Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer (raw, json)
Hash identifier: Tief8xQkf+lPyHpeK6qBUsQDVIlwK6NUmzAyXw07p/Y=
Subject key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199DE4C657EA9B8B8CA697641374BE94FA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Oct 2025 15:59:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204934
IP: 2a0a:f480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:4c:65:7e:a9:b8:b8:ca:69:76:41:37:4b:e9:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 15:59:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:9c:48:9d:cb:3e:1c:49:06:9e:bd:b1:18:
94:b1:20:bf:ae:0f:b2:6f:cb:2c:33:38:c4:77:18:
af:63:f1:1f:cd:ed:56:2f:1e:41:0a:f6:fb:d9:f4:
83:92:3c:05:45:a7:dc:b3:df:fc:a2:88:9d:e6:1e:
60:56:31:db:64:b7:e0:be:2a:5f:1f:ab:7f:3c:5d:
de:3c:9d:04:b2:8a:0b:1a:c8:05:70:9a:49:2e:e1:
8a:f2:b0:77:82:56:7b:d0:8b:ec:95:5a:24:f5:0d:
b6:25:d8:b3:19:90:58:69:1a:1f:e3:bf:d8:ba:6a:
da:91:57:3b:de:1d:4c:92:1c:92:a6:16:d9:20:59:
c1:d8:e0:5a:49:9c:f7:f4:a0:d7:71:72:e7:1a:d3:
df:a4:96:f7:54:70:26:2e:47:65:d5:f5:a5:1d:79:
1f:06:b8:05:9e:92:ac:b9:b9:7b:9d:a5:07:25:48:
e6:14:c7:27:f7:53:a8:e9:47:60:d5:9d:02:fe:76:
66:38:05:59:86:48:fc:fb:95:60:80:cb:3b:1c:a1:
96:ea:9a:21:c0:05:b9:cb:c0:4b:81:85:91:26:fb:
58:96:e3:eb:6c:54:4e:45:6d:d2:fc:dd:25:7e:fc:
a9:d9:53:5e:70:3c:48:a4:e9:99:b6:13:b6:0d:fb:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204934
Signature Algorithm: sha256WithRSAEncryption
47:1d:0c:22:fb:a6:bf:7b:73:9d:30:c2:5c:52:30:57:fe:82:
c9:43:92:3a:e8:2f:fd:cd:de:f8:e2:22:bb:6c:87:8e:c5:27:
27:65:6a:99:50:13:a2:d0:96:48:fa:4a:4f:80:49:b0:01:29:
43:56:a1:e8:32:a8:56:a5:f6:55:15:6e:9f:a1:0b:b6:5c:ac:
67:54:b4:93:d9:c2:75:ae:1d:30:b6:34:bf:de:05:60:7c:43:
0e:bb:0d:ae:1e:df:0a:d2:61:89:f7:a3:05:4e:5d:4f:d6:57:
8d:16:39:87:e7:cd:65:b2:32:6c:f4:28:2e:a9:01:cd:01:35:
f4:33:89:94:31:79:9c:40:88:26:b8:ed:3f:0d:e3:7d:4b:68:
11:41:49:8d:81:f6:dc:0e:e0:ef:38:e8:2f:17:36:fb:45:f5:
ff:39:77:18:30:7e:af:bf:9f:86:e4:7e:3d:c7:e6:e6:2e:4f:
2b:a7:6c:d0:c6:d1:0f:9f:7d:a6:2d:16:68:80:a4:ae:9d:84:
c5:98:6b:39:7b:8e:e3:f2:83:54:e5:ce:4a:3a:0e:ea:1c:b5:
5d:d3:f7:69:09:4d:32:17:b9:0e:b9:f5:05:dc:c6:c9:0b:59:
98:7b:75:83:0a:29:4c:42:19:78:e8:d8:d1:d3:6b:ff:ba:bf:
a4:f1:f2:24
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZneTGV+qbi4yml2QTdL6U+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDEzMTU1OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzEwNmFjM2VhNzYwYjJkMDI0MmE5ZWZiYTJjMjExNmI2MjZmODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4CcSJ3LPhxJBp69sRiUsSC/rg+y
b8ssMzjEdxivY/Efze1WLx5BCvb72fSDkjwFRafcs9/8ooid5h5gVjHbZLfgvipf
H6t/PF3ePJ0EsooLGsgFcJpJLuGK8rB3glZ70IvslVok9Q22JdizGZBYaRof47/Y
umrakVc73h1MkhySphbZIFnB2OBaSZz39KDXcXLnGtPfpJb3VHAmLkdl1fWlHXkf
BrgFnpKsubl7naUHJUjmFMcn91Oo6Udg1Z0C/nZmOAVZhkj8+5VggMs7HKGW6poh
wAW5y8BLgYWRJvtYluPrbFRORW3S/N0lfvyp2VNecDxIpOmZthO2DfskYQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFOMQasPqdgstAkKp77osIRa2JvgkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2Y5MWE4
NS1lOTNjLTRhNDktODIxNS04NDk3NzE3YTRmNjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZjkxYTg1
LWU5M2MtNGE0OS04MjE1LTg0OTc3MTdhNGY2MS8xLzR4QnF3LXAyQ3kwQ1FxbnZ1
aXdoRnJZbS1DUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgr0gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDIIYwDQYJKoZIhvcNAQELBQADggEBAEcdDCL7pr97c50wwlxSMFf+gslDkjro
L/3N3vjiIrtsh47FJydlaplQE6LQlkj6Sk+ASbABKUNWoegyqFal9lUVbp+hC7Zc
rGdUtJPZwnWuHTC2NL/eBWB8Qw67Da4e3wrSYYn3owVOXU/WV40WOYfnzWWyMmz0
KC6pAc0BNfQziZQxeZxAiCa47T8N431LaBFBSY2B9twO4O846C8XNvtF9f85dxgw
fq+/n4bkfj3H5uYuTyunbNDG0Q+ffaYtFmiApK6dhMWYazl7juPyg1Tlzko6Duoc
tV3T92kJTTIXuQ659QXcxskLWZh7dYMKKUxCGXjo2NHTa/+6v6Tx8iQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:07 2025 by rpki-client