Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.cer (raw, json)
Hash identifier: NTQo+9dNn56rAhu5DaBDb5GxyxVDdE8HoKC3QIhSHFg=
Subject key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E32659DBF8F6B6706961C47336EBDA46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Oct 2025 14:36:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15726
AS: 197932
IP: 37.60.200.0/21
IP: 46.231.232.0/21
IP: 193.39.192.0/24
IP: 213.149.64.0/20
IP: 217.14.160.0/20
IP: 2a00:f88::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:26:59:db:f8:f6:b6:70:69:61:c4:73:36:eb:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 14:36:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:2a:26:39:87:fe:04:18:00:66:c3:17:f0:
9b:70:f6:32:35:77:29:b9:90:e3:1e:98:e9:04:d8:
42:14:ef:55:7d:f4:1b:1c:92:07:73:3d:a2:1c:11:
f0:3f:2b:ec:85:79:93:e7:1a:c4:a1:2d:51:94:49:
84:6c:28:22:03:7e:ac:cc:6f:cc:a6:c4:db:5a:f1:
ce:80:67:64:3a:0c:e9:56:a0:de:6f:03:84:dc:b5:
a3:ed:6c:a3:db:0a:82:44:fa:62:90:f5:74:ad:0d:
c3:15:3b:37:b9:81:24:5e:a5:01:a3:f6:80:0f:b5:
4a:f4:f0:0d:c5:65:91:b3:cf:92:8e:c9:bb:78:07:
37:7e:d7:b1:cd:42:e1:2d:5c:f3:0b:fc:65:f7:ac:
a1:92:90:2e:22:c3:86:b6:b9:28:5b:7c:58:22:23:
84:7a:52:dd:e1:6c:83:23:6e:1b:18:e8:84:30:fe:
db:e6:ff:56:03:c4:08:5b:a3:e8:39:63:a4:96:2f:
b9:f8:b8:82:ba:05:d9:1b:1c:57:7e:93:e0:e2:95:
c5:ba:83:08:74:14:9c:ef:dc:f0:51:94:ee:15:b0:
3c:e3:37:8b:56:ae:db:54:44:42:1a:df:e5:1f:44:
10:35:a5:3e:94:ec:2b:ba:75:1a:56:32:55:89:3e:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.200.0/21
46.231.232.0/21
193.39.192.0/24
213.149.64.0/20
217.14.160.0/20
IPv6:
2a00:f88::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15726
197932
Signature Algorithm: sha256WithRSAEncryption
79:62:7e:ea:aa:7f:52:29:15:14:9c:3f:9c:a5:b0:50:36:5c:
98:89:31:88:5d:ee:ad:06:39:3e:a4:38:0e:d2:e6:b1:93:b3:
04:b7:95:b1:bb:9f:a1:d9:3b:42:8f:10:f6:71:6a:a7:a8:ef:
4c:dd:f3:bc:eb:82:b3:e5:96:1a:0e:77:9a:8c:36:9d:9a:aa:
a3:a6:39:13:71:56:d5:85:42:38:e9:9f:4a:11:22:95:f5:97:
c7:61:41:bd:ac:db:bb:13:70:d1:40:de:b5:56:61:e7:d5:3d:
61:4b:47:f6:b2:09:43:e8:43:b0:d3:72:4b:ea:07:db:69:f2:
a1:bf:34:f0:08:85:08:14:f8:41:07:dd:2a:4e:a1:ff:34:29:
87:9c:19:60:6e:8d:2e:09:53:8a:11:a6:61:01:5d:c2:cf:62:
9b:79:f8:a3:5f:bf:74:4d:ba:6b:19:64:bd:34:08:78:fa:b4:
6d:72:41:92:8f:b4:d3:aa:30:37:87:54:b3:d5:4f:6e:c9:e1:
5c:a7:a8:38:67:a8:98:fe:9a:27:89:e9:fa:50:e8:f2:50:96:
98:ae:63:54:f5:a7:f0:07:ec:a7:0d:37:ff:61:27:89:fc:2a:
0d:c7:64:75:b8:0c:50:2b:00:cb:ba:70:8d:e5:56:28:82:46:
74:31:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:27:02 2025 by rpki-client