Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
File: vdAX3W18v-gmYVTBrkNMTPi2ilc.cer (raw, json)
Hash identifier: 7rRIxDRR2wUSUpeKD1CO566MPp61UDex+M8VOqa1moE=
Subject key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A6E31D8F6D407F918E2FCAD43428B13F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Nov 2025 14:35:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60213
IP: 91.145.32.0/19
IP: 185.247.108.0/22
IP: 2a01:b6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:31:d8:f6:d4:07:f9:18:e2:fc:ad:43:42:8b:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 10 14:35:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:e6:2b:7f:02:cb:49:6a:a7:45:1b:92:db:
87:d2:7a:5e:7a:f8:03:41:24:ed:fb:13:85:41:8d:
6e:58:5b:15:87:cd:e0:f9:38:ff:84:90:c4:34:f0:
3c:8c:5f:7f:43:8c:3d:9f:53:1d:95:c4:d6:14:e6:
19:94:88:92:47:97:71:53:73:6a:e5:aa:8b:be:49:
1a:e5:54:07:e0:0a:1a:37:89:f1:10:45:41:b1:91:
d8:c4:d8:41:5f:45:55:29:ba:f1:3a:e8:d4:8d:de:
6c:a5:97:f2:11:53:c5:6a:af:83:4d:a9:92:4d:d3:
70:11:db:dd:f1:33:37:19:f4:ec:2b:c0:62:8e:1f:
99:56:da:81:36:52:e6:ee:6f:f0:10:e3:5f:b4:b1:
21:47:ed:d9:eb:58:f8:d7:03:71:0a:a4:3a:c0:6f:
87:86:0a:03:62:e8:35:12:39:f6:66:76:b1:50:c2:
d1:c2:53:ff:7a:be:66:9f:26:66:1c:ac:4f:84:56:
55:f4:9d:e4:0b:68:0f:84:83:d8:dd:f7:8a:f8:73:
80:f9:b3:70:1a:b4:76:08:e4:b4:1b:d4:84:74:02:
99:7a:44:fc:c5:84:60:3a:d7:28:cb:f1:c7:41:d7:
10:41:ec:47:c2:d6:c7:dc:0e:ee:7b:0e:27:6a:d0:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.145.32.0/19
185.247.108.0/22
IPv6:
2a01:b6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60213
Signature Algorithm: sha256WithRSAEncryption
0a:33:0c:1b:8a:65:e9:6c:1e:fe:ff:96:d7:16:62:0f:22:b7:
42:2f:f1:63:1d:29:25:83:ce:de:b7:09:30:12:58:5f:5f:8d:
47:46:69:7d:67:aa:36:15:a5:d5:9e:f0:c0:fc:00:ee:65:93:
9f:d1:d8:b7:20:c2:c7:a2:cd:98:bb:3e:86:87:36:7b:eb:bb:
a7:04:4f:39:0e:a7:1f:5c:a0:cd:0a:e1:99:46:c4:09:c5:d9:
8f:09:78:8a:b6:22:f2:e1:b5:98:5c:18:35:eb:86:d9:28:5d:
38:c7:51:24:a9:47:dc:43:da:79:76:dd:f9:18:0c:0a:96:f9:
4c:ae:17:01:52:28:8d:2a:02:79:ce:25:a4:2a:b9:12:9f:4a:
30:bb:a8:b4:3f:15:ef:d7:4a:e8:12:ab:4a:81:da:9b:ca:da:
8c:5a:d2:55:e4:da:6e:04:ad:33:80:2f:bf:d4:d5:d5:bf:be:
ca:a6:ee:89:07:5f:74:f9:7f:5c:9d:a6:b1:16:c6:a3:f9:cc:
66:fe:42:3d:dd:34:a0:c2:e5:8a:39:20:ec:a3:d2:38:87:12:
d7:2f:43:93:ba:b9:45:3c:7a:40:93:3d:22:7c:02:51:39:12:
a6:37:fd:8a:2e:da:8e:70:8b:6d:2e:d0:76:1d:6f:65:b8:29:
87:c6:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:04:17 2025 by rpki-client