Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer (raw, json)
Hash identifier: OFUlSQtFzjnbTfM6ZU3YxD99zU4LBamLJ211rcvepf0=
Subject key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019980FF4A7894369CD4CE56CED338683375
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 25 Sep 2025 13:10:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198990
IP: 66.51.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:ff:4a:78:94:36:9c:d4:ce:56:ce:d3:38:68:33:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 25 13:10:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:dd:22:19:c2:f2:00:13:f7:48:26:d2:be:
af:b7:64:49:52:26:b7:86:ef:af:ce:32:0d:0c:9c:
56:ea:06:fb:9a:a3:c1:80:db:6e:b8:3e:32:f5:00:
fa:e9:aa:f5:57:b7:cf:69:7b:dc:8d:42:5b:81:1f:
b7:77:ee:fb:dc:9d:73:be:ab:89:bc:2b:e5:2e:0a:
0b:40:e9:85:92:02:73:31:f5:af:9b:a6:81:b4:cd:
8d:b3:89:df:3e:c8:41:fb:e6:7b:7a:f1:0b:2a:5e:
6d:aa:53:0c:77:2a:9c:f1:7a:52:2e:6d:0c:ab:4c:
01:b3:23:06:9e:02:bf:10:b1:25:5d:6e:6f:38:bc:
3d:f4:47:f4:4b:09:46:1a:94:35:3b:f5:c8:95:e6:
d4:59:ea:c8:a2:d2:db:eb:fe:41:5d:c3:aa:b9:b2:
00:6e:d0:98:c8:15:b2:7a:fe:04:ac:bc:cc:7c:63:
56:0e:96:4a:08:c5:e1:8c:0f:3c:4c:b9:8a:b8:05:
49:a2:84:d0:4c:a5:d7:70:1f:bb:64:7d:df:c3:29:
db:87:8e:7c:f6:51:18:8d:b9:98:d8:96:b6:fa:9a:
82:f3:66:71:16:50:ef:2c:f5:bf:3b:d0:4e:06:d4:
6c:92:7a:60:ae:88:8c:ad:36:a3:90:78:37:5c:e9:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.51.96.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198990
Signature Algorithm: sha256WithRSAEncryption
84:fb:49:da:5e:9c:9d:03:2d:e3:e2:75:02:ed:1e:41:bc:4e:
e2:2d:26:1d:16:91:87:ef:4d:4d:12:68:a3:57:97:b9:c0:f4:
40:77:86:37:ad:e7:f7:4c:16:53:34:7b:a4:2f:4b:ff:00:5f:
aa:77:1d:7c:11:47:7f:f3:4b:47:51:ff:7e:67:be:98:d0:50:
ba:8c:c2:4f:75:49:62:cb:2c:a0:fa:ab:6a:98:10:0e:40:0c:
16:69:7d:84:ee:bf:5f:7b:6d:59:77:09:7c:c8:1a:27:46:67:
b0:df:40:41:a5:53:dc:8f:5d:10:86:9e:e7:bb:4f:cd:1f:84:
73:20:c3:14:1f:4a:80:8a:12:d1:1a:17:eb:72:07:24:bc:f9:
c1:d6:bd:19:d9:64:36:c7:5e:1a:5b:03:d9:2a:26:a1:4b:da:
db:63:7c:3e:eb:43:cd:90:4e:c1:cd:75:96:3f:de:5e:d5:0c:
90:10:ff:a2:9a:5b:37:8f:38:d9:35:86:cb:50:c9:d5:2d:8f:
a0:f3:3a:9b:a5:bf:e6:21:9a:66:0a:88:e4:da:d6:38:b6:44:
e3:d6:6d:30:12:49:c7:f7:87:38:df:f7:d8:0b:ab:8a:c2:ad:
90:18:ec:64:34:ea:1b:61:5a:b5:e0:68:d8:4f:04:e1:e3:f7:
2f:de:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:48 2025 by rpki-client