Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
File: R928ziYovwn65r8EQhjGV-i9PG4.cer (raw, json)
Hash identifier: lX0mmZnEYJx0C/405+Nd2GCfllzx7s8VLgZFgI8R0WA=
Subject key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01999AAE7E18F636607071A4289A9F5CB539
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Sep 2025 12:52:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215239
IP: 45.143.0.0/22
IP: 176.118.178.0/24
IP: 2a14:2d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:ae:7e:18:f6:36:60:70:71:a4:28:9a:9f:5c:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 12:52:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:ba:64:12:2a:b7:69:4f:6f:9a:fa:92:ee:
b3:81:9e:a5:c5:cc:89:eb:15:73:3c:af:b0:bc:15:
29:51:12:55:4f:63:df:76:83:80:e6:b4:92:b2:32:
d1:33:75:c8:1f:a8:ee:cd:46:a5:3f:6a:87:64:4f:
cf:41:14:52:bf:e3:90:f4:54:6c:9d:20:98:4f:66:
68:62:d3:a4:ef:5a:9e:11:12:57:ff:fe:e8:eb:01:
d1:84:6b:ce:ab:4f:f7:51:2e:bf:6e:f8:5c:db:59:
c0:e2:c6:f5:b5:73:ba:06:33:13:4f:43:72:55:91:
ae:4b:18:28:02:aa:c4:2f:21:ef:51:70:e5:88:5c:
58:96:d5:e3:1d:0d:3a:f4:4c:77:e1:f9:e8:a5:25:
db:10:61:53:f9:56:1d:f5:eb:22:9b:ed:91:d3:f5:
c6:ea:08:80:a0:56:98:ba:dc:4f:c9:03:60:7b:b7:
1e:09:13:f7:db:2f:ae:39:db:2d:45:bf:d3:d6:06:
34:46:d8:2e:5e:34:9d:b6:67:72:3f:43:d9:bd:a2:
e6:6a:3f:58:d5:b3:d9:6d:c9:52:1a:31:08:03:f4:
ff:a1:b3:db:f7:a6:21:bf:42:fd:10:fb:cf:44:f2:
a3:50:2d:22:22:74:7b:13:27:44:0d:b0:52:d1:70:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.0.0/22
176.118.178.0/24
IPv6:
2a14:2d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215239
Signature Algorithm: sha256WithRSAEncryption
83:0c:70:92:1b:b7:78:5b:58:b3:78:2b:17:bd:b3:86:12:27:
10:23:11:7e:b2:7c:cd:d1:f6:f7:43:6e:63:05:5d:20:cb:a6:
db:61:30:40:a0:f7:dc:2d:bc:ef:a1:25:47:b0:00:9b:39:95:
d7:bf:cf:85:53:08:7c:e8:14:94:8a:90:60:5f:00:18:75:b3:
a2:e1:55:20:cf:ec:a1:20:16:ee:0b:e3:85:7a:e6:df:9b:e6:
f2:91:e8:6e:f8:e9:15:2d:6f:1b:12:71:a7:57:9c:7f:3b:2d:
42:62:0b:2c:c4:a4:7e:12:c8:58:f9:8f:cc:bf:99:f8:35:ca:
79:79:a0:80:fa:c3:aa:a2:ae:bb:a2:5e:48:8e:97:ca:27:9c:
51:a8:b6:aa:bc:63:33:fa:bd:4f:69:be:ba:22:3e:e4:ee:42:
b1:77:e0:26:6d:27:f6:2c:bb:ca:e5:1b:6e:50:f3:88:5c:4e:
a9:4a:63:63:24:d7:dd:00:e0:91:20:0a:74:64:05:7c:84:ef:
d7:cf:bb:6b:ff:83:9e:0b:c8:33:9c:93:2a:72:16:c4:8b:3d:
33:2f:58:ad:17:2a:54:a1:38:cf:68:57:0c:b9:c9:c1:c8:e4:
7e:42:d5:c0:ea:a8:a8:16:57:e1:71:0e:06:59:65:8f:f2:0b:
b2:18:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:07 2025 by rpki-client