Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
File: o082XngGS1jETUjPs5KR0_sdnhA.cer (raw, json)
Hash identifier: 8rUnxtmR1GXXU70IrfoakBKv6KjBNiXcAkEBPJZWRSE=
Subject key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019710D7D133D5005AC0172A383655661AC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 May 2025 08:24:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20694
IP: 185.166.200.0/22
IP: 188.94.24.0/21
IP: 217.114.64.0/20
IP: 2a01:688::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:d7:d1:33:d5:00:5a:c0:17:2a:38:36:55:66:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 27 08:24:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:c2:6a:aa:a0:ea:53:08:e6:de:af:06:2e:
c2:75:d3:9c:8b:f9:52:5b:0c:cd:95:06:b0:35:26:
f1:a0:c8:4a:8d:fe:44:0b:b8:d0:60:dd:d8:c1:53:
f5:d4:dc:ef:fd:67:e3:ac:67:b4:1b:bd:60:e2:b4:
fb:eb:9c:c4:46:aa:87:0e:cd:e1:4d:ec:38:7a:8a:
95:ef:96:8e:5c:b1:a6:3f:66:db:55:06:b3:23:cb:
1f:74:0f:be:09:71:ea:f6:3b:a4:1e:f8:b6:69:e2:
b5:ba:90:92:f7:12:91:4e:23:0c:9d:33:ad:ff:0f:
cd:7f:7a:ab:d3:03:83:a3:61:79:43:f8:c5:31:ca:
34:9c:39:f2:76:fb:fc:8b:0f:19:22:4c:93:30:a1:
2c:c0:cb:fc:02:d1:28:7e:ec:81:06:ef:a5:b0:f3:
70:b8:03:b8:0b:df:b0:9b:e9:68:dd:0f:9f:fc:9d:
15:e1:1f:c8:fb:9b:2b:b3:6a:4b:72:05:56:6f:7d:
f4:6e:22:34:de:f9:61:25:98:d5:da:19:5d:ed:ee:
b6:05:65:40:32:a5:63:44:9f:69:35:e3:d5:75:5f:
42:29:c2:fb:27:ea:56:4d:3e:6a:8b:e3:0b:33:45:
60:00:72:57:d8:45:9a:3e:65:e4:95:77:63:a7:21:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.200.0/22
188.94.24.0/21
217.114.64.0/20
IPv6:
2a01:688::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20694
Signature Algorithm: sha256WithRSAEncryption
b0:92:c5:1c:94:c7:a0:7a:dd:d1:c5:6c:8f:ff:e3:32:30:1a:
6d:4d:d5:c9:6d:0b:77:45:be:02:d4:7a:0a:36:50:46:17:f6:
77:e5:38:31:a0:46:eb:81:83:d1:02:3b:db:af:26:b8:d9:4b:
d0:28:14:0a:f0:57:3f:c0:8c:87:f5:3d:16:1b:a7:c9:b3:4d:
e8:9d:a6:a9:1e:87:a5:e8:61:21:ae:52:e6:df:70:f4:bb:2d:
01:08:8b:4f:de:44:90:cd:43:2c:7f:ea:33:63:d8:53:c2:6f:
7f:93:f3:25:64:16:27:84:4a:57:08:48:e0:08:c1:52:bc:12:
0e:ec:76:d9:7d:69:b8:78:0b:7a:f3:bf:f8:c3:06:23:33:31:
70:3b:05:7d:ee:bb:c0:ae:63:0d:3b:a9:5c:19:20:f5:1c:b0:
b3:c4:6b:c7:9c:74:b1:31:c1:df:22:fc:c7:2f:3b:95:c1:22:
6f:cf:f8:4d:5f:e5:b2:af:56:f2:d7:da:0c:54:eb:a2:37:bf:
76:40:93:b7:b2:89:0c:6b:9c:15:6d:5b:f4:df:7c:48:8b:b5:
95:87:aa:2c:62:b2:ab:45:cd:05:81:70:b7:99:61:a8:be:e4:
52:b1:34:52:1b:33:5a:36:73:ae:e3:6c:bb:06:44:30:cf:57:
a1:41:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:00:27 2025 by rpki-client