Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
File: 51hbXNR32QB1zbYxCfVyeXZsKXY.cer (raw, json)
Hash identifier: Nj36EtrtZhvDNKPks1Tcxek8B1Lz5M0Mo4DBO6FLvSE=
Subject key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C8F8BA7E9FF6AB1CF254D7F3030662E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 12:36:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52112
IP: 2a09:2500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:f8:ba:7e:9f:f6:ab:1c:f2:54:d7:f3:03:06:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 12:36:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7585b5cd477d90075cdb63109f57279766c2976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:2c:06:ac:be:4e:70:f8:ea:28:84:df:52:
b5:cb:27:88:96:ac:eb:48:96:a3:5a:38:25:13:3d:
78:52:1e:63:14:0f:2e:74:ae:a8:87:c9:1f:c5:0a:
8a:9a:29:73:19:6e:40:00:5e:77:7c:cf:a4:e8:6c:
df:25:bd:b4:66:ac:f2:73:9c:48:9c:df:c5:4d:7a:
c2:5d:e3:52:49:4d:80:36:35:c0:5b:ca:a0:00:68:
8e:55:1d:86:f4:00:29:f2:c6:57:03:78:44:e5:d9:
76:e6:1a:a1:bd:ee:c4:86:01:61:07:da:7f:1f:fc:
41:55:15:03:cf:bc:b3:c1:f2:aa:78:2f:51:a6:7b:
b8:d7:40:88:6e:a6:fb:f2:1c:4e:bd:26:95:5d:34:
80:56:3a:dd:00:c2:f2:1a:c1:e5:61:e1:ae:7d:53:
19:d6:2a:c3:c6:df:e9:48:3d:f7:c3:79:b4:f4:b0:
4d:29:52:52:78:b3:bf:3d:18:1a:fe:ec:61:ad:88:
fd:61:22:86:95:c1:c7:0a:f6:ed:49:e5:13:7e:d9:
a1:31:5a:c4:67:ac:85:58:f1:ee:4a:91:2c:e4:25:
c4:9b:6f:2d:ea:59:36:e0:1d:60:58:4f:4f:0f:98:
6b:1f:93:96:40:bd:87:90:7d:15:35:74:a1:11:63:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52112
Signature Algorithm: sha256WithRSAEncryption
93:f2:ef:6d:92:5d:a6:99:59:67:37:d1:b8:9c:c1:72:2f:93:
67:83:c0:c6:4c:87:d8:00:4f:7b:b9:dc:e4:23:c7:21:d1:5d:
c8:fb:00:d2:99:2f:a1:56:af:50:94:72:63:b4:b3:0e:a7:6b:
03:fd:50:46:9f:5f:21:e4:d4:f1:61:38:c3:77:d6:91:6e:34:
23:3b:de:60:5a:a3:b6:21:60:37:42:8c:fa:de:5c:c9:40:dd:
9f:a5:b0:d7:e6:a2:c5:27:72:9e:2b:e6:4f:80:dd:b2:7d:30:
01:e5:b2:93:86:da:c7:67:28:42:77:84:d3:e3:a8:e6:34:af:
83:59:d5:26:36:74:de:0f:0d:c3:c1:c7:9c:16:fa:27:5f:09:
5d:24:b0:bb:87:b6:61:8a:d5:a6:f9:4a:49:78:83:50:3b:42:
7a:f3:60:06:fa:e1:3d:9a:9c:49:e8:6d:e2:4d:c2:48:6c:0f:
af:8e:dd:08:96:92:1a:8f:5a:30:f5:d3:ce:2c:1c:84:3c:72:
b0:1a:73:4e:64:6c:9d:4f:17:f1:6c:c4:5a:df:b8:06:5d:6e:
37:39:04:c7:e4:b2:82:81:4f:9e:95:d9:b5:35:30:87:8e:03:
48:97:1b:f4:f0:62:73:7c:99:c7:75:b3:6c:4c:8d:27:85:4e:
b3:1d:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:45 2025 by rpki-client