Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.cer (raw, json)
Hash identifier: /TFw4ZuPDQM4gC2QRnN4ngLKpxwylJcNNPjv8LhwZWM=
Subject key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019961B8028A252E60EE3988E5D7CD66F156
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Sep 2025 11:24:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.202.80.0/22
IP: 2a0c:cd00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:b8:02:8a:25:2e:60:ee:39:88:e5:d7:cd:66:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 19 11:24:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:4d:38:a6:d7:0c:a8:66:d9:75:88:4e:6c:
e2:89:7f:ae:80:91:5d:28:63:72:3c:0e:dc:ac:01:
e0:f2:6e:37:94:c3:d1:d2:83:bd:47:78:1e:a1:ef:
c8:9f:36:06:51:91:29:6d:16:bc:f7:5d:b7:7c:63:
29:c7:df:61:42:0a:77:ac:0f:a9:20:bd:86:35:f2:
05:cb:4c:ff:a6:47:8d:c3:98:d8:e6:40:28:69:ed:
25:e8:90:f3:24:b0:83:39:f3:01:bc:ea:53:46:63:
5a:9d:59:ed:c9:6c:95:fd:cf:5a:a5:a7:9e:70:65:
22:67:57:24:16:d0:b0:66:79:3f:a8:03:ca:61:16:
83:f5:50:a6:80:4c:de:66:5f:b5:1c:0d:74:bc:c2:
ac:27:90:8b:52:66:91:0c:42:93:44:aa:67:ef:1d:
c3:87:ca:8c:44:46:92:68:ed:fc:03:32:d9:86:13:
d9:f2:18:1e:1c:9f:62:9b:0a:1a:c5:95:80:fa:6b:
33:26:0e:d9:b3:3b:d9:f8:89:af:c1:f6:3d:96:93:
40:ab:cd:a8:29:f3:f7:2d:06:59:08:bb:1d:25:de:
e6:f5:de:c5:6f:b0:a5:07:e8:05:25:6e:f3:95:01:
a2:de:b8:33:86:d6:4e:55:f7:90:43:e3:c3:8f:8a:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.80.0/22
IPv6:
2a0c:cd00::/32
Signature Algorithm: sha256WithRSAEncryption
40:49:3d:eb:9b:7b:8a:1d:be:43:38:7c:64:ea:36:cc:4e:f0:
15:41:56:6a:ad:95:e4:5d:c3:a2:4e:94:26:0d:f5:d2:17:f5:
c6:ad:05:40:53:04:b4:a8:ca:38:69:2b:cb:bd:a5:77:04:13:
53:24:cb:5e:bf:54:06:31:d3:ef:de:0f:a3:6f:da:9a:39:fd:
be:d5:94:b1:09:19:b0:94:cc:84:bc:53:62:4e:03:2e:24:d7:
c2:cc:b0:4d:13:cf:12:5b:f6:b8:3a:d5:ef:91:c8:a1:8e:ee:
3a:63:c0:17:45:61:a0:07:86:e0:72:fc:0a:05:fe:a9:89:2f:
c0:de:e2:07:1f:2d:3d:32:d6:3f:d5:f1:3a:c8:18:ea:d4:99:
10:ee:4e:08:7f:35:b8:77:d8:9b:a0:a2:ef:2c:1e:4c:83:29:
79:cf:83:09:ff:46:ac:13:1d:c8:7c:4f:6c:e0:fc:7e:01:ce:
3d:c9:41:7d:93:42:08:de:f8:85:2f:e9:44:77:1d:4a:ee:a7:
66:6f:9a:b7:77:4a:38:5c:a0:0c:04:66:28:c6:10:87:b5:17:
04:43:fb:68:7a:18:0f:93:08:2f:5b:62:92:ae:c2:06:f7:b5:
ec:73:b9:bf:ae:f2:26:c6:f7:7f:2d:d2:1e:d4:f5:8a:57:70:
cc:3b:a7:cb
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZlhuAKKJS5g7jmI5dfNZvFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTE5MTEyNDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGViNzM5YzZkM2RjNzFhNjIwNmM4ZjM3MTI0MjZmZjUzMmEwYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSJNOKbXDKhm2XWITmziiX+ugJFd
KGNyPA7crAHg8m43lMPR0oO9R3geoe/InzYGUZEpbRa89123fGMpx99hQgp3rA+p
IL2GNfIFy0z/pkeNw5jY5kAoae0l6JDzJLCDOfMBvOpTRmNanVntyWyV/c9apaee
cGUiZ1ckFtCwZnk/qAPKYRaD9VCmgEzeZl+1HA10vMKsJ5CLUmaRDEKTRKpn7x3D
h8qMREaSaO38AzLZhhPZ8hgeHJ9imwoaxZWA+mszJg7ZszvZ+ImvwfY9lpNAq82o
KfP3LQZZCLsdJd7m9d7Fb7ClB+gFJW7zlQGi3rgzhtZOVfeQQ+PDj4qEnwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNjrc5xtPccaYgbI83EkJv9TKgr+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzAxODFm
OC00ZmE0LTQ2OTctYTI3Mi0zMzNiNmQ0ZWE0NWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvMDE4MWY4
LTRmYTQtNDY5Ny1hMjcyLTMzM2I2ZDRlYTQ1Yi8xLzJPdHpuRzA5eHhwaUJzanpj
U1FtXzFNcUN2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCucpQMA0EAgACMAcDBQAqDM0AMA0GCSqGSIb3
DQEBCwUAA4IBAQBAST3rm3uKHb5DOHxk6jbMTvAVQVZqrZXkXcOiTpQmDfXSF/XG
rQVAUwS0qMo4aSvLvaV3BBNTJMtev1QGMdPv3g+jb9qaOf2+1ZSxCRmwlMyEvFNi
TgMuJNfCzLBNE88SW/a4OtXvkcihju46Y8AXRWGgB4bgcvwKBf6piS/A3uIHHy09
MtY/1fE6yBjq1JkQ7k4IfzW4d9iboKLvLB5Mgyl5z4MJ/0asEx3IfE9s4Px+Ac49
yUF9k0II3viFL+lEdx1K7qdmb5q3d0o4XKAMBGYoxhCHtRcEQ/toehgPkwgvW2KS
rsIG97Xsc7m/rvImxvd/LdIe1PWKV3DMO6fL
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:00 2025 by rpki-client