Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
File: h9OLoS9GKcITH8YOiVDWwwO-fSI.cer (raw, json)
Hash identifier: fLL58O/8/vEv9ebys1JA5rWmVF4145ZaxVL4RnoHktI=
Subject key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198E5D2E793E35A737B62F2F842A13B2D7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Aug 2025 10:01:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212544
IP: 89.38.212.0/22
IP: 89.41.184.0/22
IP: 185.49.174.0/24
IP: 2a13:8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d2:e7:93:e3:5a:73:7b:62:f2:f8:42:a1:3b:2d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 26 10:01:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:9e:6d:c8:bf:22:be:64:d0:89:0c:ae:b8:
a6:18:69:ce:a0:b0:17:ab:f6:8c:a7:2d:a0:14:b0:
3a:13:f0:dd:75:9c:1f:5d:36:61:22:3c:95:b0:35:
05:cc:81:3e:5f:03:36:36:5c:2c:8a:f8:96:f5:86:
62:95:33:dc:be:88:f7:18:a9:1f:d2:70:fb:d5:5c:
ce:af:88:f8:37:23:1a:a8:62:88:e4:f0:28:1f:ba:
44:b7:d0:07:60:1d:cd:05:2c:cc:79:fc:9b:a8:6e:
2a:80:5e:76:4a:c7:30:41:11:cf:40:1a:0e:ae:d7:
42:e6:97:ff:30:b9:cf:ca:8e:aa:f3:91:15:b1:67:
ec:47:f1:ba:e8:c9:04:c6:ac:cf:0d:b0:43:8f:7b:
5a:ae:74:d0:da:cd:9f:72:e7:45:d1:82:96:23:c2:
8a:fa:00:89:e2:be:c9:60:33:68:ba:53:56:e5:a6:
70:f0:cd:43:9c:01:45:71:51:01:8a:25:de:07:77:
92:ec:7a:1b:1b:05:a4:ab:0a:45:05:41:c7:0f:35:
6a:db:a3:1f:9e:ef:3a:bf:f3:36:7c:99:ea:ac:1c:
8b:f9:15:0d:9b:b5:52:99:1e:f8:e1:90:df:85:e0:
4b:c6:35:ec:84:22:45:5c:3d:92:d5:e6:de:ba:7b:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.212.0/22
89.41.184.0/22
185.49.174.0/24
IPv6:
2a13:8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212544
Signature Algorithm: sha256WithRSAEncryption
3d:93:63:5f:95:62:e5:dc:61:b5:72:48:cc:38:47:8f:31:98:
58:6a:49:71:db:e9:f6:a1:fb:25:86:a5:bd:55:1d:09:b4:9d:
a0:d8:be:f4:d8:5f:51:80:07:cd:3a:c5:50:92:2e:c2:6a:a4:
a2:05:93:0e:76:91:f6:f5:de:68:f6:7a:56:ca:36:da:6d:bc:
47:99:3a:dc:09:06:45:9f:20:6d:73:77:33:9c:33:3c:b8:04:
1a:a1:e4:9b:43:ab:19:04:19:cf:b3:1a:dc:c9:fb:be:78:c8:
76:bb:8d:8e:41:e4:40:5f:0a:ef:c6:2e:12:0a:b1:96:ab:b7:
65:cd:c5:8c:53:da:4a:e3:71:e2:1d:b4:48:f3:2e:06:ad:16:
a6:b2:09:3e:3f:3d:b0:1b:d4:85:fc:1c:f0:b9:44:7b:c4:71:
d1:96:7b:a3:ca:6f:46:1f:f1:da:d8:47:96:4f:20:b6:6a:a2:
46:ad:2d:a3:47:ac:43:86:e6:9d:38:6f:23:b8:4a:cf:f6:e5:
98:09:f2:23:0d:db:84:7b:af:a5:06:e2:33:5b:60:bd:9a:be:
95:9a:c2:d6:10:e3:60:98:5d:b0:c7:60:2c:da:47:74:4a:33:
74:1a:3e:f3:4b:23:8a:03:83:64:3b:d8:d1:4c:f4:fb:0e:08:
36:bd:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:22:28 2025 by rpki-client