Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1HANjm8CJXGgsm_NTHDAQI6k_8k.cer
File: 1HANjm8CJXGgsm_NTHDAQI6k_8k.cer (raw, json)
Hash identifier: PmWR9l2E1WebPXdIlsQ57l3qq1dggEnSLGhovTyHfII=
Subject key identifier: D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01977AB94B01DF57FD6C03E189E6A8483FFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
caRepository: rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Mon 16 Jun 2025 21:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.155.75.0/24
IP: 2a13:c000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:b9:4b:01:df:57:fd:6c:03:e1:89:e6:a8:48:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 21:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4700d8e6f022571a0b26fcd4c70c0408ea4ffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:27:87:31:2c:dd:e4:e8:17:af:6e:0c:33:
23:e7:4d:19:35:0f:6a:5c:1e:db:98:8e:2d:f7:ae:
1b:d8:4d:e7:44:59:57:04:68:46:13:42:03:73:d3:
59:d6:6e:1d:f8:83:7d:fb:52:c9:15:61:ec:d7:54:
70:c4:2c:6f:58:ea:b0:e7:57:c9:be:1b:ed:b0:6a:
66:e5:4c:69:0c:62:a2:f2:08:fd:5a:52:c2:31:c1:
1a:1d:b5:78:1e:ae:ab:29:dc:47:c8:e9:92:5e:6a:
aa:c5:51:48:6d:5b:a3:a4:41:57:19:e1:04:5f:51:
6c:c3:81:de:02:e9:a1:bc:7c:4b:c8:d5:37:43:1a:
45:97:2d:e7:b1:8a:f9:fa:3f:2b:90:b9:b1:81:ea:
22:6c:fd:c1:b8:35:43:d2:0d:5a:60:05:45:b8:14:
22:e7:37:46:d3:79:1a:e0:19:db:24:d6:d4:7b:a4:
ea:86:ea:d9:6b:7f:82:6a:ad:b1:a2:40:ee:cc:71:
b7:28:3e:0d:63:5f:7b:13:22:02:f7:4f:90:67:0e:
73:b4:58:f5:88:ed:fb:07:91:5d:d7:51:da:05:61:
50:82:f6:6c:a7:29:bf:45:b0:e2:54:bb:8b:ae:a3:
ee:e7:72:f8:e6:d1:d4:3a:6c:f4:7f:4e:5b:97:59:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:70:0D:8E:6F:02:25:71:A0:B2:6F:CD:4C:70:C0:40:8E:A4:FF:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/11/D4700D8E6F022571A0B26FCD4C70C0408EA4FFC9.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.75.0/24
IPv6:
2a13:c000::/29
Signature Algorithm: sha256WithRSAEncryption
5e:0b:62:1d:f1:0c:3f:86:8c:92:6d:6f:11:a3:0c:ca:19:5f:
e6:fc:e2:26:40:28:13:32:0c:af:e7:f6:9e:cd:93:5e:8c:c4:
42:7d:01:78:27:a6:7e:c9:a9:5a:c4:87:9a:e8:30:37:a9:0f:
e0:d6:53:19:4d:8c:ca:8c:49:ed:30:12:cd:18:04:fd:72:11:
94:51:52:f2:af:95:57:12:4d:ef:e8:2c:7d:05:99:4f:ff:f0:
f8:52:0a:8c:ea:91:5a:c2:c3:12:82:ea:9b:ea:5f:b9:9c:a9:
82:0d:19:f3:85:d6:cf:3b:9e:73:bf:fc:a8:d0:aa:46:f7:34:
63:a8:07:d5:fc:a6:48:9d:d2:d3:3c:ef:a9:2d:7a:9a:c3:c5:
2e:a8:d1:20:36:20:f4:59:b5:71:e4:69:40:ff:ff:87:d2:55:
34:b4:fe:40:92:65:15:07:2d:44:54:f3:54:bf:da:cf:ac:d8:
9f:00:4f:93:65:ac:60:84:26:b7:cb:3f:e2:1d:6c:11:dc:a9:
ac:51:ee:aa:a0:ad:f3:86:fb:f9:00:50:18:d1:8f:f6:d8:5a:
97:f4:84:bc:a8:78:aa:9b:4b:d7:76:7d:ae:64:4e:f6:cb:ae:
4b:e6:bf:76:64:5c:e5:66:28:0b:ec:4c:73:76:17:37:69:02:
70:8e:49:4e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZd6uUsB31f9bAPhieaoSD/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjE2MjE1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDcwMGQ4ZTZmMDIyNTcxYTBiMjZmY2Q0YzcwYzA0MDhlYTRmZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0nhzEs3eToF69uDDMj500ZNQ9q
XB7bmI4t964b2E3nRFlXBGhGE0IDc9NZ1m4d+IN9+1LJFWHs11RwxCxvWOqw51fJ
vhvtsGpm5UxpDGKi8gj9WlLCMcEaHbV4Hq6rKdxHyOmSXmqqxVFIbVujpEFXGeEE
X1Fsw4HeAumhvHxLyNU3QxpFly3nsYr5+j8rkLmxgeoibP3BuDVD0g1aYAVFuBQi
5zdG03ka4BnbJNbUe6TqhurZa3+Caq2xokDuzHG3KD4NY197EyIC90+QZw5ztFj1
iO37B5Fd11HaBWFQgvZspym/RbDiVLuLrqPu53L45tHUOmz0f05bl1nYwQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFNRwDY5vAiVxoLJvzUxwwECOpP/JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggElBggrBgEFBQcBCwSCARcwggETMFUGCCsGAQUFBzAFhkly
c3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvNmFiOTZlN2E2MTMw
NDk4YWE5ODEzZDdlZTViYmVkMzEvMTEvMIGBBggrBgEFBQcwCoZ1cnN5bmM6Ly9y
cGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgx
M2Q3ZWU1YmJlZDMxLzExL0Q0NzAwRDhFNkYwMjI1NzFBMEIyNkZDRDRDNzBDMDQw
OEVBNEZGQzkubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4u
bmV0L25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5I
QzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYB
BQUHAQcBAf8EHzAdMAwEAgABMAYDBAC5m0swDQQCAAIwBwMFAyoTwAAwDQYJKoZI
hvcNAQELBQADggEBAF4LYh3xDD+GjJJtbxGjDMoZX+b84iZAKBMyDK/n9p7Nk16M
xEJ9AXgnpn7JqVrEh5roMDepD+DWUxlNjMqMSe0wEs0YBP1yEZRRUvKvlVcSTe/o
LH0FmU//8PhSCozqkVrCwxKC6pvqX7mcqYINGfOF1s87nnO//KjQqkb3NGOoB9X8
pkid0tM876kteprDxS6o0SA2IPRZtXHkaUD//4fSVTS0/kCSZRUHLURU81S/2s+s
2J8AT5NlrGCEJrfLP+IdbBHcqaxR7qqgrfOG+/kAUBjRj/bYWpf0hLyoeKqbS9d2
fa5kTvbLrkvmv3ZkXOVmKAvsTHN2FzdpAnCOSU4=
-----END CERTIFICATE-----
Generated at Sat Jun 28 16:01:12 2025 by rpki-client