Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.cer (raw, json)
Hash identifier: BqUY4Nbjbmh/Se9R0Yb5rAAA1Ibyad5uPhswyifSZ2k=
Subject key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019899323397F3AB008718E374BE039976EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Aug 2025 12:54:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202565
AS: 203935
AS: 204166
AS: 206702
IP: 93.115.196.0/22
IP: 137.59.56.0/23
IP: 185.20.108.0/22
IP: 185.107.0.0/22
IP: 185.134.189.0/24
IP: 185.160.148.0/22
IP: 185.178.160.0/22
IP: 185.194.192.0/22
IP: 185.216.188.0/23
IP: 193.148.84.0/22
IP: 2a0a:1140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:32:33:97:f3:ab:00:87:18:e3:74:be:03:99:76:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 11 12:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:13:03:82:3c:d9:49:aa:18:7e:57:3e:1d:
ef:8e:67:7c:ad:16:94:96:42:4b:7e:c5:cf:b9:c5:
b1:38:7e:79:76:a3:8b:71:b4:6d:dd:e7:79:46:a8:
98:3f:aa:92:80:d2:a8:f6:39:af:10:6f:41:70:6a:
9c:60:cd:73:07:dc:49:c8:82:6b:40:ad:59:ac:be:
4c:75:1e:68:24:4e:a1:96:1a:68:e9:18:df:07:26:
32:90:43:10:5a:62:09:31:1b:af:41:5b:0e:2a:d5:
15:32:66:36:83:18:f4:99:ef:56:25:78:88:9a:08:
be:8e:4a:b1:26:82:bd:23:9b:a0:3a:fd:9c:83:47:
10:de:f1:47:39:bd:af:c7:bd:13:03:08:3d:fc:25:
35:d1:58:b5:58:3a:70:48:21:21:f5:df:fa:b0:b7:
30:d0:70:52:e5:da:3c:b5:6c:a7:a9:c2:0a:af:32:
12:61:6d:91:86:38:80:32:e2:8d:7c:e3:bf:5e:08:
45:fc:38:96:93:c6:9a:c2:30:25:62:ab:e9:6f:03:
68:8e:cd:47:cd:15:56:ee:0b:76:2d:fd:a3:ca:cf:
80:20:c8:e2:f5:54:04:91:2b:5f:12:f4:75:1b:81:
1f:c5:57:e3:46:99:3d:76:7f:3d:d9:b0:ad:5e:7e:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.20.108.0/22
185.107.0.0/22
185.134.189.0/24
185.160.148.0/22
185.178.160.0/22
185.194.192.0/22
185.216.188.0/23
193.148.84.0/22
IPv6:
2a0a:1140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202565
203935
204166
206702
Signature Algorithm: sha256WithRSAEncryption
ab:c4:35:f4:3c:8b:cb:f7:25:0d:c7:aa:63:b7:ea:66:1a:bb:
f1:d3:e2:69:32:58:f5:fd:21:2e:0a:a2:e6:84:42:42:b8:a0:
cd:12:45:27:80:d0:54:0a:f3:56:d0:a6:62:f9:9f:13:b2:01:
bf:ea:29:9b:58:2e:b3:ca:20:bf:9d:64:3d:e4:d0:f8:e5:05:
88:d9:9d:60:ad:8e:2b:9e:6b:76:40:22:10:65:ef:e4:fb:93:
0d:3d:87:28:fa:dd:c0:ab:0a:2e:33:88:e2:49:7d:ec:17:02:
14:dd:47:d8:70:fe:a6:ce:37:32:c7:a1:52:f0:98:93:c0:21:
42:6b:52:5f:d3:eb:b4:ba:4d:39:42:ee:2b:33:ce:3f:6d:da:
d9:41:22:0b:01:7b:d3:91:e1:27:1d:25:7d:35:27:d6:1c:b1:
54:ad:2d:06:a3:1d:ad:fc:65:8c:1a:c9:91:7c:46:b8:e0:7f:
22:de:eb:83:67:66:82:66:4f:8a:dd:e9:5e:70:de:f4:a4:c8:
f1:58:75:a4:16:2e:69:96:87:bc:a4:50:03:2c:76:0c:27:60:
74:d2:71:46:29:7e:94:f6:ee:fc:99:58:cf:12:88:c2:e6:bd:
ed:34:b8:ab:a8:17:0a:8e:67:85:58:d5:95:43:9d:44:ab:94:
52:a1:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:16:03 2025 by rpki-client