Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer (raw, json)
Hash identifier: V0s+zY9PsHlq+7Gxj3viIfu8t9HhwOAslmRS4rykybY=
Subject key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0231086AB5F2FE8D826D90485A2087E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Oct 2025 15:15:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.220.141.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:31:08:6a:b5:f2:fe:8d:82:6d:90:48:5a:20:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 20 15:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:c9:a4:28:48:51:c5:79:12:af:b8:a2:49:
9d:26:38:d8:e0:ec:78:f1:b7:f7:e1:de:10:1e:79:
f2:ba:92:34:69:ed:3e:c9:87:90:9b:f8:f0:69:6f:
2e:21:50:96:d1:b5:c9:83:90:59:a5:78:5d:2b:49:
6c:cf:d5:a0:6a:7d:8c:f6:e4:b5:99:f7:96:e1:b0:
9e:5b:24:94:0c:c9:64:bc:cc:39:40:2f:22:61:90:
1a:d9:8a:c4:87:c3:b6:b7:cd:db:cf:63:90:90:11:
73:44:3e:a9:a5:c6:49:af:83:37:71:cc:e4:67:e3:
7c:bb:4b:75:02:48:f5:16:73:4c:c0:ca:25:54:3a:
19:fc:3c:32:d5:80:6a:31:85:b9:aa:b5:e8:e7:1a:
83:da:a4:be:03:b9:0f:94:82:03:aa:18:de:58:ae:
3a:ab:e1:d7:35:01:71:65:1d:81:d3:03:02:3d:07:
b0:e3:af:e1:61:a3:a2:f0:00:5f:1d:13:8c:a0:61:
e2:52:1d:7c:0c:09:f4:74:6e:53:84:ca:78:39:3a:
03:ee:93:02:74:64:a6:29:c7:c6:3a:50:34:a8:eb:
e1:a2:63:5b:f1:e4:03:96:49:72:68:ed:fc:09:ce:
b7:5c:24:9a:f2:f3:5c:27:02:64:86:ba:84:1b:3f:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d3:fa:58:4b:21:07:cf:1d:4b:88:ae:99:8b:21:30:ff:a1:
3f:a0:b0:80:95:3c:67:89:2e:0d:46:f6:50:df:c3:e2:36:95:
d5:a5:32:ab:b6:cf:4c:dc:77:8f:be:da:f6:62:98:2c:2b:c0:
54:13:85:a7:f3:22:92:db:f5:ee:d8:8f:2f:0f:4b:ea:54:c7:
43:97:f1:11:bc:0b:77:63:45:68:60:27:03:74:74:9b:1a:52:
60:31:cb:a6:0c:de:33:3a:43:e3:c1:19:a3:d0:82:70:6a:03:
60:06:87:2e:c6:e0:1b:ea:08:4e:a3:26:06:4d:40:1c:9a:3b:
a7:a0:f1:c7:5f:f0:05:24:07:dd:ce:2c:78:f4:ff:f0:d3:84:
15:05:f9:00:cb:ff:a0:ff:a6:87:0b:b6:43:95:e8:c3:09:44:
d7:f9:0c:46:1f:f5:e1:64:31:fd:e1:27:58:e8:30:88:f6:5f:
d1:f2:4e:ef:36:dd:69:12:44:84:26:50:02:35:74:cb:6a:75:
75:6c:32:82:65:61:7d:aa:32:26:62:be:7d:b5:1e:79:df:79:
81:bd:04:37:36:4f:f5:d5:8d:2e:a6:35:c8:4a:40:69:fd:72:
e8:05:b1:77:a1:11:19:40:5d:c8:c8:11:ad:a1:eb:29:f6:b2:
be:41:74:c2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZoCMQhqtfL+jYJtkEhaIIfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDIwMTUxNTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBjNjMyM2NmNzMwOTMwYTAzYjBlNDQ2MDdmNmZlZGY1MjdhOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4vJpChIUcV5Eq+4okmdJjjY4Ox4
8bf34d4QHnnyupI0ae0+yYeQm/jwaW8uIVCW0bXJg5BZpXhdK0lsz9Wgan2M9uS1
mfeW4bCeWySUDMlkvMw5QC8iYZAa2YrEh8O2t83bz2OQkBFzRD6ppcZJr4M3cczk
Z+N8u0t1Akj1FnNMwMolVDoZ/Dwy1YBqMYW5qrXo5xqD2qS+A7kPlIIDqhjeWK46
q+HXNQFxZR2B0wMCPQew46/hYaOi8ABfHROMoGHiUh18DAn0dG5ThMp4OToD7pMC
dGSmKcfGOlA0qOvhomNb8eQDlklyaO38Cc63XCSa8vNcJwJkhrqEGz9W9wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHIMYyPPcwkwoDsORGB/b+31J6jEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2E2ZGFl
OC1kOThlLTRhYTAtYjRhZC00MjgxZTM4YTliZjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvYTZkYWU4
LWQ5OGUtNGFhMC1iNGFkLTQyODFlMzhhOWJmMi8xL2NneGpJODl6Q1RDZ093NUVZ
SDl2N2ZVbnFNUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9yNMA0GCSqGSIb3DQEBCwUAA4IBAQBe0/pY
SyEHzx1LiK6ZiyEw/6E/oLCAlTxniS4NRvZQ38PiNpXVpTKrts9M3HePvtr2Ypgs
K8BUE4Wn8yKS2/Xu2I8vD0vqVMdDl/ERvAt3Y0VoYCcDdHSbGlJgMcumDN4zOkPj
wRmj0IJwagNgBocuxuAb6ghOoyYGTUAcmjunoPHHX/AFJAfdzix49P/w04QVBfkA
y/+g/6aHC7ZDlejDCUTX+QxGH/XhZDH94SdY6DCI9l/R8k7vNt1pEkSEJlACNXTL
anV1bDKCZWF9qjImYr59tR5533mBvQQ3Nk/11Y0upjXISkBp/XLoBbF3oREZQF3I
yBGtoesp9rK+QXTC
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:08:30 2025 by rpki-client