Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.cer (raw, json)
Hash identifier: nfhdKFjGxW8Jd69Yb+eagYGoj5odsxKXLeaPFM48iRg=
Subject key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C8235F147C35B6B667ED7419CFB9A24F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 08:43:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12465
AS: 13183
AS: 13253
AS: 16161
AS: 20554
AS: 20604
AS: 20942
AS: 31033
IP: 62.128.64.0/19
IP: 62.221.160.0/19
IP: 80.254.192.0/20
IP: 151.94.0.0/16
IP: 185.58.104.0/22
IP: 193.41.198.0/24
IP: 193.41.205.0/24
IP: 193.41.236.0/24
IP: 193.109.233.0/24
IP: 193.203.232.0/22
IP: 193.227.212.0/22
IP: 193.254.24.0 -- 193.254.26.255
IP: 194.29.204.0/24
IP: 217.118.144.0/20
IP: 217.171.160.0/20
IP: 2a00:b740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:23:5f:14:7c:35:b6:b6:67:ed:74:19:cf:b9:a2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 08:43:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:6c:c8:64:0a:25:f3:5f:01:87:6e:7a:81:
5e:86:4b:71:86:9c:a4:ba:b3:4e:b9:7e:cc:4a:ce:
e8:d8:db:f1:24:4b:7a:94:59:0d:c3:46:9d:d3:86:
7e:52:86:74:03:14:6c:fd:3d:3f:12:00:02:8a:85:
d8:c3:50:77:82:a7:9b:22:d7:4e:c8:10:ec:d1:6d:
b9:6e:ff:41:03:c8:9b:44:2f:ab:89:48:9b:fb:4d:
a0:48:e3:59:64:e5:0b:3f:a8:5c:fc:c8:76:a0:31:
90:dd:de:77:07:8d:13:2c:dc:c6:44:ad:96:1b:c0:
a2:85:15:33:d8:47:5e:17:05:1d:3d:7a:78:56:df:
91:1e:fd:29:7a:d6:63:13:87:db:3f:67:b7:32:34:
17:8e:be:ef:f3:7e:01:cd:ab:cb:9a:b1:48:64:ef:
a7:e3:12:f9:d9:f4:60:a2:c4:08:9c:5f:f6:8a:c4:
7e:c7:ec:8d:93:f1:08:01:69:f2:a5:ef:35:73:af:
46:d7:3c:26:a2:6c:82:45:4e:d9:df:38:7f:ec:60:
33:9e:ab:e1:cf:2c:62:b7:8f:d6:bf:59:f7:8a:01:
c5:d7:c0:95:5a:9f:7b:35:ee:87:76:81:d1:81:26:
7a:19:71:9b:9d:b6:d4:12:53:8e:19:15:98:0c:8b:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.128.64.0/19
62.221.160.0/19
80.254.192.0/20
151.94.0.0/16
185.58.104.0/22
193.41.198.0/24
193.41.205.0/24
193.41.236.0/24
193.109.233.0/24
193.203.232.0/22
193.227.212.0/22
193.254.24.0-193.254.26.255
194.29.204.0/24
217.118.144.0/20
217.171.160.0/20
IPv6:
2a00:b740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12465
13183
13253
16161
20554
20604
20942
31033
Signature Algorithm: sha256WithRSAEncryption
77:19:5a:b7:11:4f:c9:92:ab:a7:17:75:e1:9f:91:c8:c0:cd:
84:64:31:47:8e:a6:c2:79:d9:e6:ff:65:5c:23:9b:e1:49:3b:
54:e8:1d:bd:83:25:03:61:50:b7:1e:23:64:66:85:64:83:a1:
9b:07:eb:51:7f:45:a2:67:3e:e1:aa:f8:07:bb:bf:f0:96:70:
35:73:4c:c4:29:28:c6:10:0e:ef:cc:9d:30:f4:32:af:00:02:
a3:91:c2:c1:28:3f:54:0e:a9:21:9e:fb:ec:db:3d:36:ec:8d:
6e:bc:09:d3:4a:97:83:9a:65:d6:c1:05:72:83:5a:ba:f8:12:
1a:77:83:41:b7:43:74:94:3f:73:d7:f3:27:8b:1e:85:93:3f:
4b:ba:53:66:c2:c3:d2:d6:c8:5a:d2:1b:b2:9f:20:ac:59:9e:
c9:6b:ec:58:5b:ab:63:de:29:d5:6d:b5:f2:af:ff:bd:51:42:
c3:e0:de:f7:46:3e:de:5e:60:f7:1a:29:f8:33:af:af:56:91:
f8:0a:58:49:d5:15:1e:c2:c5:bb:c2:34:0d:78:bc:4d:99:14:
07:ca:d3:1b:7f:6a:4f:5b:5b:c9:be:ec:1e:72:2c:fa:34:40:
dd:66:a6:9e:ba:09:2a:fb:a9:df:82:63:9c:ff:77:34:a7:6e:
fe:85:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:04 2025 by rpki-client