Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
File: dag44CxhgA9z0wGd4KUfVntkvA4.cer (raw, json)
Hash identifier: dZMjhq30z/JsDuqC6uXPEy/uqGVFx/EYOGpOim+o0oE=
Subject key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A14A559A560FC04CAC10539DD54852B3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 24 Oct 2025 05:16:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44324
AS: 214720
IP: 2a0f:1cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:a5:59:a5:60:fc:04:ca:c1:05:39:dd:54:85:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 05:16:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:88:b1:c7:7c:77:a6:61:7b:0f:f4:8c:93:
23:71:2e:de:b0:7d:71:81:26:1f:d2:33:27:b4:4d:
33:7c:65:31:84:78:60:d0:29:e3:77:08:d9:4d:ea:
a7:03:0b:a2:9a:9c:d0:af:ab:0e:42:96:98:f4:d0:
01:0c:f1:c9:4c:b4:f6:3c:96:30:19:49:e9:9b:27:
fc:cd:42:a7:1d:30:25:b0:30:01:84:ae:60:3b:7b:
c5:30:b8:38:48:37:03:f5:8a:2c:11:42:62:eb:ab:
00:23:98:54:4a:87:66:d5:f2:b5:b0:8a:e1:a3:a2:
2a:82:dc:1b:76:ad:7c:72:4a:d3:69:db:64:1d:72:
54:19:ea:93:a9:94:a4:55:59:1b:4c:78:ee:25:37:
cf:33:e2:31:ef:d1:cc:df:d4:7f:0b:db:32:bc:de:
3d:dd:99:46:ec:cc:e2:f7:99:00:4d:e9:6e:bd:67:
f6:2a:3c:c3:c4:bc:cd:d5:04:96:a8:e6:b6:56:8d:
00:9b:d9:f8:40:62:9a:22:41:2a:80:51:35:f9:bc:
aa:fc:fb:04:5d:4e:e5:67:e9:03:ca:88:ec:52:03:
a1:ae:e0:f1:aa:ed:0d:15:07:dc:20:9b:2a:b9:6d:
28:5f:ea:6d:1a:38:ac:62:1c:75:a0:98:f7:80:6a:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44324
214720
Signature Algorithm: sha256WithRSAEncryption
16:7e:e5:00:02:54:76:cc:47:78:92:d3:d5:c7:c6:f9:9b:3c:
ef:2b:6c:40:c5:4f:4c:6a:15:af:09:92:67:fb:10:88:66:b2:
2d:1a:2c:3d:28:b0:5b:f8:d9:6d:c5:90:5b:f2:11:a1:f1:b0:
b3:1d:61:30:ae:9b:2c:ab:ed:52:6e:da:65:6b:c5:09:ad:9f:
5a:7d:a2:c8:13:62:ef:02:75:a6:cd:49:33:ec:18:b6:1b:7d:
a5:44:5a:d2:b1:48:94:8d:f6:79:b9:29:41:e6:a6:0d:ac:2b:
49:d3:74:13:88:88:b6:07:59:8c:81:be:23:15:ca:67:91:3f:
63:fe:bf:49:0a:ca:17:02:1a:3d:66:cf:55:dc:cd:78:4d:15:
77:6e:a6:a4:43:2a:45:62:6d:9d:2b:57:5f:d0:59:99:89:b2:
02:1b:31:bb:8d:24:4a:f1:51:b3:3c:f9:68:6b:ac:b3:05:f4:
a7:c6:d7:dc:b7:05:8d:b1:d9:52:20:f6:d5:43:18:3b:b2:04:
9a:5b:a4:b8:0b:9c:05:92:4a:77:c3:98:cb:33:37:fd:fc:e5:
81:45:fd:7b:3d:0d:8b:7e:75:de:5f:b7:ec:d0:c5:00:60:78:
fb:6d:6e:e5:44:3d:ba:29:47:df:df:f2:e4:58:6f:e6:61:ab:
f7:8f:fc:03
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZoUpVmlYPwEysEFOd1UhSs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDI0MDUxNjEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWE4MzhlMDJjNjE4MDBmNzNkMzAxOWRlMGE1MWY1NjdiNjRiYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkaIscd8d6Zhew/0jJMjcS7esH1x
gSYf0jMntE0zfGUxhHhg0CnjdwjZTeqnAwuimpzQr6sOQpaY9NABDPHJTLT2PJYw
GUnpmyf8zUKnHTAlsDABhK5gO3vFMLg4SDcD9YosEUJi66sAI5hUSodm1fK1sIrh
o6Iqgtwbdq18ckrTadtkHXJUGeqTqZSkVVkbTHjuJTfPM+Ix79HM39R/C9syvN49
3ZlG7Mzi95kATeluvWf2KjzDxLzN1QSWqOa2Vo0Am9n4QGKaIkEqgFE1+byq/PsE
XU7lZ+kDyojsUgOhruDxqu0NFQfcIJsquW0oX+ptGjisYhx1oJj3gGoGVwIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFHWoOOAsYYAPc9MBneClH1Z7ZLwOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmVi
MTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2
ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvNzVBODM4RTAyQzYx
ODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
AyoPHMAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAK0kAgMDRsAwDQYJKoZIhvcN
AQELBQADggEBABZ+5QACVHbMR3iS09XHxvmbPO8rbEDFT0xqFa8Jkmf7EIhmsi0a
LD0osFv42W3FkFvyEaHxsLMdYTCumyyr7VJu2mVrxQmtn1p9osgTYu8CdabNSTPs
GLYbfaVEWtKxSJSN9nm5KUHmpg2sK0nTdBOIiLYHWYyBviMVymeRP2P+v0kKyhcC
Gj1mz1XczXhNFXdupqRDKkVibZ0rV1/QWZmJsgIbMbuNJErxUbM8+WhrrLMF9KfG
19y3BY2x2VIg9tVDGDuyBJpbpLgLnAWSSnfDmMszN/385YFF/Xs9DYt+dd5ft+zQ
xQBgePttbuVEPbopR9/f8uRYb+Zhq/eP/AM=
-----END CERTIFICATE-----
Generated at Sat Oct 25 22:14:38 2025 by rpki-client