Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer (raw, json)
Hash identifier: GeedwbPxzCblQRyZVVle2peFNWrHfHV6xEl4OFoiPJw=
Subject key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01991487274CFEE632AA1A3DB1ED8905D2A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Sep 2025 11:40:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5430
IP: 62.104.0.0/16
IP: 89.58.104.0/21
IP: 89.58.160.0/19
IP: 89.59.0.0 -- 89.62.255.255
IP: 194.97.32.0/19
IP: 194.97.96.0/19
IP: 194.97.160.0/19
IP: 194.97.224.0/19
IP: 195.4.0.0 -- 195.4.91.255
IP: 195.4.94.0 -- 195.4.127.255
IP: 195.4.176.0/21
IP: 195.4.216.0 -- 195.4.255.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:14:87:27:4c:fe:e6:32:aa:1a:3d:b1:ed:89:05:d2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 11:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:79:2d:41:89:33:fc:e8:c9:9d:68:e5:de:
d5:2f:94:ff:4f:84:8f:23:d0:a9:b5:36:2b:3c:27:
a5:14:53:ed:65:d8:45:ba:68:b2:f5:b9:9e:72:72:
1c:38:a2:6b:9d:38:75:91:7a:ee:48:c9:5e:e5:b3:
22:9e:de:5e:8d:41:2f:f6:3a:d3:03:f4:59:8d:5a:
8b:9c:ee:fa:38:ae:f3:92:86:12:b8:15:23:88:e2:
e4:4b:59:54:c3:ca:ee:4a:15:3f:cb:61:01:eb:5d:
bf:da:91:05:6e:79:54:a0:6e:7a:db:14:59:35:bc:
28:c7:48:62:9e:1d:85:3e:b7:c2:ce:66:57:f0:7c:
b0:94:98:5a:9d:46:4d:12:c7:51:46:5d:be:da:2b:
fe:7d:89:db:ac:a6:f2:4a:9b:40:6d:d1:a5:49:61:
c8:96:ee:5a:78:cb:81:a6:53:9e:f8:d6:2e:ae:dc:
cf:4c:37:01:cd:d6:87:3e:b5:c5:21:0d:89:b2:a3:
b6:9d:e5:83:38:e3:f1:48:91:39:db:56:5b:3a:61:
01:a8:2c:26:f6:8b:8e:51:22:1a:93:30:fc:76:2b:
2d:da:06:5c:a0:1b:ac:05:e5:b9:54:32:fd:75:46:
e9:d1:73:5d:d0:1e:77:52:ce:ce:5f:8d:d9:74:f1:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.58.104.0/21
89.58.160.0/19
89.59.0.0-89.62.255.255
194.97.32.0/19
194.97.96.0/19
194.97.160.0/19
194.97.224.0/19
195.4.0.0-195.4.91.255
195.4.94.0-195.4.127.255
195.4.176.0/21
195.4.216.0-195.4.255.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5430
Signature Algorithm: sha256WithRSAEncryption
27:eb:bb:12:3d:e2:9e:1a:8e:d3:6e:8d:25:a1:75:00:bd:c0:
26:4e:24:74:dc:11:54:6d:61:5b:c8:26:ea:d0:8f:af:46:1f:
81:ff:f4:a9:17:81:b9:72:09:58:18:e1:da:5c:ac:b5:61:9e:
c9:f1:88:20:05:ab:34:0b:d2:37:99:ba:12:11:f0:9f:3a:78:
2f:73:48:c5:ea:72:fd:ec:4d:7f:fb:64:56:85:2e:1e:78:6b:
90:0f:b9:8f:17:58:35:34:a9:8d:ca:04:1e:11:56:75:52:df:
54:b4:82:bd:6c:b5:c7:14:f9:2c:34:e7:03:e5:94:87:8c:7c:
a3:5a:57:0d:88:13:f7:73:ce:c2:de:0e:2c:c3:86:d4:5e:87:
bf:6b:dd:c6:07:6b:6b:aa:dc:87:90:4d:7c:17:72:1d:fd:f3:
c7:f4:6c:28:22:af:bc:8c:b8:97:c9:0a:61:33:7c:e7:96:06:
8a:2c:b5:4d:6a:23:cb:85:4d:48:ab:93:38:cc:c7:dc:f4:90:
94:a2:5d:a9:35:31:c8:de:a5:d7:48:e9:93:df:4e:0a:ab:05:
a0:79:a1:cd:d7:2a:22:61:aa:2e:6b:27:05:33:a4:43:1f:e0:
a1:dd:e0:86:f1:0e:87:91:27:f1:37:6a:75:b0:44:fb:a6:a1:
19:7b:2a:db
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISAZkUhydM/uYyqho9se2JBdKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTA0MTE0MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjgwMTk4NGNjMzhmMGE0ZmM1YWZlMWFkZWFiNjgwYzFiODllOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMV5LUGJM/zoyZ1o5d7VL5T/T4SP
I9CptTYrPCelFFPtZdhFumiy9bmecnIcOKJrnTh1kXruSMle5bMint5ejUEv9jrT
A/RZjVqLnO76OK7zkoYSuBUjiOLkS1lUw8ruShU/y2EB612/2pEFbnlUoG562xRZ
Nbwox0hinh2FPrfCzmZX8HywlJhanUZNEsdRRl2+2iv+fYnbrKbySptAbdGlSWHI
lu5aeMuBplOe+NYurtzPTDcBzdaHPrXFIQ2JsqO2neWDOOPxSJE521ZbOmEBqCwm
9ouOUSIakzD8dist2gZcoBusBeW5VDL9dUbp0XNd0B53Us7OX43ZdPECQQIDAQAB
o4IC/DCCAvgwHQYDVR0OBBYEFK+AGYTMOPCk/Fr+Gt6raAwbielbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2JmZDM3
Yy1jYjEyLTRhOWMtOGY1ZC00MDIxMjY1YzM5YjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvYmZkMzdj
LWNiMTItNGE5Yy04ZjVkLTQwMjEyNjVjMzliMC8xL3I0QVpoTXc0OEtUOFd2NGEz
cXRvREJ1SjZWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF
BwEHAQH/BG0wazBpBAIAATBjAwMAPmgDBANZOmgDBAVZOqAwCgMDAFk7AwMAWT4D
BAXCYSADBAXCYWADBAXCYaADBAXCYeAwCwMDAsMEAwQCwwRYMAwDBAHDBF4DBAfD
BAADBAPDBLAwCwMEA8ME2AMDAMMEMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhU2
MA0GCSqGSIb3DQEBCwUAA4IBAQAn67sSPeKeGo7Tbo0loXUAvcAmTiR03BFUbWFb
yCbq0I+vRh+B//SpF4G5cglYGOHaXKy1YZ7J8YggBas0C9I3mboSEfCfOngvc0jF
6nL97E1/+2RWhS4eeGuQD7mPF1g1NKmNygQeEVZ1Ut9UtIK9bLXHFPksNOcD5ZSH
jHyjWlcNiBP3c87C3g4sw4bUXoe/a93GB2trqtyHkE18F3Id/fPH9GwoIq+8jLiX
yQphM3znlgaKLLVNaiPLhU1Iq5M4zMfc9JCUol2pNTHI3qXXSOmT304KqwWgeaHN
1yoiYaouaycFM6RDH+Ch3eCG8Q6HkSfxN2p1sET7pqEZeyrb
-----END CERTIFICATE-----
Generated at Thu Sep 11 10:17:12 2025 by rpki-client