Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
File: IMotTLPla10plwqX_GResv1odqE.cer (raw, json)
Hash identifier: mwIi2c/6YWkT3c8CDV0jiXnMeVaaeH/xKRcelbEtFxQ=
Subject key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019971BCFC58C339C0B390E04167DE5D7333
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Sep 2025 14:03:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198770
IP: 37.18.74.0 -- 37.18.77.255
IP: 37.230.152.0/22
IP: 37.230.248.0/24
IP: 62.113.58.0 -- 62.113.63.255
IP: 85.92.116.0 -- 85.92.118.255
IP: 111.88.134.0/23
IP: 128.0.66.0/23
IP: 141.101.204.0/24
IP: 141.101.228.0/24
IP: 141.101.231.0/24
IP: 178.170.225.0/24
IP: 2a0d:b1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:bc:fc:58:c3:39:c0:b3:90:e0:41:67:de:5d:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 14:03:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:89:04:15:60:67:a8:e1:ec:e2:39:8e:6e:
77:d7:d1:db:a1:fd:51:94:f9:30:ed:17:ac:cf:da:
b1:19:2b:e7:af:01:3c:15:70:6e:92:d5:18:3f:19:
a6:26:08:ff:92:e0:8a:dd:3f:53:13:02:a7:2f:7d:
5b:b5:35:b0:f8:5c:8e:ea:06:43:64:3b:2b:dc:71:
20:48:6c:9d:21:98:f7:4b:e8:e2:c0:06:c7:a5:92:
7b:09:ec:e5:4d:13:c2:07:b1:f8:79:47:d9:35:72:
e4:dd:a1:05:99:99:82:75:fd:26:4c:13:24:c3:04:
1b:46:df:6c:ed:4d:9d:b5:d2:72:43:35:6a:35:54:
34:f8:1d:af:b3:c5:ff:88:15:e7:5c:c2:ea:28:46:
a7:32:3a:21:e6:fb:25:38:75:d2:ab:8e:51:dc:aa:
95:fc:82:72:dc:79:b4:7d:39:6f:30:44:25:35:f0:
2e:c3:46:19:e2:6f:fc:24:14:5a:c4:e6:fe:07:77:
8a:40:e4:2c:08:69:2f:e0:b6:1a:cf:b5:c6:81:ec:
34:e5:c4:a8:86:c5:f5:91:35:5d:5a:7f:80:00:ab:
e6:09:33:84:25:95:a7:b8:2b:08:cf:3f:c6:ec:1d:
d7:1b:eb:3d:2b:c7:c1:cd:be:22:7c:06:b4:84:b4:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
62.113.58.0-62.113.63.255
85.92.116.0-85.92.118.255
111.88.134.0/23
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198770
Signature Algorithm: sha256WithRSAEncryption
7b:aa:c7:4c:4b:86:64:c9:0f:50:e4:56:c6:91:0e:cd:1c:06:
be:27:71:18:20:1b:26:19:79:4f:6f:9f:7d:ae:2e:6b:6a:0c:
0a:44:57:b6:6e:df:b3:03:c3:37:d1:c1:02:06:03:39:d6:26:
51:3c:4d:64:e7:40:a2:8a:eb:00:c5:b5:aa:38:45:9c:39:c0:
bd:b0:04:27:76:a4:79:f5:ca:13:26:26:1f:4e:72:3c:39:98:
2e:ac:9f:8a:2f:50:8f:c3:b9:da:3f:21:a0:88:b8:37:4e:56:
e7:74:b8:db:02:a9:f9:15:5e:b3:e2:d3:48:c9:da:9f:ce:5f:
32:5f:3a:f4:3d:ba:83:72:78:79:cc:29:11:27:c2:64:82:78:
68:9b:67:6e:db:b4:78:be:59:e7:da:1f:e2:ba:fe:5e:dc:4d:
44:a7:6c:ab:fd:15:84:d9:43:37:a5:44:1d:5b:a3:47:a4:32:
9e:e6:d3:92:23:c0:a9:e7:55:ef:a0:5c:89:41:79:4a:15:3f:
d9:65:d5:2d:71:59:a6:14:30:10:42:d1:e0:5d:d7:d1:d8:16:
bd:80:af:83:d3:b5:e5:dc:07:de:60:e8:77:91:b8:3d:63:69:
cd:62:54:e0:07:9b:c2:80:f6:33:0a:48:c4:af:65:a6:28:7d:
25:fd:21:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:21:30 2025 by rpki-client