Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
File: CXa-2b-5b_oZgiBViqPVuMj5zT0.cer (raw, json)
Hash identifier: ZQ1S7X+i0aknydafRsbPT7txATRIZ19udbuSUfccmOg=
Subject key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019783DA2ED8141EC0741EDBB273A14B158D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Jun 2025 16:23:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198891
IP: 91.236.137.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:da:2e:d8:14:1e:c0:74:1e:db:b2:73:a1:4b:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 16:23:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:ca:8a:47:58:16:ce:dc:38:9f:b7:69:f0:
ff:51:15:11:60:fa:c0:95:20:54:8a:cb:37:25:5b:
3a:83:be:2b:49:87:c2:40:e3:30:85:0d:a4:f5:08:
fd:48:3d:f4:d6:69:4c:e8:a9:28:a1:92:d0:46:3a:
38:1d:5f:3e:80:df:dc:47:b4:fd:2e:b7:32:de:f4:
95:13:fa:45:d2:03:c5:5f:40:76:67:90:75:c8:04:
17:cc:3f:0e:4d:be:5f:0c:52:7f:1c:c6:f6:0c:37:
05:f8:8b:5a:d1:26:19:00:b4:58:c2:61:d6:61:c3:
e9:0a:cb:d2:1d:e6:85:22:95:1f:cb:b5:94:30:a2:
d7:12:96:56:21:c0:28:a6:a2:aa:42:22:e8:3f:14:
10:ec:7f:23:ce:a8:9f:fe:54:c5:a5:2a:1e:cb:dc:
24:e4:79:a5:1d:1d:b5:c9:d3:10:d8:fa:b1:d1:fe:
22:31:f0:32:9e:d8:ac:04:01:94:44:b7:7e:17:c4:
ad:b7:33:7d:7e:f3:7b:1f:c6:8f:a9:82:77:b4:bf:
c7:cc:48:d2:7f:1b:78:3f:ae:98:a5:20:92:62:0b:
42:f3:c6:6b:98:f0:08:3f:5e:01:0d:3b:85:b7:34:
84:23:dc:0b:5d:81:ba:07:80:e0:0e:64:b1:33:55:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.137.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198891
Signature Algorithm: sha256WithRSAEncryption
1f:1f:ef:e7:01:df:06:f2:12:a7:2f:e3:91:c1:17:ff:66:50:
5e:07:f6:84:e6:ed:c4:87:1d:4b:52:db:3d:4a:5e:f8:04:8c:
8d:8a:36:3e:8c:67:cb:d5:83:c5:d8:62:92:76:d6:e6:f5:6b:
62:5b:ae:37:3e:23:ef:1c:6c:f6:73:4e:c1:3c:f0:2d:26:6d:
d6:97:8d:bf:8c:52:17:c2:20:ce:2d:56:05:2e:b6:27:1d:4a:
c2:c3:00:e6:ed:93:3f:e6:8c:ad:59:4d:d8:79:79:a4:27:85:
65:e3:3c:0d:b3:27:9d:ae:e4:51:5d:2f:18:ce:3c:e1:c0:7a:
7a:d8:82:b3:a2:16:04:0c:68:52:cc:fd:3b:dc:0a:12:0a:7b:
0d:8f:a9:58:22:c7:b2:19:bf:04:be:5c:8d:7a:b7:8e:8d:0d:
f7:a7:14:1f:ee:38:71:92:e8:d4:23:78:8f:33:81:eb:3f:ec:
54:c9:5c:3a:91:16:53:43:b7:ce:47:d1:7b:81:da:2e:6e:09:
e9:68:9e:5f:f3:8c:28:7a:39:da:7e:c8:73:d6:eb:cc:02:18:
83:17:73:09:ec:07:e1:82:bd:17:d2:c4:04:c0:dd:f5:3a:8e:
09:7d:30:2f:74:f9:57:49:12:d1:c0:02:ca:2c:99:32:02:55:
84:33:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 14:47:57 2025 by rpki-client