Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.cer (raw, json)
Hash identifier: yubkF9c5daOzI3BguWk8JLkfgPNGv2xnmDM99FTi3eA=
Subject key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199DCDF98F34DF41B5D295D36E3A3CE7A70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Oct 2025 09:21:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215130
IP: 45.129.73.0/24
IP: 83.142.28.0/24
IP: 2a14:3940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:df:98:f3:4d:f4:1b:5d:29:5d:36:e3:a3:ce:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 09:21:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:cf:e9:ab:24:75:09:0d:2b:fa:cb:87:dd:
fd:f6:29:99:43:02:43:21:6e:6f:d3:cc:00:b6:81:
11:02:d3:70:84:76:86:51:c2:aa:b2:5a:55:ed:19:
53:e0:af:a6:93:ae:1a:c6:df:e7:8c:65:21:88:68:
6e:f7:bc:27:15:7e:e7:a6:99:9d:e4:4f:03:b5:d0:
c1:97:32:1e:21:8d:50:43:c5:30:81:ba:0b:f9:17:
1b:ad:7b:f7:b9:b5:47:45:b5:48:cb:4d:2c:5c:68:
e4:9a:0a:92:f7:5d:02:78:83:5d:87:cd:e6:18:0f:
3e:6a:62:3f:e9:ba:75:31:fb:43:3e:39:e3:b2:ae:
92:be:d2:9f:b3:0b:85:a7:fd:d8:b3:e1:af:a0:9c:
92:b1:30:63:34:7b:b6:a0:b9:0a:e2:34:8b:80:ad:
e1:75:0d:2a:e9:78:4d:8d:c6:d4:7e:9b:d0:9b:d3:
96:8a:f8:31:83:84:72:3d:25:94:8c:56:81:32:8a:
e7:d9:a1:22:23:de:a5:59:ef:96:ce:05:c0:7a:ec:
4d:d2:c2:c6:81:1a:ce:a5:77:a2:05:e7:a3:9c:55:
cc:7b:bf:35:65:50:21:b6:7b:4d:ba:d0:30:09:10:
76:b4:e4:5a:dd:c0:bd:92:3c:a0:3f:f1:39:d0:fb:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.73.0/24
83.142.28.0/24
IPv6:
2a14:3940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215130
Signature Algorithm: sha256WithRSAEncryption
43:2c:c2:e5:91:96:66:9d:59:41:21:cf:df:58:11:a0:ec:41:
30:e3:7d:3f:49:10:fd:95:d4:10:e8:27:23:ec:dc:fc:c0:11:
dd:37:b7:cc:55:00:f3:7b:cf:1c:1a:ad:5d:23:89:16:c4:1a:
98:6a:f3:01:81:a1:5b:ba:24:7f:2c:2a:9f:0d:26:3c:22:ef:
1f:cc:fa:ce:8b:2a:0f:c5:7c:3d:f0:c5:9b:2d:3f:12:9b:bc:
eb:cb:78:26:9b:42:e7:54:34:09:13:0d:be:7e:8e:65:86:53:
9c:64:1b:d0:ce:df:08:7a:ba:f1:d0:51:7f:22:f8:3a:0c:e9:
e5:ad:83:ab:b0:df:d9:a5:4b:9f:f0:75:37:89:c1:07:e4:a3:
45:a3:68:1e:8c:7c:44:f8:0f:89:3e:df:2b:aa:12:61:bd:75:
4f:e4:7d:95:85:5f:86:29:5f:7f:4e:c5:ab:27:bb:95:b8:f5:
32:ce:48:a9:af:21:65:07:f4:7a:19:34:e8:ca:01:42:57:ba:
71:2a:0c:b1:f2:93:3d:cd:d0:86:94:3c:f4:c4:19:56:e8:e2:
b1:b7:a3:85:1b:a8:ed:8d:1e:fd:2a:62:10:cb:87:fa:ee:52:
9a:4d:4f:8d:e6:9c:a3:08:05:77:a7:67:42:e7:de:09:b3:f6:
dd:1c:3a:18
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZnc35jzTfQbXSldNuOjznpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDEzMDkyMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY0YjlmNDg1NjQyMDg5ZjM2YjE3NGQ5NjQyZGM0ODM3ZmY0ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweXP6askdQkNK/rLh9399imZQwJD
IW5v08wAtoERAtNwhHaGUcKqslpV7RlT4K+mk64axt/njGUhiGhu97wnFX7nppmd
5E8DtdDBlzIeIY1QQ8UwgboL+RcbrXv3ubVHRbVIy00sXGjkmgqS910CeINdh83m
GA8+amI/6bp1MftDPjnjsq6SvtKfswuFp/3Ys+GvoJySsTBjNHu2oLkK4jSLgK3h
dQ0q6XhNjcbUfpvQm9OWivgxg4RyPSWUjFaBMorn2aEiI96lWe+WzgXAeuxN0sLG
gRrOpXeiBeejnFXMe781ZVAhtntNutAwCRB2tORa3cC9kjygP/E50PvJ3QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFCT0ufSFZCCJ82sXTZZC3Eg3/00kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2M0N2U5
MC0wZjA4LTQ2M2ItODgxMC1jMDdiOThmNmU3NjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYzQ3ZTkw
LTBmMDgtNDYzYi04ODEwLWMwN2I5OGY2ZTc2NS8xL0pQUzU5SVZrSUluemF4ZE5s
a0xjU0RmX1RTUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQALYFJAwQAU44cMA0EAgACMAcDBQMqFDlAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIWjANBgkqhkiG9w0BAQsFAAOCAQEAQyzC
5ZGWZp1ZQSHP31gRoOxBMON9P0kQ/ZXUEOgnI+zc/MAR3Te3zFUA83vPHBqtXSOJ
FsQamGrzAYGhW7okfywqnw0mPCLvH8z6zosqD8V8PfDFmy0/Epu868t4JptC51Q0
CRMNvn6OZYZTnGQb0M7fCHq68dBRfyL4Ogzp5a2Dq7Df2aVLn/B1N4nBB+SjRaNo
Hox8RPgPiT7fK6oSYb11T+R9lYVfhilff07Fqye7lbj1Ms5Iqa8hZQf0ehk06MoB
Qle6cSoMsfKTPc3QhpQ89MQZVujisbejhRuo7Y0e/SpiEMuH+u5Smk1PjeacowgF
d6dnQufeCbP23Rw6GA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:42:04 2025 by rpki-client