Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
File: CRX548KQJHXCTNRcaSmRvHH_ZkM.cer (raw, json)
Hash identifier: IORTvCdTq0WM1ea3djegHxPYobDmdB1KB9Z+4mzrFkM=
Subject key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198AD2F467B6EE81BEC907724A9E39E0F72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Aug 2025 10:03:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34191
AS: 199163
IP: 81.91.16.0/21
IP: 185.55.152.0/22
IP: 185.161.156.0/22
IP: 185.163.36.0/22
IP: 185.184.100.0/22
IP: 185.213.32.0/22
IP: 194.145.239.0/24
IP: 2a01:ae40::/32
IP: 2a02:4a20::/32
IP: 2a07:c600::/29
IP: 2a0a:9800::/29
IP: 2a0b:3180::/29
IP: 2a0c:ed80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:2f:46:7b:6e:e8:1b:ec:90:77:24:a9:e3:9e:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 15 10:03:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:ed:ab:58:3c:93:88:72:f3:ac:78:0a:54:
67:10:5d:0d:a1:0c:d4:6d:07:79:0c:17:f4:b4:18:
4a:3a:c3:63:55:c8:73:c5:f4:88:ea:75:e3:9e:f4:
c9:a0:72:73:b4:d8:61:f7:d5:51:52:29:ad:d0:28:
60:3e:76:cf:a6:c7:6c:b6:b3:32:41:13:48:b5:b9:
4c:2f:2a:83:36:58:5f:c6:81:8d:a2:6f:0b:6d:37:
6c:3b:ac:fe:3f:ba:cd:4c:80:f6:e6:fe:f6:b8:eb:
1b:82:6e:37:df:cc:dc:67:29:43:eb:80:25:7b:eb:
8a:d8:45:0b:6a:b9:3b:db:b3:73:90:23:37:cb:1a:
cf:91:03:ec:d6:23:5b:db:46:4d:f8:3b:01:91:87:
f2:fc:ee:dc:f3:a1:a9:b7:54:b9:8d:75:b2:66:ad:
35:d0:a4:36:01:bd:88:f6:93:1a:4e:d6:3c:2f:bd:
9a:0d:c4:00:09:94:79:23:2d:a5:c0:86:49:ce:33:
70:15:b7:6a:ba:3f:28:71:f7:e9:8d:5f:5b:2d:82:
fb:97:57:a8:d3:f4:b6:65:ba:65:d9:b1:01:d0:c9:
58:de:94:f8:4f:41:c3:45:f9:a5:e4:67:04:88:82:
9e:e6:91:9f:6a:eb:70:39:e6:53:ef:b5:84:b2:8e:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.16.0/21
185.55.152.0/22
185.161.156.0/22
185.163.36.0/22
185.184.100.0/22
185.213.32.0/22
194.145.239.0/24
IPv6:
2a01:ae40::/32
2a02:4a20::/32
2a07:c600::/29
2a0a:9800::/29
2a0b:3180::/29
2a0c:ed80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34191
199163
Signature Algorithm: sha256WithRSAEncryption
2e:7e:08:99:36:30:34:a9:97:c7:b7:76:f0:c7:72:2a:49:1c:
26:b5:61:75:36:0d:61:6a:2e:98:8a:ba:68:60:89:53:22:36:
b8:51:c3:72:74:d5:c1:89:aa:13:0d:65:ae:a3:1f:8a:b9:ae:
71:8d:70:ae:cc:8b:51:96:26:8f:47:12:a6:ca:a9:78:82:f1:
2e:cb:e7:af:cf:5b:f7:cc:fd:4c:07:ca:dd:8e:56:22:7f:fb:
b7:4b:ca:a0:b7:9e:91:e8:d3:5c:79:ef:1a:07:39:25:22:a3:
fc:ef:8a:db:41:8b:93:19:ce:f7:a5:f7:72:a1:55:ea:0e:99:
4a:9f:65:ff:13:e0:cc:f1:f7:b5:ef:7e:c2:89:1e:be:d9:9e:
71:7e:e3:f7:5e:94:55:9a:fa:c6:ea:78:d2:cc:8a:d5:36:b9:
50:6b:86:2f:d0:0a:d9:58:c8:e8:3b:05:7d:e8:11:83:89:c4:
a4:5b:10:9a:ea:98:55:13:f5:44:d0:3d:7c:d2:04:c1:38:d9:
dd:d1:13:50:ab:65:3f:92:fd:4a:dc:6a:5c:54:75:cb:b6:24:
81:0b:8a:5b:29:03:2f:f1:ee:61:fb:f2:87:36:d2:1d:9d:59:
e0:e4:13:44:a9:67:29:d3:ce:75:d7:d3:1f:39:ad:8b:35:df:
a7:82:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:18:35 2025 by rpki-client