Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.cer (raw, json)
Hash identifier: ykHksl8zk+sODrbx4059XP0ox7PRCdAMQhTXBD6N5jo=
Subject key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197351C09D280068B09ECA3551D9C7C42B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Jun 2025 09:25:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.196.45.0/24
IP: 2a14:1980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:1c:09:d2:80:06:8b:09:ec:a3:55:1d:9c:7c:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 09:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:e8:53:74:e4:9d:62:51:75:eb:1d:a7:18:
52:cb:58:dd:84:a9:67:ab:ef:1e:c4:89:ca:d3:4d:
a3:7b:7e:b3:b2:a3:28:0c:ec:f1:f5:61:1b:28:00:
f0:6e:f2:dc:bb:63:34:78:4c:a0:b9:e8:70:94:a1:
be:b1:84:f8:77:68:9a:51:34:21:ce:ff:6d:a6:86:
3b:b8:59:f2:1f:3e:c3:c9:b6:48:53:f7:28:b4:3d:
43:44:25:e7:89:4d:3b:f7:9f:08:30:63:1e:b5:70:
69:ad:5b:97:58:11:6a:ca:8c:e6:1e:56:1b:d2:3d:
27:a3:f4:29:2b:26:e4:a8:50:67:20:cb:69:ed:5e:
1f:c2:96:28:7f:76:f0:1a:40:54:9c:6b:67:e7:6f:
03:9a:c0:31:0b:94:08:1e:87:5c:d6:ca:c0:1d:fd:
94:2c:07:f6:79:ab:c6:45:cd:9c:7f:93:79:17:ad:
34:e4:10:68:11:36:fd:14:6c:1d:f7:0a:78:04:c0:
39:4f:e6:e9:2c:27:09:44:7e:e4:b6:65:53:e6:7f:
58:3a:88:20:c7:2a:e6:f5:a3:c9:d5:43:27:87:ce:
0a:d1:92:9f:2e:30:45:dd:b0:a5:96:60:27:29:e2:
94:da:92:76:34:79:d3:2f:eb:46:74:ca:05:91:b0:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.45.0/24
IPv6:
2a14:1980::/29
Signature Algorithm: sha256WithRSAEncryption
64:4f:83:3f:66:e8:c8:b6:16:fe:64:f4:6f:d7:d9:ac:77:a6:
10:0a:c9:31:09:04:1c:7d:db:cd:63:b3:97:1d:71:02:b5:54:
19:74:16:32:f9:1f:46:0e:ad:3c:19:b0:cb:6f:d8:82:f6:eb:
ed:77:73:25:20:a9:dc:e1:9e:01:2b:10:a6:00:c9:b9:20:73:
e8:0f:4a:6e:c4:f5:19:25:99:d7:4c:28:b1:ab:5a:02:f2:31:
0d:bb:8a:65:fc:28:27:a6:56:b0:30:b0:a0:3d:0e:f7:37:35:
4b:48:2b:a3:1c:03:44:61:ac:df:fd:11:35:b8:3d:ef:96:45:
d3:89:3f:f8:07:8f:c4:87:ef:c2:8e:ce:4d:9e:51:81:fa:19:
0f:bd:e1:53:f7:0f:45:07:5c:ea:94:52:d8:6e:47:94:7b:26:
02:0a:87:64:7b:b5:46:31:59:41:54:32:14:ca:cc:12:c1:ce:
58:cf:c5:f6:e5:60:58:4d:97:c8:49:9d:77:17:ba:75:68:40:
b5:b9:6a:25:69:5b:18:70:cb:5a:af:df:93:a1:b3:3d:a2:2c:
ff:49:67:a6:12:20:2b:7b:c2:85:49:5f:dd:34:88:24:74:8f:
10:fb:7e:72:73:a8:88:04:7d:43:a9:cd:9c:ba:a4:13:48:9c:
52:2b:1c:82
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZc1HAnSgAaLCeyjVR2cfEK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjAzMDkyNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDIwNDJlMzgwZDY0NzY1MTNhY2MwOGZiNTRmYmNjNzM2MjZlYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV/oU3TknWJRdesdpxhSy1jdhKln
q+8exInK002je36zsqMoDOzx9WEbKADwbvLcu2M0eEyguehwlKG+sYT4d2iaUTQh
zv9tpoY7uFnyHz7DybZIU/cotD1DRCXniU07958IMGMetXBprVuXWBFqyozmHlYb
0j0no/QpKybkqFBnIMtp7V4fwpYof3bwGkBUnGtn528DmsAxC5QIHodc1srAHf2U
LAf2eavGRc2cf5N5F6005BBoETb9FGwd9wp4BMA5T+bpLCcJRH7ktmVT5n9YOogg
xyrm9aPJ1UMnh84K0ZKfLjBF3bCllmAnKeKU2pJ2NHnTL+tGdMoFkbAhqwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzAwMjcx
Ni1hMjU3LTQ1NjgtYmYwNy1kZWQzODYyYjc2MzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMDAyNzE2
LWEyNTctNDU2OC1iZjA3LWRlZDM4NjJiNzYzMS8xL25TQkM0NERXUjJVVHJNQ1B0
VS04eHpZbTdEMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAucQtMA0EAgACMAcDBQMqFBmAMA0GCSqGSIb3
DQEBCwUAA4IBAQBkT4M/ZujIthb+ZPRv19msd6YQCskxCQQcfdvNY7OXHXECtVQZ
dBYy+R9GDq08GbDLb9iC9uvtd3MlIKnc4Z4BKxCmAMm5IHPoD0puxPUZJZnXTCix
q1oC8jENu4pl/CgnplawMLCgPQ73NzVLSCujHANEYazf/RE1uD3vlkXTiT/4B4/E
h+/Cjs5NnlGB+hkPveFT9w9FB1zqlFLYbkeUeyYCCodke7VGMVlBVDIUyswSwc5Y
z8X25WBYTZfISZ13F7p1aEC1uWolaVsYcMtar9+TobM9oiz/SWemEiAre8KFSV/d
NIgkdI8Q+35yc6iIBH1Dqc2cuqQTSJxSKxyC
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:55:36 2025 by rpki-client