
Subject key identifier: FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0B84BFB6ABBB9C84BDF0FC5DC707C307
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Oct 2025 10:44:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213549
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:84:bf:b6:ab:bb:9c:84:bd:f0:fc:5d:c7:07:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 10:44:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd4d6f06bb1237e26907e6402d2bd0d889372505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:e8:0f:79:04:ca:dc:76:cf:62:cf:6f:6c:
8d:0a:10:0b:f7:14:6d:dc:34:7e:61:dd:cb:50:bb:
92:a6:66:ce:36:07:e1:fe:3a:39:28:83:47:06:bd:
86:73:a4:dc:d9:97:bc:24:94:6a:05:b1:6a:91:62:
91:3b:07:82:48:03:db:5f:21:d1:f5:ee:54:ea:ac:
5a:63:c1:a6:ca:dc:52:b4:4b:b0:13:d0:b2:ea:af:
c1:7b:62:0e:db:49:8d:ac:ae:3e:e4:26:99:fd:13:
e8:78:c6:b5:76:b3:11:f7:7c:4f:de:cc:ca:6e:17:
06:f9:b5:8b:87:34:f0:64:76:5f:bb:a8:98:b9:26:
b6:8e:46:96:a1:18:78:d5:55:4d:d8:fe:8f:57:a2:
cf:53:ea:44:29:c0:85:4f:cd:94:d1:78:e9:56:f7:
ed:2c:da:c5:9d:a5:e7:3a:31:07:bb:c0:22:78:ff:
26:54:43:46:bb:23:7e:c3:7b:74:36:fe:5f:0f:85:
f2:42:0d:a1:bd:41:dc:f7:7c:e7:d4:9c:e7:42:9d:
81:2f:94:85:58:ec:29:b7:94:0a:96:ed:9a:3d:54:
69:eb:e1:a6:aa:68:d4:96:a9:4b:b4:4c:37:af:6d:
39:a0:1d:e4:00:32:1a:80:84:d8:8f:62:84:ef:a7:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213549
Signature Algorithm: sha256WithRSAEncryption
42:93:41:89:18:0e:51:24:fd:d8:eb:87:5d:24:83:cb:42:36:
83:16:92:47:1e:e4:dc:09:21:13:a6:ab:7d:d1:af:51:ec:73:
b2:9e:8e:38:92:09:5f:8f:1e:0a:0e:2c:7b:91:a2:a1:34:61:
01:9b:9b:51:dd:d1:39:9b:31:44:59:31:4b:a0:bf:2a:a7:8d:
e1:8e:73:0e:a9:92:a3:da:44:3d:77:b5:69:d5:f9:6e:7b:bb:
81:2d:73:f8:3d:60:8d:6f:38:f7:20:cb:61:75:3c:29:da:9f:
8f:d1:34:f7:e9:eb:32:7a:ec:2b:47:c5:63:75:01:c5:7b:9b:
18:13:3f:4b:bd:19:f1:2b:e1:d8:d1:f4:94:a4:24:b8:b3:95:
f5:59:b0:0a:a7:a9:8c:c5:b4:ca:00:d3:0f:07:0a:29:52:a1:
20:85:25:00:eb:3d:4c:4b:c5:b3:58:db:8d:c5:1b:b4:72:96:
2f:a4:82:2f:1a:51:cd:ed:dc:c0:d9:15:f2:b8:db:6e:32:dc:
ed:e7:b9:21:ca:20:7f:fe:d4:67:e5:1c:e3:0a:e6:f2:56:a9:
34:37:e6:15:4a:23:bb:e1:1b:50:ca:8c:ab:7a:65:b0:77:79:
79:36:c1:9f:a1:fd:c3:4e:96:b0:13:92:07:c3:bc:a7:50:25:
be:c0:86:80
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZoLhL+2q7uchL3w/F3HB8MHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDIyMTA0NDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDRkNmYwNmJiMTIzN2UyNjkwN2U2NDAyZDJiZDBkODg5MzcyNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvoD3kEytx2z2LPb2yNChAL9xRt
3DR+Yd3LULuSpmbONgfh/jo5KINHBr2Gc6Tc2Ze8JJRqBbFqkWKROweCSAPbXyHR
9e5U6qxaY8GmytxStEuwE9Cy6q/Be2IO20mNrK4+5CaZ/RPoeMa1drMR93xP3szK
bhcG+bWLhzTwZHZfu6iYuSa2jkaWoRh41VVN2P6PV6LPU+pEKcCFT82U0XjpVvft
LNrFnaXnOjEHu8AieP8mVENGuyN+w3t0Nv5fD4XyQg2hvUHc93zn1JznQp2BL5SF
WOwpt5QKlu2aPVRp6+GmqmjUlqlLtEw3r205oB3kADIagITYj2KE76dASwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFP1Nbwa7EjfiaQfmQC0r0NiJNyUFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2U1MzVl
Yy04MDUyLTQzZjUtODhkZC1jYjI1YTMxZGI3ZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZTUzNWVj
LTgwNTItNDNmNS04OGRkLWNiMjVhMzFkYjdmYi8xL19VMXZCcnNTTi1KcEItWkFM
U3ZRMklrM0pRVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNCLTANBgkqhkiG9w0BAQsFAAOCAQEAQpNBiRgOUST9
2OuHXSSDy0I2gxaSRx7k3AkhE6arfdGvUexzsp6OOJIJX48eCg4se5GioTRhAZub
Ud3ROZsxRFkxS6C/KqeN4Y5zDqmSo9pEPXe1adX5bnu7gS1z+D1gjW849yDLYXU8
Kdqfj9E09+nrMnrsK0fFY3UBxXubGBM/S70Z8Svh2NH0lKQkuLOV9VmwCqepjMW0
ygDTDwcKKVKhIIUlAOs9TEvFs1jbjcUbtHKWL6SCLxpRze3cwNkV8rjbbjLc7ee5
Icogf/7UZ+Uc4wrm8lapNDfmFUoju+EbUMqMq3plsHd5eTbBn6H9w06WsBOSB8O8
p1AlvsCGgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:19:52 2025 by rpki-client