Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L1OI95ZqevrAc2x57WA7K3iGVsQ.cer
File: L1OI95ZqevrAc2x57WA7K3iGVsQ.cer (raw, json)
Hash identifier: RSHghGsaBzbVL5PhsFzJ8uxQ7K7YidetiSGlvUYLHo0=
Subject key identifier: 2F:53:88:F7:96:6A:7A:FA:C0:73:6C:79:ED:60:3B:2B:78:86:56:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197646AB08339357C6C0751E9E54231A36F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Jun 2025 13:53:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207043
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:6a:b0:83:39:35:7c:6c:07:51:e9:e5:42:31:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 13:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f5388f7966a7afac0736c79ed603b2b788656c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:3a:29:ea:9d:92:c4:e1:44:e2:82:e5:a4:
09:6a:d5:e4:ac:e4:9e:99:a4:93:8b:e6:c0:e8:57:
e7:19:26:ac:75:a7:7c:84:fc:23:c7:c4:c7:bb:e8:
ce:63:cd:a6:5e:d5:4b:47:d8:01:69:a6:38:04:30:
be:a6:d5:15:b3:83:dc:f9:52:8c:db:23:80:b5:9b:
5b:a8:02:c1:fe:f6:73:8f:cc:af:f0:15:29:21:43:
93:67:b8:9d:9f:f9:ab:35:fd:66:78:df:12:27:0a:
c1:0c:a8:30:ca:6d:27:88:aa:1c:5b:7c:5d:b7:f1:
d3:be:d7:24:64:03:37:c8:ef:86:71:81:9f:11:05:
18:60:a4:6a:89:7b:91:77:db:99:60:3c:08:77:5e:
b2:91:b6:a5:3b:94:f2:1b:fb:08:51:be:23:7f:a2:
34:55:c2:69:88:e2:50:81:4d:64:16:a7:d6:0c:3b:
17:0b:72:d7:3c:c0:a4:2d:5e:1a:f3:c0:2b:31:18:
ab:ac:34:53:84:dd:ee:9a:da:26:11:3e:1f:e1:c1:
8e:f6:9c:42:ce:7d:94:7a:d4:8c:cf:c0:50:1b:44:
7d:bd:8e:fc:bc:e6:90:4c:6b:b2:23:53:d9:72:94:
d5:82:48:51:1e:0a:b2:cd:c6:a9:f7:e0:fb:7b:df:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:88:F7:96:6A:7A:FA:C0:73:6C:79:ED:60:3B:2B:78:86:56:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207043
Signature Algorithm: sha256WithRSAEncryption
1e:d1:e6:e4:66:62:c0:7e:68:18:72:ab:bf:24:3b:e2:9c:48:
86:d2:04:84:83:0a:25:a7:59:8d:d3:71:3f:f4:f7:39:59:ac:
99:0c:21:28:47:ed:64:eb:e4:a3:e4:a3:6f:b0:d6:2b:89:83:
58:83:15:fe:a0:35:de:58:e5:76:20:01:aa:cc:4e:a4:55:a3:
0f:01:29:76:1f:c0:9b:c6:fa:7b:b7:92:04:24:7a:e6:b3:5d:
aa:3b:7c:79:c4:2d:58:27:80:46:43:51:02:1e:b3:1a:f6:a5:
d1:11:3d:9f:f7:08:fc:6d:b1:a6:43:d5:a4:ea:ad:6f:06:ba:
65:ef:68:78:56:bc:6f:b7:34:4e:9f:5f:cf:b1:e6:73:c5:95:
18:f9:9d:15:4c:bc:86:40:ce:b1:9c:34:12:03:ea:22:4a:fe:
d8:3e:7d:02:7e:e1:e7:ff:c4:08:e1:b8:26:82:b8:df:e7:e2:
91:f9:60:0d:5e:3f:ea:14:0b:84:70:97:69:5f:b7:ff:7e:14:
16:2d:34:0b:05:ef:dd:56:a7:b1:ec:ee:0f:45:76:f0:06:c3:
9a:22:79:58:74:d2:c6:b2:8c:60:11:26:03:28:bc:d0:a3:a6:
78:02:13:56:96:ed:bf:0c:f3:9a:4d:f7:f3:6e:b9:eb:a0:77:
a0:69:ef:47
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZdkarCDOTV8bAdR6eVCMaNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjEyMTM1MzIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjUzODhmNzk2NmE3YWZhYzA3MzZjNzllZDYwM2IyYjc4ODY1NmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pw6KeqdksThROKC5aQJatXkrOSe
maSTi+bA6FfnGSasdad8hPwjx8THu+jOY82mXtVLR9gBaaY4BDC+ptUVs4Pc+VKM
2yOAtZtbqALB/vZzj8yv8BUpIUOTZ7idn/mrNf1meN8SJwrBDKgwym0niKocW3xd
t/HTvtckZAM3yO+GcYGfEQUYYKRqiXuRd9uZYDwId16ykbalO5TyG/sIUb4jf6I0
VcJpiOJQgU1kFqfWDDsXC3LXPMCkLV4a88ArMRirrDRThN3umtomET4f4cGO9pxC
zn2UetSMz8BQG0R9vY78vOaQTGuyI1PZcpTVgkhRHgqyzcap9+D7e9+apwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFC9TiPeWanr6wHNsee1gOyt4hlbEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzIyNWY0
Ni1jNDU2LTRmNjUtYTNkYi00MTkwYjE4NDYwYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvMjI1ZjQ2
LWM0NTYtNGY2NS1hM2RiLTQxOTBiMTg0NjBhNy8xL0wxT0k5NVpxZXZyQWMyeDU3
V0E3SzNpR1ZzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMowzANBgkqhkiG9w0BAQsFAAOCAQEAHtHm5GZiwH5o
GHKrvyQ74pxIhtIEhIMKJadZjdNxP/T3OVmsmQwhKEftZOvko+Sjb7DWK4mDWIMV
/qA13ljldiABqsxOpFWjDwEpdh/Am8b6e7eSBCR65rNdqjt8ecQtWCeARkNRAh6z
Gval0RE9n/cI/G2xpkPVpOqtbwa6Ze9oeFa8b7c0Tp9fz7Hmc8WVGPmdFUy8hkDO
sZw0EgPqIkr+2D59An7h5//ECOG4JoK43+fikflgDV4/6hQLhHCXaV+3/34UFi00
CwXv3VansezuD0V28AbDmiJ5WHTSxrKMYBEmAyi80KOmeAITVpbtvwzzmk338265
66B3oGnvRw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 15:39:38 2025 by rpki-client