Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer
File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer (raw, json)
Hash identifier: Ht/236yJ3kDylPRyB7EsKfElT05ADgc5HCKioukDDKo=
Subject key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197AFEC55B74608FC064293006F64D03F90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Jun 2025 05:46:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.87.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:ec:55:b7:46:08:fc:06:42:93:00:6f:64:d0:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 27 05:46:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:aa:92:a4:b8:f3:51:3a:00:5c:fa:e9:68:
26:68:46:68:98:76:71:eb:d5:4e:2d:10:08:60:78:
dd:fa:92:62:21:91:60:63:be:81:7a:2d:53:4e:64:
72:39:3e:7e:54:31:e5:0b:fc:f9:fe:9b:db:5c:96:
24:03:0d:65:c1:2a:08:85:27:e4:5c:63:02:29:7a:
b5:92:25:ee:d9:b2:0e:eb:b4:76:de:45:9e:5b:b0:
db:74:8f:1a:a1:ad:c8:ce:f9:8f:af:f5:3e:da:fc:
fc:4a:de:e0:15:18:60:95:23:9b:f5:c0:3b:4c:6d:
d6:ec:18:6c:b6:59:88:0f:6a:85:22:29:0c:67:d2:
8c:8c:b4:ff:68:0b:6d:b4:32:77:85:65:69:05:eb:
4f:dd:67:41:cc:c7:f6:19:d8:13:97:4a:e7:21:2a:
4a:31:79:c1:f7:2e:4d:54:14:f9:52:e1:70:dd:59:
22:ee:3b:88:0f:fd:5b:ed:24:ae:46:ab:31:46:09:
58:0d:cf:e9:f1:9d:df:d8:68:35:b9:ba:0b:bd:db:
18:e7:64:5a:5a:06:98:c8:4b:33:db:fa:45:96:65:
a3:f5:cb:01:15:b2:70:93:3c:05:5a:d5:63:2f:dd:
c1:92:ed:cf:ba:8c:4b:4f:d0:73:78:06:58:87:e7:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:11:fc:82:fb:cf:fb:87:b2:5f:d8:73:0a:d4:d9:f3:31:04:
71:92:22:1c:76:80:ac:83:fc:0e:43:bd:7d:ee:1d:56:80:df:
b4:29:75:21:88:6e:f2:e6:a4:85:0b:38:33:0a:88:7c:46:b7:
16:6d:5f:d7:7b:6c:69:86:65:94:13:4a:8a:82:42:5a:3e:b7:
fc:eb:44:0d:ca:85:27:fe:17:99:65:35:1b:35:f5:b0:d6:ce:
0d:8d:c7:09:9d:68:07:43:a6:75:7a:92:ff:a4:3a:43:77:e3:
6c:3a:bb:23:d5:72:08:76:e3:ab:98:00:db:78:db:52:9e:a6:
b9:0e:2d:4c:be:54:94:03:34:90:8d:20:76:ed:62:dc:71:d9:
cf:76:8d:0e:cb:18:42:15:b8:71:4d:5f:c8:a1:cd:c1:cc:c9:
5b:c9:a6:84:f0:1f:5e:74:1b:5b:bd:ed:0e:24:6e:93:94:68:
3b:cf:8f:17:e8:90:2e:46:c9:ee:a7:58:f3:73:59:78:d4:96:
c6:4e:3f:89:28:c9:1b:0f:ec:b8:14:20:90:67:76:b6:9e:49:
78:a2:48:10:95:2b:09:01:ed:e5:a2:99:e5:37:7a:29:26:53:
66:2e:d1:a0:27:ea:8a:ec:ca:7f:76:42:b6:c0:4b:7e:ed:25:
96:4a:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 14:49:59 2025 by rpki-client