Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
File: stLBGv8HK-w3pYJiEU4cBr7bSUI.cer (raw, json)
Hash identifier: tU1QvJuaCmsbJRlcnhPJIhf5piWYQdc8nSuNYaQP9Ps=
Subject key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990F346235C681F16F26CEF72F58A6AFF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Sep 2025 10:51:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.54.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:34:62:35:c6:81:f1:6f:26:ce:f7:2f:58:a6:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 10:51:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:4e:f6:2c:c0:b7:5e:dc:4f:36:1c:7f:c4:
d8:12:f2:44:5a:54:74:b8:21:f4:22:0f:a0:c8:bb:
4d:7e:d8:cd:e0:42:90:9c:9e:a7:a8:67:3e:af:7b:
82:49:c3:52:7a:c0:39:4d:fd:96:75:bc:6a:ca:76:
b7:4d:c0:49:f0:56:5a:20:52:10:ee:6d:f9:0c:49:
83:86:31:66:53:d4:5e:27:29:8a:56:e0:1c:87:8d:
20:f4:98:7e:be:9b:d1:ab:9b:81:2a:90:a1:db:1a:
21:5e:48:6b:9d:db:be:4a:d9:42:f2:2f:d2:80:aa:
fd:e4:fb:16:65:fd:0d:8d:3c:94:cc:17:c6:9f:f0:
aa:c5:63:25:ae:d5:b1:33:d1:f5:dd:d9:a7:05:ea:
09:1c:09:a7:ae:d7:4d:5d:32:1b:ed:d2:c9:7d:fd:
91:63:c3:39:3e:8f:0d:d2:f6:0d:2b:b7:1f:82:aa:
58:79:e1:f8:16:46:f9:02:b0:dc:9d:4c:d7:69:04:
fd:14:3b:d2:13:c3:d5:96:19:36:07:a0:fd:2b:da:
c2:15:e7:0b:91:4e:ae:de:c7:a6:06:c9:a4:40:c9:
84:22:3f:ab:01:00:ba:a4:26:27:01:11:f0:39:a4:
d7:00:c5:36:d0:d6:22:13:93:ba:81:f1:20:ea:98:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.88.0/22
Signature Algorithm: sha256WithRSAEncryption
45:14:a9:69:ea:4c:72:b0:e6:4c:47:c1:0e:f6:f3:3c:d2:95:
d4:10:09:10:ba:6e:6b:54:b5:a2:89:ec:48:88:ee:35:1e:41:
cd:d7:d3:b2:ab:1b:86:5e:54:3a:0d:16:a0:28:f2:62:fa:cf:
1b:da:5d:1f:83:a9:c3:e3:51:dd:10:d8:55:7a:b8:a6:b5:35:
19:74:03:ae:b5:6e:5a:59:46:44:37:fb:b3:09:eb:d1:7f:55:
d2:2b:7b:e0:1e:2a:4e:e7:7d:33:5f:17:bd:d0:61:9b:19:1e:
6c:5d:82:c7:5d:cd:f4:87:45:06:cc:f7:93:65:84:3c:17:c6:
a9:d6:ab:1a:31:b4:69:66:74:86:89:97:15:6c:a1:57:fa:36:
37:30:87:ca:a2:14:21:9f:8f:df:bd:4e:fb:fe:06:3f:dd:ea:
b4:32:7c:fb:27:e4:df:5d:2c:95:d9:9e:f1:1c:94:82:13:87:
41:79:b9:30:d7:75:94:77:2d:53:1f:79:d2:0c:eb:5e:57:5f:
76:36:bf:17:16:ef:df:aa:95:be:70:b7:96:f6:e5:e7:9d:b6:
07:8c:d0:61:58:7d:c9:e0:36:26:be:f9:38:dc:f5:4e:68:d4:
03:ea:15:6e:49:74:5d:8c:9d:57:da:b8:9d:e8:ea:41:a3:62:
04:93:a6:95
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZkPNGI1xoHxbybO9y9Ypq/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTAzMTA1MTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmQyYzExYWZmMDcyYmVjMzdhNTgyNjIxMTRlMWMwNmJlZGI0OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVpO9izAt17cTzYcf8TYEvJEWlR0
uCH0Ig+gyLtNftjN4EKQnJ6nqGc+r3uCScNSesA5Tf2Wdbxqyna3TcBJ8FZaIFIQ
7m35DEmDhjFmU9ReJymKVuAch40g9Jh+vpvRq5uBKpCh2xohXkhrndu+StlC8i/S
gKr95PsWZf0NjTyUzBfGn/CqxWMlrtWxM9H13dmnBeoJHAmnrtdNXTIb7dLJff2R
Y8M5Po8N0vYNK7cfgqpYeeH4Fkb5ArDcnUzXaQT9FDvSE8PVlhk2B6D9K9rCFecL
kU6u3semBsmkQMmEIj+rAQC6pCYnARHwOaTXAMU20NYiE5O6gfEg6piUXwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLLSwRr/ByvsN6WCYhFOHAa+20lCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzI4M2Qz
Mi0zODBhLTRlNmUtYTk1Ny1jNWJhZWEzZjE3MjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvMjgzZDMy
LTM4MGEtNGU2ZS1hOTU3LWM1YmFlYTNmMTcyOS8xL3N0TEJHdjhISy13M3BZSmlF
VTRjQnI3YlNVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwjZYMA0GCSqGSIb3DQEBCwUAA4IBAQBFFKlp
6kxysOZMR8EO9vM80pXUEAkQum5rVLWiiexIiO41HkHN19OyqxuGXlQ6DRagKPJi
+s8b2l0fg6nD41HdENhVerimtTUZdAOutW5aWUZEN/uzCevRf1XSK3vgHipO530z
Xxe90GGbGR5sXYLHXc30h0UGzPeTZYQ8F8ap1qsaMbRpZnSGiZcVbKFX+jY3MIfK
ohQhn4/fvU77/gY/3eq0Mnz7J+TfXSyV2Z7xHJSCE4dBebkw13WUdy1TH3nSDOte
V192Nr8XFu/fqpW+cLeW9uXnnbYHjNBhWH3J4DYmvvk43PVOaNQD6hVuSXRdjJ1X
2rid6OpBo2IEk6aV
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:53:50 2025 by rpki-client