Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
File: axBPHkq67B7_gPJixi-WwlQ4yOE.cer (raw, json)
Hash identifier: 8oTa38hti7KoN6cQkK2zBHoMq2UPMxHOX8IvpS0aEtE=
Subject key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019716CC2272985725CAEFB7D2C5C0E6CFE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 May 2025 12:09:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49443
AS: 201813
AS: 203950
AS: 204794
AS: 204868
AS: 204872
AS: 205301
AS: 205745
AS: 205770
AS: 205884
AS: 206005
AS: 206127
AS: 206305
AS: 206340
AS: 206413
AS: 206535
AS: 206560
AS: 206582
AS: 206590
AS: 206623
AS: 206644
AS: 206744
AS: 206750
AS: 208317
AS: 209396
AS: 209868
AS: 209883
AS: 209889
AS: 209896
AS: 209944
AS: 209961
AS: 209963
AS: 209982
AS: 213137
IP: 62.68.73.0/24
IP: 2a12:1c0::/29
IP: 2a12:f9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:cc:22:72:98:57:25:ca:ef:b7:d2:c5:c0:e6:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 12:09:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:4f:09:f0:7b:e0:da:c3:01:22:08:2c:f4:
a2:24:40:8f:55:6e:9a:de:f2:a0:c4:ba:45:30:03:
78:5c:01:c9:00:95:55:21:f6:2b:da:67:c4:4b:a8:
37:19:e4:94:77:1f:b8:1d:b0:94:12:90:74:d3:10:
c4:69:62:fc:79:fe:59:5e:ac:39:2e:8b:63:83:4c:
53:8a:d6:77:36:fd:24:b0:97:b2:75:19:84:22:49:
a4:a3:a8:28:d4:53:ff:f6:d8:7f:c4:1a:cf:39:99:
7e:bc:d6:50:10:ca:0b:32:90:ff:4d:2d:2d:d8:9e:
10:78:fc:c2:6e:f7:46:fb:2d:25:33:fc:9b:a1:86:
14:72:17:20:dc:e7:47:78:ff:de:04:ea:06:c4:ef:
7f:fd:ce:4f:a6:d4:95:8f:d5:19:86:4e:03:02:fd:
47:ed:8d:e5:ba:c0:a8:90:6e:3f:f5:0f:bf:47:00:
8a:aa:69:90:53:4f:cb:dd:c9:55:c0:c4:80:a0:b3:
31:86:35:08:bd:26:00:0d:20:3b:a3:18:c5:63:97:
75:e2:52:93:5d:dc:28:ac:84:af:69:03:21:1a:89:
1f:af:a9:55:63:97:2b:b8:09:85:0d:3b:93:92:a7:
19:87:44:1c:ee:16:31:89:50:bd:27:2f:ba:11:19:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
IPv6:
2a12:1c0::/29
2a12:f9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49443
201813
203950
204794
204868
204872
205301
205745
205770
205884
206005
206127
206305
206340
206413
206535
206560
206582
206590
206623
206644
206744
206750
208317
209396
209868
209883
209889
209896
209944
209961
209963
209982
213137
Signature Algorithm: sha256WithRSAEncryption
68:e7:d2:91:98:13:7f:5a:fe:5b:d1:72:ce:92:6d:ac:e2:e4:
58:b6:1d:6d:b9:3e:fd:28:41:ae:2f:66:4b:b7:3d:7d:23:76:
3b:c9:5b:8f:b1:d0:98:40:4a:d9:46:96:ed:b9:0e:4a:99:5c:
33:5b:18:c8:f3:3b:36:43:13:29:fa:ad:03:ab:0b:e7:f2:13:
e6:3e:9b:e8:b5:a5:cf:99:13:b6:f9:45:e0:ef:70:1b:71:bf:
bc:7c:33:60:13:ea:0c:6d:9b:cb:45:c2:b4:3c:8f:31:41:ce:
11:fb:dd:97:57:0f:04:3c:64:63:e0:54:18:77:00:af:60:69:
34:fa:49:28:6c:93:05:2b:11:bd:dd:34:6c:7b:bd:63:8b:80:
26:e4:1e:4b:7c:d2:70:92:59:dd:98:4a:6d:a1:b8:30:0a:bc:
1e:ad:96:ff:b5:97:c2:b2:0b:a8:69:37:13:d0:af:f2:57:d4:
89:db:6b:05:8d:c1:dd:fa:fb:e6:86:ba:70:c1:d1:ea:4b:27:
87:fa:ff:d3:db:a5:db:ae:03:0b:89:e0:be:29:09:84:ba:5d:
d9:6c:43:95:16:af:b9:2e:41:93:03:0d:48:6b:c8:aa:1e:1c:
f3:36:1b:fb:d2:55:cd:25:a6:44:8d:69:5c:e8:ad:b0:80:3d:
89:07:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:02:32 2025 by rpki-client