Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
File: olSp86JmUT3caTXYvgIuflIw6hA.cer (raw, json)
Hash identifier: x7q8yx1Ne21nAYlaxV+4qtoLBymqDS1QcU6Lj85OwHA=
Subject key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196F2DFAAA8BB97D96B3FEDDFC58764AC9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 21 May 2025 12:44:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8486
AS: 15440
AS: 42549
AS: 42979
AS: 47929
AS: 209989
AS: 213772
IP: 5.133.64.0/22
IP: 45.82.32.0/22
IP: 45.95.32.0/22
IP: 45.146.200.0/22
IP: 77.241.192.0/20
IP: 79.142.112.0/20
IP: 89.249.80.0/20
IP: 92.62.128.0/20
IP: 185.11.24.0/22
IP: 185.65.48.0/22
IP: 185.216.208.0/22
IP: 195.14.160.0/19
IP: 213.197.128.0/18
IP: 217.117.16.0/20
IP: 2001:1ab8::/30
IP: 2a03:1960::/32
IP: 2a0d:5000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:df:aa:a8:bb:97:d9:6b:3f:ed:df:c5:87:64:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 12:44:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:2b:b5:99:a5:92:af:d6:7b:c2:56:73:57:
3e:72:94:02:e2:11:7b:0a:a6:85:c3:0a:fc:2a:e3:
d5:ef:25:17:05:bf:2e:ac:7c:8c:e0:98:7e:5b:35:
f8:0a:da:e6:43:8a:9e:9f:16:93:24:47:8c:12:2d:
2b:ce:4b:08:73:06:15:43:3c:ef:9b:bd:81:58:98:
22:e6:ce:f9:40:f2:54:8a:09:92:c3:4b:48:ff:6e:
2a:b0:da:de:75:8a:27:eb:63:ad:c7:74:8d:72:dd:
f7:79:a0:26:e3:b0:4c:54:ac:39:67:5d:db:bf:c3:
9d:93:fc:09:23:f2:b7:56:c0:a2:2e:ec:aa:30:fb:
20:74:ed:dc:e5:9a:63:ef:26:3c:0e:8b:09:bc:f5:
cf:f1:d5:95:fd:8e:ab:c0:f7:d3:36:ad:8c:47:d8:
e9:f7:77:c7:2f:d4:12:82:f1:41:29:a5:b9:f4:a8:
a7:c7:09:be:71:03:7c:a3:b2:25:39:2b:57:fb:6d:
82:23:1d:e5:fa:8d:98:0d:ee:57:28:bd:ba:f7:9c:
e4:fa:78:c3:9a:40:ce:f1:10:58:07:d4:85:06:46:
3c:e1:ea:e3:ed:b6:4f:13:7f:e4:93:87:6b:18:f4:
a8:5f:fd:4b:55:b6:24:a3:9f:33:83:7b:2d:d7:0a:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.64.0/22
45.82.32.0/22
45.95.32.0/22
45.146.200.0/22
77.241.192.0/20
79.142.112.0/20
89.249.80.0/20
92.62.128.0/20
185.11.24.0/22
185.65.48.0/22
185.216.208.0/22
195.14.160.0/19
213.197.128.0/18
217.117.16.0/20
IPv6:
2001:1ab8::/30
2a03:1960::/32
2a0d:5000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8486
15440
42549
42979
47929
209989
213772
Signature Algorithm: sha256WithRSAEncryption
08:d5:bd:80:ae:f9:59:b3:0d:b3:e4:d7:7d:a2:a4:13:ec:f3:
eb:27:53:a5:8c:3b:e6:4d:b3:a2:f6:90:47:ab:21:55:87:4d:
a0:6d:e7:53:18:98:a2:8c:b5:b8:15:eb:8a:3c:73:03:0d:78:
58:d4:54:e6:3d:61:74:a6:47:95:d2:fc:78:c1:99:1f:58:ee:
2f:fb:08:76:f6:f1:b9:bf:3a:60:0b:05:7e:a7:f8:ca:61:f8:
08:0f:c3:b8:b7:7a:86:9c:a6:c9:f2:aa:13:f1:4e:88:ba:1a:
43:e6:2b:bf:93:71:b9:2a:35:1b:4c:3a:d6:24:4e:e3:bb:78:
6f:1a:b8:bf:ce:5f:a0:80:66:ca:4d:cd:f0:ec:f9:fe:88:86:
e5:3f:ea:4e:56:5b:57:6f:73:99:99:6b:de:d6:06:26:fc:24:
d4:c3:52:37:11:70:6a:c9:aa:93:bd:10:a1:ac:be:98:70:ed:
1c:18:78:ba:32:20:f3:bc:97:16:bb:74:df:25:39:67:13:cb:
6c:66:fb:40:57:d4:ad:3b:db:08:90:e0:d6:00:77:02:07:0c:
01:00:f9:4e:fd:08:7d:04:95:86:d5:68:5e:6e:2a:2f:b5:6f:
92:b9:89:1f:47:c2:04:07:80:9d:c9:b9:03:36:a8:a9:e7:fc:
83:19:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:35:08 2025 by rpki-client