Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer (raw, json)
Hash identifier: BR0rVlS64+RFayCXPenFWwcDfQ4z1+1p0C0zqxkgi4Y=
Subject key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D31EEB90498931AA34B9244E3FB3FC6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 08:45:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51956
AS: 198549
IP: 92.53.232.0/21
IP: 185.144.132.0/22
IP: 185.201.172.0/22
IP: 2a00:b8c0::/32
IP: 2a0c:5b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:1e:eb:90:49:89:31:aa:34:b9:24:4e:3f:b3:fc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 08:45:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:61:55:87:80:63:78:12:be:a3:59:bf:37:
9c:65:b3:f3:c0:22:cf:45:d1:92:9d:3e:95:b8:85:
61:b2:8e:66:2a:a1:52:46:64:38:77:e9:56:29:76:
f4:f8:58:7a:1e:3e:91:68:7a:8c:f5:f5:aa:6e:59:
b7:fa:03:24:4d:67:bf:de:69:a1:f8:d9:d4:36:10:
f9:47:b1:94:84:86:d6:24:15:00:fc:d1:91:5e:27:
cd:18:6c:4a:c0:ee:dc:d1:88:a7:d6:ba:3d:4e:77:
17:c5:32:c8:37:4b:9f:99:d5:71:f0:7b:ef:47:5f:
d3:61:69:fc:26:72:b4:dd:e4:7e:9d:58:03:01:03:
87:b7:79:eb:2f:31:46:c7:5c:86:cb:88:0b:fe:15:
5d:55:56:08:6e:53:02:3b:80:93:41:a7:b2:f8:24:
0a:f9:7e:6b:1b:08:d8:67:0f:a8:a2:60:57:e6:e0:
62:99:8e:31:65:aa:2b:13:38:32:5e:f8:ef:a1:3e:
ce:b3:2a:85:76:fe:66:79:0d:45:b3:00:f9:7e:0c:
cb:22:42:7b:d0:87:fa:d7:ca:3c:88:7b:39:8f:a3:
9d:7b:ef:27:4d:95:2b:b8:17:b1:0e:26:b7:fa:ba:
36:60:ca:44:78:63:47:2f:a0:34:ff:76:eb:e5:c8:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.232.0/21
185.144.132.0/22
185.201.172.0/22
IPv6:
2a00:b8c0::/32
2a0c:5b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51956
198549
Signature Algorithm: sha256WithRSAEncryption
25:b8:15:c7:b0:6f:05:50:95:ca:d8:12:57:da:37:4c:71:02:
0c:11:c1:a0:33:c6:71:f9:2b:d7:10:65:c5:29:0a:87:79:aa:
86:6c:e0:6b:78:67:20:7c:ca:35:27:f6:15:37:e4:3f:5b:e8:
99:fa:e6:80:fc:37:d6:90:23:cf:09:bc:de:13:4f:ab:7a:4c:
b0:14:79:6c:a5:b6:e0:8e:a3:0d:82:52:ef:36:7f:63:49:07:
3e:15:1c:87:5f:30:3e:3c:f4:de:77:94:ec:0e:55:7e:f4:ff:
a6:03:60:38:6b:c1:90:d7:ad:9c:e5:ad:59:76:4b:ba:96:92:
f8:8e:fb:19:0c:d2:4b:d0:64:10:ba:bd:f4:75:60:76:fe:6c:
bb:b3:4a:3b:be:71:7c:d9:8f:e7:a2:f5:02:26:e3:5d:3b:d3:
f4:c1:b2:ea:75:d0:d0:d2:7b:24:13:28:28:23:c5:be:c9:79:
7d:80:57:ae:96:f5:10:d0:35:c3:4d:69:5c:c9:ee:f2:86:c4:
22:61:99:d0:60:0f:02:ff:dc:ce:9a:a5:11:ca:74:1b:48:68:
a3:d9:8a:a3:e7:a5:24:be:61:80:1c:7b:9c:8d:a8:33:ab:44:
cb:87:1c:f3:b0:40:72:95:2c:60:ff:73:35:81:a8:da:28:b1:
86:da:45:d2
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZbTHuuQSYkxqjS5JE4/s/xuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTE1MDg0NTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGRmZjAxZjU2ZTM0MTlkMDI3YmU3NTkxY2VlZjYyODUxY2UwZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6BhVYeAY3gSvqNZvzecZbPzwCLP
RdGSnT6VuIVhso5mKqFSRmQ4d+lWKXb0+Fh6Hj6RaHqM9fWqblm3+gMkTWe/3mmh
+NnUNhD5R7GUhIbWJBUA/NGRXifNGGxKwO7c0Yin1ro9TncXxTLIN0ufmdVx8Hvv
R1/TYWn8JnK03eR+nVgDAQOHt3nrLzFGx1yGy4gL/hVdVVYIblMCO4CTQaey+CQK
+X5rGwjYZw+oomBX5uBimY4xZaorEzgyXvjvoT7OsyqFdv5meQ1FswD5fgzLIkJ7
0If618o8iHs5j6Ode+8nTZUruBexDia3+ro2YMpEeGNHL6A0/3br5ci6JQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFKjf8B9W40GdAnvnWRzu9ihRzg9rMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzQ3MzM2
Ni03MDJkLTQ3M2YtYmZiZS04ODJjNDQ4ZTJlZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNDczMzY2
LTcwMmQtNDczZi1iZmJlLTg4MmM0NDhlMmVmNi8xL3FOX3dIMWJqUVowQ2UtZFpI
TzcyS0ZIT0Qycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF
BwEHAQH/BDIwMDAYBAIAATASAwQDXDXoAwQCuZCEAwQCucmsMBQEAgACMA4DBQAq
ALjAAwUDKgxbQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAyvQCAwMHlTANBgkq
hkiG9w0BAQsFAAOCAQEAJbgVx7BvBVCVytgSV9o3THECDBHBoDPGcfkr1xBlxSkK
h3mqhmzga3hnIHzKNSf2FTfkP1vomfrmgPw31pAjzwm83hNPq3pMsBR5bKW24I6j
DYJS7zZ/Y0kHPhUch18wPjz03neU7A5VfvT/pgNgOGvBkNetnOWtWXZLupaS+I77
GQzSS9BkELq99HVgdv5su7NKO75xfNmP56L1AibjXTvT9MGy6nXQ0NJ7JBMoKCPF
vsl5fYBXrpb1ENA1w01pXMnu8obEImGZ0GAPAv/czpqlEcp0G0hoo9mKo+elJL5h
gBx7nI2oM6tEy4cc87BAcpUsYP9zNYGo2iixhtpF0g==
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:50:32 2025 by rpki-client