Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer (raw, json)
Hash identifier: JlgUAyZZ+unsD0Wscz6G8oVaDnOFUxC82Y5uHCxVJsI=
Subject key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C7F7534D8DBB9A07EBD70358285973AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Oct 2025 07:54:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12879
AS: 43859
AS: 44113
AS: 60388
AS: 197292
IP: 185.31.108.0/22
IP: 212.73.96.0/19
IP: 2a00:b4a0::/32
IP: 2a01:70c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:f7:53:4d:8d:bb:9a:07:eb:d7:03:58:28:59:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 07:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:eb:77:ec:89:df:5b:d2:1a:24:86:c7:89:
76:92:31:ba:c2:18:ac:14:06:2e:d8:0b:c9:78:ff:
0d:e5:77:0b:34:ae:ab:1f:3f:65:58:d3:68:0f:9a:
bc:3b:51:19:fe:cb:c2:83:a3:8c:39:c8:5c:96:8c:
a8:95:6c:f1:3e:ef:f2:5e:56:2b:2b:0f:3b:00:a8:
08:af:5c:31:45:68:e5:88:b9:2b:1c:73:ea:58:51:
02:be:ed:64:4c:d8:cc:e6:52:df:9c:f0:5a:f1:97:
6e:61:55:53:f7:50:fb:a5:10:e8:14:63:a7:a1:c7:
35:51:83:a0:9e:5b:b2:e1:67:37:0d:a6:5f:b2:4e:
6e:ef:f2:bf:74:1c:fa:33:4f:fc:9c:2d:64:62:9a:
71:bc:14:56:b2:54:16:5a:4d:fa:7c:6c:e4:4f:09:
e5:a1:7c:17:83:c2:94:44:7d:97:81:01:39:e6:ff:
7e:19:ea:05:7e:7b:c4:ca:60:e0:2c:c1:99:cc:e2:
9c:1f:ff:76:7b:49:49:c2:b9:b6:f4:04:3b:3b:c0:
c0:a5:bb:c2:b1:7a:39:b8:27:e2:6b:cf:4f:f5:49:
f0:02:57:78:d1:bc:71:4a:48:38:bd:a3:24:cf:5e:
85:69:18:94:f3:5f:44:40:88:f0:4f:a5:ee:01:36:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.108.0/22
212.73.96.0/19
IPv6:
2a00:b4a0::/32
2a01:70c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12879
43859
44113
60388
197292
Signature Algorithm: sha256WithRSAEncryption
2a:f5:f3:69:70:31:d2:2f:f8:5b:23:05:be:d9:20:dd:68:56:
1d:0f:89:a3:d3:76:3a:89:69:8f:de:7e:77:f3:c8:2f:08:eb:
aa:98:50:7b:28:13:ae:35:bc:16:01:07:ab:fb:96:2b:84:36:
64:97:47:97:c1:f9:1b:81:93:b4:8f:b9:63:61:08:2e:f8:e5:
72:57:38:1f:ad:bd:fc:08:d4:df:2c:e8:37:3c:5e:0e:a2:21:
a2:fb:7a:7c:b7:5d:07:11:4e:88:df:23:a9:95:46:b5:7c:7a:
4f:25:f7:37:e6:f8:61:f4:8e:9e:7a:f8:42:9b:ae:e5:02:05:
ec:39:d3:1b:0a:e3:92:67:f2:46:81:ad:01:e6:eb:f5:79:17:
7c:2d:6a:70:4a:57:63:4f:bf:c5:8e:28:6b:d6:0b:23:3f:bb:
bf:a5:26:b3:59:81:be:81:ac:db:c5:3a:78:3c:52:c7:32:ba:
c4:77:64:fa:41:52:8e:20:b5:aa:bd:91:a9:39:03:4c:2e:58:
ae:07:5d:87:1f:e8:6a:f2:0c:74:99:21:e5:3d:cd:db:90:b2:
09:24:b4:8d:28:09:0c:a1:93:6e:c4:8c:54:41:63:09:3a:7c:
34:cf:ad:db:59:90:f0:35:10:fc:49:67:29:01:5d:4a:0c:2b:
44:dd:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:46 2025 by rpki-client