Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
File: IPpO3bIfCQGSPBifQej1x0mmWCk.cer (raw, json)
Hash identifier: A+oOJF0pp2kIjdrvVI85WXEGo5ld78JVAaDzXVjU5jE=
Subject key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01994DA6639BECE12062904E9993B41A8839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Sep 2025 13:52:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200302
IP: 94.242.0.0 -- 94.242.47.255
IP: 2a00:1838::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:a6:63:9b:ec:e1:20:62:90:4e:99:93:b4:1a:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 13:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:66:f1:42:7d:14:fd:17:1a:61:b1:e4:c0:
14:ff:1e:7c:75:f5:54:17:d7:9b:b1:90:a3:c9:ef:
37:67:d7:8b:ec:d0:ad:1d:f0:91:5c:b4:15:d4:cc:
f6:f0:98:92:1a:91:5a:c7:66:fe:42:55:89:0e:91:
46:cb:70:95:ef:65:c0:4c:0d:6c:a4:30:34:15:14:
c0:32:53:d0:e4:aa:ce:60:d9:ae:0c:f7:97:5d:57:
ee:7f:db:1d:e4:88:e9:fe:9f:43:e8:e7:bb:ad:d7:
14:65:a6:ca:c1:0f:b7:36:18:40:03:9c:e0:06:68:
4f:25:12:80:59:08:75:da:17:31:8e:12:c5:d9:d1:
88:d8:4d:ea:12:d7:64:76:f7:81:7e:e9:e9:66:96:
af:8c:82:c2:92:ef:09:86:bc:30:33:13:41:e5:0d:
0c:b1:22:07:e0:31:61:fc:66:db:10:53:26:a0:9e:
e7:4b:5a:e5:1f:b1:1a:da:92:50:a5:f6:94:a6:65:
e7:c7:70:96:59:bf:ae:09:d6:2e:71:e9:57:2a:f9:
a6:3a:e4:ad:1c:00:c7:42:9a:dc:bd:7d:e8:2c:56:
3d:7e:f5:de:2f:d5:65:6a:db:4c:8f:f3:4c:a5:0d:
59:b5:10:cd:77:26:99:47:bf:07:5f:fd:ba:61:bc:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.242.0.0-94.242.47.255
IPv6:
2a00:1838::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200302
Signature Algorithm: sha256WithRSAEncryption
8a:6d:76:e5:50:ae:e5:0a:a4:a2:ee:9e:9e:ca:a0:6e:d5:d9:
e0:a3:84:29:4a:e1:95:25:a2:95:d6:b2:86:bb:6e:7a:4c:a4:
74:19:12:75:ff:74:e0:34:0b:4f:91:44:d8:3a:a6:80:9b:c6:
48:75:83:48:30:27:1a:66:07:f5:8b:80:aa:e7:32:57:19:92:
c5:4f:40:5e:af:82:41:64:c1:ce:a9:36:43:01:90:02:5d:43:
25:3b:be:0c:1e:35:1e:91:e2:70:b6:01:a4:8e:a9:fd:db:a9:
ac:3d:4c:83:78:ad:c6:e2:7d:80:ad:45:16:2b:47:93:64:70:
d9:3a:6e:c2:ae:f2:77:d4:e2:06:bd:54:0a:ed:aa:9a:f0:cd:
18:56:c3:95:e6:62:c0:59:9e:f7:d7:6e:45:5f:0b:39:e2:bb:
0f:48:ea:ac:b7:e2:ab:f9:2e:e5:7d:d0:47:57:bc:69:1f:8c:
4a:7f:ab:59:a8:3c:cb:06:25:91:fd:75:9e:62:e9:c7:ef:1f:
33:39:3f:39:78:43:87:cb:93:76:fe:d4:d9:08:6b:ed:60:ce:
9d:e6:0f:a9:b0:2a:c7:3b:bd:a6:88:d5:fc:ae:3b:59:f0:0d:
a7:83:81:6c:5d:ff:84:b2:1c:dc:fc:87:d1:fd:26:a4:fc:c0:
9f:f2:fa:cb
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZlNpmOb7OEgYpBOmZO0Gog5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTE1MTM1MjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGZhNGVkZGIyMWYwOTAxOTIzYzE4OWY0MWU4ZjVjNzQ5YTY1ODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mRm8UJ9FP0XGmGx5MAU/x58dfVU
F9ebsZCjye83Z9eL7NCtHfCRXLQV1Mz28JiSGpFax2b+QlWJDpFGy3CV72XATA1s
pDA0FRTAMlPQ5KrOYNmuDPeXXVfuf9sd5Ijp/p9D6Oe7rdcUZabKwQ+3NhhAA5zg
BmhPJRKAWQh12hcxjhLF2dGI2E3qEtdkdveBfunpZpavjILCku8JhrwwMxNB5Q0M
sSIH4DFh/GbbEFMmoJ7nS1rlH7Ea2pJQpfaUpmXnx3CWWb+uCdYucelXKvmmOuSt
HADHQprcvX3oLFY9fvXeL9VlattMj/NMpQ1ZtRDNdyaZR78HX/26YbzQlwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzk1MWIx
OC01MjQ0LTRiMmItYTIyZC1lZDVmMDBjOTUwNjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvOTUxYjE4
LTUyNDQtNGIyYi1hMjJkLWVkNWYwMGM5NTA2Ny8xL0lQcE8zYklmQ1FHU1BCaWZR
ZWoxeDBtbVdDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF
BwEHAQH/BCYwJDATBAIAATANMAsDAwFe8gMEBF7yIDANBAIAAjAHAwUAKgAYODAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDDm4wDQYJKoZIhvcNAQELBQADggEBAIpt
duVQruUKpKLunp7KoG7V2eCjhClK4ZUlopXWsoa7bnpMpHQZEnX/dOA0C0+RRNg6
poCbxkh1g0gwJxpmB/WLgKrnMlcZksVPQF6vgkFkwc6pNkMBkAJdQyU7vgweNR6R
4nC2AaSOqf3bqaw9TIN4rcbifYCtRRYrR5NkcNk6bsKu8nfU4ga9VArtqprwzRhW
w5XmYsBZnvfXbkVfCzniuw9I6qy34qv5LuV90EdXvGkfjEp/q1moPMsGJZH9dZ5i
6cfvHzM5Pzl4Q4fLk3b+1NkIa+1gzp3mD6mwKsc7vaaI1fyuO1nwDaeDgWxd/4Sy
HNz8h9H9JqT8wJ/y+ss=
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:05 2025 by rpki-client