Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
File: kziECSasc-rVthh5GeiPEAMimco.cer (raw, json)
Hash identifier: Mr3Vn4BW5uEzZH064a0WeW3BxzfRp+Wl175LcrQP6mQ=
Subject key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A53747F5C237DA276FC2AFCFA86E818CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Nov 2025 09:58:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34696
IP: 81.172.101.0/24
IP: 2a0d:340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:74:7f:5c:23:7d:a2:76:fc:2a:fc:fa:86:e8:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 5 09:58:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9338840926ac73ead5b6187919e88f10032299ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:20:57:ce:9b:16:22:db:07:d6:38:4b:9b:
df:01:23:9b:ec:cd:61:58:cf:56:29:b2:27:d3:ed:
19:a0:71:05:d2:3e:dd:2a:f4:b6:73:24:59:7e:8e:
07:19:8d:bf:55:d4:5b:4d:86:b1:56:87:28:4c:7d:
4b:5a:e7:63:a4:56:21:5f:8f:ac:82:22:6a:8c:e5:
3c:cc:bc:91:ca:80:fb:19:6c:4e:49:1e:55:d1:1e:
b1:ae:b5:1b:df:7d:67:9f:19:c5:72:d9:48:dd:f2:
9f:63:5e:88:fa:43:23:e5:7f:7f:e9:65:7d:83:3b:
a5:10:37:bf:e5:92:77:eb:e0:cd:cf:fa:46:9e:f2:
b1:13:85:1e:5e:89:df:4f:ac:44:7d:6e:7a:08:fe:
a1:05:64:fc:34:3b:56:a6:a1:43:6f:12:1c:62:1e:
ed:cc:97:41:56:a3:68:57:d4:26:c3:37:e7:4d:b0:
c1:c9:aa:96:65:6e:c3:54:ae:56:db:b0:86:db:51:
1c:b1:65:1e:e7:eb:3f:b0:20:3e:a3:20:e4:96:f3:
34:ef:53:6c:dd:30:3f:5f:fc:1f:da:80:84:bd:26:
d2:b6:9e:3b:6f:4e:e6:2f:a5:a6:04:61:92:f8:99:
4e:6a:8d:b8:d3:68:72:f2:e7:24:c3:ef:9c:f9:94:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.101.0/24
IPv6:
2a0d:340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34696
Signature Algorithm: sha256WithRSAEncryption
0d:2c:f3:02:b9:cb:ec:76:e2:e5:4a:a0:e7:f5:d4:bd:60:b5:
4d:13:dd:27:18:8c:23:66:fd:30:c8:74:68:38:f2:1e:58:9e:
9b:7b:9b:78:73:02:9e:01:93:fb:f1:94:3b:e3:7d:27:54:b4:
e9:a5:38:8c:1d:5b:e1:85:5e:9b:b3:18:68:5c:a1:b6:00:0e:
af:55:34:32:e8:78:9c:1c:30:ea:47:69:9e:24:7a:9a:36:d0:
46:6c:e9:8f:c2:ed:2f:2e:7c:73:72:af:24:19:f6:48:83:cf:
a3:3b:8d:59:f5:c2:6d:13:3e:5b:17:a5:b3:bb:cc:9d:8d:b3:
59:cc:89:ac:be:ca:39:48:5f:d8:dc:da:d7:12:f6:16:3d:92:
50:ea:a3:3c:0a:52:95:a6:e7:42:ea:88:49:d6:ef:26:3b:2e:
89:be:48:3e:94:e2:cf:59:85:5c:02:68:c5:6b:7b:b8:cc:9a:
81:f6:37:35:4f:de:89:4b:b8:fb:54:1d:52:9c:d7:9e:85:a6:
05:04:f4:ab:de:2f:ad:17:ed:8d:49:02:90:2b:33:9a:78:84:
9d:b9:7b:38:44:bb:53:35:66:fe:52:cd:49:28:4f:ee:11:16:
55:b6:2b:72:1f:fe:67:fe:94:5c:cd:52:8d:47:2e:7c:8f:06:
e5:42:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:04:02 2025 by rpki-client