Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.cer (raw, json)
Hash identifier: KHHMlfFB1+pwS7xT4D0RnV3i1bJahtXhy7AAw+ZfiO0=
Subject key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990A132A644C273C44C77AD9FFF7199EBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Sep 2025 10:57:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49972
IP: 31.214.168.0/21
IP: 134.255.200.0/21
IP: 194.32.209.0/24
IP: 2a0a:32c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:13:2a:64:4c:27:3c:44:c7:7a:d9:ff:f7:19:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 10:57:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:cc:24:5a:ff:cf:8e:8e:c4:3c:35:42:bc:
3c:d5:2b:76:4f:0f:b9:3f:3f:09:6c:8b:a8:05:68:
4c:2e:29:40:4d:64:24:f9:74:de:58:71:af:01:9b:
c7:6f:56:1d:a1:00:ce:61:4c:48:0d:72:f5:08:65:
dd:c5:32:cd:da:db:ae:e5:eb:57:76:42:7a:ee:d9:
a7:3b:c7:33:f1:b7:bf:a7:d2:55:ff:69:1b:79:0c:
2a:21:0f:16:c8:57:7a:50:43:b6:79:1c:44:53:21:
57:b9:b0:27:aa:a0:3f:03:e9:77:03:a8:20:21:58:
72:78:2d:42:80:1c:ad:fc:9d:67:de:a7:0d:86:5c:
a4:44:26:38:48:a1:c7:36:cf:f8:5a:27:f6:7e:d2:
89:7d:ab:7c:99:90:79:db:7a:0c:20:da:ff:e0:ad:
4e:d4:a6:14:c4:7e:f6:e8:00:51:be:34:95:ef:a3:
e9:77:69:ea:2a:ef:a4:e6:0b:9a:63:b6:e6:9c:bc:
e1:f4:7c:7f:20:2b:47:ee:c6:42:3c:77:ab:73:a7:
98:ee:7e:3c:d0:99:2d:19:9e:df:68:88:f8:16:8f:
6e:6d:28:d7:3e:cc:32:42:ae:95:e7:99:ef:d3:c6:
d1:ca:b5:ff:55:df:57:fb:f5:3e:94:b2:75:75:ec:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
134.255.200.0/21
194.32.209.0/24
IPv6:
2a0a:32c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49972
Signature Algorithm: sha256WithRSAEncryption
3b:f7:18:9e:2b:8b:30:b6:14:ac:14:d5:76:b6:69:ec:c6:da:
f9:f8:9c:af:24:0c:50:7f:78:b8:c2:ce:cc:75:89:54:9a:6e:
dc:ce:23:76:cd:cb:2f:76:35:36:4b:b6:fe:d0:89:c1:ed:48:
e0:c0:86:90:e5:bd:2d:e3:65:45:7a:22:52:e9:17:c7:45:1f:
49:10:79:34:df:1c:18:da:8a:af:16:66:c5:f5:e0:b7:fa:d9:
20:18:e2:fb:04:62:2a:ac:da:71:d5:e2:be:93:97:77:d1:31:
5b:05:2d:4e:bf:64:e8:dc:8a:1a:fa:18:48:67:b9:ea:02:2c:
24:ba:ad:ca:90:ac:6d:96:9a:b3:70:2a:16:85:6d:38:c0:c8:
0a:cf:d9:a6:16:fb:4e:6e:38:9d:a6:e8:68:92:5e:23:15:8a:
ae:e4:da:fd:9d:71:9f:6e:cc:6d:6f:c0:c3:9b:0a:fb:3c:6a:
5c:03:9a:c3:80:94:9e:24:4e:b2:33:55:7c:e3:b6:4f:de:b0:
f0:e2:21:43:80:33:1d:a6:2a:13:c6:82:59:17:00:56:51:f3:
c9:da:ec:4e:9f:04:e1:fa:05:26:2e:1b:b5:fa:47:bc:b7:03:
a1:57:d3:ba:c6:6f:d7:f6:e5:ab:9d:dd:59:84:2c:6b:ba:60:
4a:e2:e1:3c
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZkKEypkTCc8RMd62f/3GZ68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTAyMTA1NzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzZlNWQ3MDkzNWI4Y2JjMzdjZjIxNmM0NDY2OTdkNGMyN2E5OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfPMJFr/z46OxDw1Qrw81St2Tw+5
Pz8JbIuoBWhMLilATWQk+XTeWHGvAZvHb1YdoQDOYUxIDXL1CGXdxTLN2tuu5etX
dkJ67tmnO8cz8be/p9JV/2kbeQwqIQ8WyFd6UEO2eRxEUyFXubAnqqA/A+l3A6gg
IVhyeC1CgByt/J1n3qcNhlykRCY4SKHHNs/4Wif2ftKJfat8mZB523oMINr/4K1O
1KYUxH726ABRvjSV76Ppd2nqKu+k5guaY7bmnLzh9Hx/ICtH7sZCPHerc6eY7n48
0JktGZ7faIj4Fo9ubSjXPswyQq6V55nv08bRyrX/Vd9X+/U+lLJ1dexlHQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFNNuXXCTW4y8N88hbERml9TCepk+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzBiMDZj
MC1kODkwLTQ5YmQtYTI5Zi1mMDdlZmFjNGUyZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMGIwNmMw
LWQ4OTAtNDliZC1hMjlmLWYwN2VmYWM0ZTJkZS8xLzAyNWRjSk5iakx3M3p5RnNS
R2FYMU1KNm1UNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDH9aoAwQDhv/IAwQAwiDRMA0EAgACMAcDBQAq
CjLAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDNDANBgkqhkiG9w0BAQsFAAOC
AQEAO/cYniuLMLYUrBTVdrZp7Mba+ficryQMUH94uMLOzHWJVJpu3M4jds3LL3Y1
Nku2/tCJwe1I4MCGkOW9LeNlRXoiUukXx0UfSRB5NN8cGNqKrxZmxfXgt/rZIBji
+wRiKqzacdXivpOXd9ExWwUtTr9k6NyKGvoYSGe56gIsJLqtypCsbZaas3AqFoVt
OMDICs/Zphb7Tm44naboaJJeIxWKruTa/Z1xn27MbW/Aw5sK+zxqXAOaw4CUniRO
sjNVfOO2T96w8OIhQ4AzHaYqE8aCWRcAVlHzydrsTp8E4foFJi4btfpHvLcDoVfT
usZv1/blq53dWYQsa7pgSuLhPA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:42 2025 by rpki-client