Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer (raw, json)
Hash identifier: eo64ocNUq4sVMuC88ReppO4R4rkruNvnrd2JL6JgSU4=
Subject key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199EC07EAAA7A3DD972869997DC52B96878
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Oct 2025 07:59:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.177.177.0/24
IP: 2a14:400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:07:ea:aa:7a:3d:d9:72:86:99:97:dc:52:b9:68:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 07:59:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:24:6e:a7:ec:6d:11:b8:75:c8:8a:3d:9b:
8c:5e:59:eb:60:f8:fa:b1:03:49:e4:7e:cf:4b:c8:
a1:06:a5:79:d6:6b:a4:76:1d:43:99:f5:b4:45:de:
b3:e4:b7:d5:df:00:2c:59:3d:18:c5:51:f5:6a:a2:
dd:a1:02:aa:96:e1:34:e4:aa:45:05:fc:8a:7f:a7:
9f:69:7c:10:7c:9d:f1:d2:df:11:e8:73:94:ea:67:
ca:fd:8a:17:8c:6d:f1:af:23:eb:5f:75:42:3b:40:
fa:cf:0c:ef:a0:02:7a:74:68:7e:25:e1:b9:87:65:
d1:6e:31:73:44:d4:cb:3d:cd:69:27:99:3f:83:ab:
1d:4c:a2:c0:9a:f1:7d:f0:59:81:44:58:ef:bc:13:
3f:41:aa:37:17:7f:e8:b5:38:e8:75:6c:ee:bb:c1:
81:8e:c4:07:9e:69:f0:92:d6:31:3f:df:01:12:f9:
b1:2a:5e:f6:b9:dc:c1:14:f1:5f:80:dd:c9:61:91:
bf:a3:20:29:70:ca:46:6f:9e:93:2f:fc:58:2e:2d:
23:65:41:8b:48:1c:6e:40:58:10:53:60:a0:e0:60:
79:d7:0b:7e:08:64:29:7d:6b:ab:fc:a5:ca:14:72:
93:4c:6f:42:90:ad:ba:92:f2:eb:d2:fc:2c:6d:b9:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.177.0/24
IPv6:
2a14:400::/29
Signature Algorithm: sha256WithRSAEncryption
7e:f8:48:0d:e2:6f:60:f4:dd:03:10:9b:7a:76:4d:d1:41:29:
59:7c:97:75:c7:eb:b6:a8:e8:48:80:1f:54:9d:47:1e:9d:07:
20:35:33:8a:bf:59:e5:b1:e1:f1:ad:cf:7f:26:a9:53:4a:59:
4b:42:b9:07:df:ed:e6:fe:aa:1b:b7:cc:cb:f0:bb:42:ab:59:
4f:29:31:e3:28:8f:22:fa:50:c5:44:cb:e3:a4:ad:b0:c4:20:
31:c7:a4:25:28:66:ed:ce:6a:f9:45:3f:35:f5:cb:cc:e0:86:
c8:85:97:58:f4:0d:69:b0:f6:cd:e5:19:fc:28:91:71:ab:fc:
55:67:3e:34:d4:eb:3d:71:d8:b4:56:db:97:8a:e7:fc:24:1b:
5a:67:9d:38:ba:56:48:9b:81:19:fb:64:8e:f5:af:52:7e:78:
ad:31:5a:6f:e8:c3:9c:64:7a:a1:3e:99:f4:ff:a2:83:1f:95:
67:94:2c:58:70:78:d8:4e:14:05:1c:9e:ef:68:a5:5b:3b:bc:
7c:c9:7d:91:97:0d:6f:18:97:4a:de:b7:19:7c:95:b1:01:47:
57:ea:ea:9c:7c:3b:51:db:76:1b:61:bb:ab:62:ed:4b:e8:a6:
42:8a:8a:12:51:c9:f0:d3:b2:6a:64:02:88:2d:47:e4:a7:16:
e7:ee:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:08 2025 by rpki-client