Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer
File: J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.cer (raw, json)
Hash identifier: rprn1xR57ebotTVQpi9wp8s56Z/Z43Hgxnod08LDJ3M=
Subject key identifier: 27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019987590508E44392D38E43E7BC4EF280F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Sep 2025 18:46:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209826
IP: 185.180.8.0/22
IP: 194.34.167.0/24
IP: 2a0a:9780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:59:05:08:e4:43:92:d3:8e:43:e7:bc:4e:f2:80:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 18:46:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27fca5b7a77d887649f68a45c90d667c76500164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:aa:7a:d3:5f:8a:1a:db:db:32:24:0c:e1:
f5:33:28:d5:a5:31:89:7a:c3:d4:41:f1:5c:e1:5f:
01:cf:36:a5:89:6d:7a:75:d5:34:9d:03:c6:ab:5c:
ef:72:a9:b4:6b:9f:2d:36:9f:13:81:ea:0a:14:5d:
64:a9:d7:5f:64:0d:88:10:f1:f9:27:e4:17:cc:68:
fb:42:ec:9a:4b:81:50:df:c9:76:b0:54:e3:00:12:
2b:c3:8a:1c:fa:ad:05:a7:0f:88:b4:83:46:60:98:
4f:00:57:93:b3:49:00:5f:4b:50:df:2d:fa:72:12:
96:e7:96:9b:ce:f7:ed:d9:cd:0c:6a:84:0a:d7:0b:
66:b4:21:d6:37:8e:f1:11:12:06:a3:69:90:2a:dc:
9e:02:b3:1c:b0:52:a7:48:0f:c6:0d:1c:f2:22:da:
22:06:c7:c7:26:47:a3:16:59:d0:27:5c:16:d7:f2:
59:fb:aa:b4:05:17:71:30:e8:c5:72:11:cc:01:da:
ef:e2:d7:81:5d:f9:f0:b6:f2:f6:b4:88:10:7a:d9:
bd:1f:77:16:07:a9:9d:48:b8:90:38:8b:4a:e3:8d:
6c:50:3f:47:77:a4:1b:8f:9e:dc:da:33:2d:40:ba:
28:00:aa:d7:35:76:7f:b6:85:1b:85:31:4f:47:40:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:A5:B7:A7:7D:88:76:49:F6:8A:45:C9:0D:66:7C:76:50:01:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/35385b-6684-459e-8327-c1fae00889db/1/J_ylt6d9iHZJ9opFyQ1mfHZQAWQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.8.0/22
194.34.167.0/24
IPv6:
2a0a:9780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209826
Signature Algorithm: sha256WithRSAEncryption
29:40:0e:ae:9c:b9:df:64:1b:5d:ef:b3:69:61:c4:a4:d7:5d:
0f:b2:d6:43:ac:79:d2:c8:e5:53:81:f3:82:7b:e1:1a:b1:8a:
8d:8b:cb:e6:5f:01:ca:78:da:fb:94:e0:f9:07:34:9b:9b:b3:
cb:f0:40:0c:55:ab:54:be:3d:26:56:2f:95:e4:f4:43:3e:0f:
38:96:7b:23:64:7a:e6:71:d1:c8:e6:04:bc:f4:5a:c3:aa:93:
ed:5d:5c:4b:5f:5f:b4:9c:e9:8e:42:c6:6c:ad:fc:88:eb:d1:
43:5a:a3:78:c6:2b:c6:11:57:04:25:a8:be:58:9a:ed:cf:c1:
26:14:8c:eb:e6:78:3e:fd:a6:89:dc:76:0a:20:1b:b8:1c:ca:
5a:d2:45:7e:4d:3c:d9:3a:03:9b:04:e6:1c:ec:b3:fc:59:f2:
4c:d7:4c:bf:04:8f:c7:60:97:14:a4:21:2e:8e:d9:fd:c3:a8:
8d:9f:29:9f:f2:af:aa:cd:91:6b:e8:2f:4d:27:34:ea:84:83:
b7:ab:89:68:56:a6:50:f2:76:37:86:7c:5a:15:fe:ac:1a:b8:
0a:d7:a8:34:c7:cc:3e:69:22:07:fc:21:c1:8f:c9:90:25:18:
20:77:cd:7b:e4:2b:3a:04:5d:8e:ed:12:f8:22:d9:8d:6b:46:
3f:b9:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:53 2025 by rpki-client