Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
File: TahNJHzjfNzPBuFXHSJqK4Vne80.cer (raw, json)
Hash identifier: d3RHEYhAwtlaxPKKwx9DXQ86XG62pggtAXFoL0/XAsc=
Subject key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E6B0BC45033A48F646E335A4745829EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 07:06:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213301
IP: 80.71.145.0/24
IP: 80.208.221.0/24
IP: 93.180.132.0/22
IP: 185.78.84.0/22
IP: 185.174.68.0/22
IP: 2a05:6f80::/29
IP: 2a06:1580::/29
IP: 2a0b:8d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:b0:bc:45:03:3a:48:f6:46:e3:35:a4:74:58:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 07:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:a3:7f:b2:f5:2a:30:d7:24:ae:04:9a:b8:
96:96:54:4a:ac:7b:8e:7b:6a:f5:03:80:ad:f8:c0:
8b:74:eb:a3:ba:dd:f4:1a:17:4c:a6:11:cd:26:1f:
2a:90:a8:fa:16:da:8d:fa:75:00:43:e2:9a:e7:5f:
87:b0:09:da:ae:f8:f9:62:2b:b6:ac:8d:50:21:11:
7b:1e:b1:e4:80:4d:a8:7e:b7:e7:86:7c:bd:2e:7f:
7b:32:bc:af:5c:ae:1b:1c:8e:7d:de:2a:4e:26:67:
c2:06:63:fb:bd:53:30:4e:34:bb:26:0d:55:ae:64:
5b:7e:45:98:5e:76:45:ed:19:f0:07:39:13:e2:ea:
2c:f6:18:67:b4:2d:5d:fc:f9:aa:25:fb:5f:bb:18:
5c:fa:c4:9b:f7:9a:c6:0f:c7:d6:a9:94:b9:f9:8a:
18:77:36:0e:a1:48:4f:de:cd:8b:04:ae:57:2d:73:
30:cc:70:7d:03:42:c4:aa:fd:aa:05:69:cf:c4:e7:
10:df:87:f6:07:4e:8a:a4:8d:e2:39:79:56:48:52:
d6:49:c2:a0:d9:58:5c:69:c8:a0:bc:b0:cd:b3:cf:
2d:10:8f:1c:75:0f:52:e4:e5:56:c8:24:bb:14:d7:
30:80:0b:bc:5b:41:5d:79:f5:54:8c:56:1e:84:8b:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.145.0/24
80.208.221.0/24
93.180.132.0/22
185.78.84.0/22
185.174.68.0/22
IPv6:
2a05:6f80::/29
2a06:1580::/29
2a0b:8d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213301
Signature Algorithm: sha256WithRSAEncryption
56:37:ea:78:6b:b0:44:0b:d8:4b:30:97:86:7f:4b:6b:b2:dc:
14:77:4b:e2:de:4e:8b:17:22:d5:69:34:d7:00:3f:14:8e:db:
63:c1:b9:3e:13:8d:c6:70:83:c7:33:44:3e:b8:b9:3b:46:96:
78:68:04:33:3c:ce:89:79:94:cb:cc:38:da:d3:53:36:27:4b:
2e:2d:85:38:28:9b:42:0a:bf:2a:ec:31:1c:7a:dc:d0:79:8d:
48:36:2f:de:f8:48:06:95:0b:77:c4:19:9c:66:87:8a:74:e0:
be:e4:3b:0b:fd:63:4b:11:f8:98:84:db:19:dc:13:2a:27:fc:
e6:df:d4:a8:83:1a:0f:e3:5b:c7:68:64:a6:7f:11:ef:47:c2:
22:df:8d:c9:20:0f:ec:e5:d1:ae:d1:7a:e1:d0:de:84:98:34:
27:89:7a:4a:f8:5b:bd:90:95:31:e0:ce:9a:96:de:91:fd:ae:
bc:b7:2f:fc:55:97:d4:75:19:ab:40:80:c4:70:fd:89:7f:9a:
9f:da:b8:b9:03:bf:54:9f:03:c2:a7:ab:44:8a:99:70:81:6d:
f8:03:42:4e:fe:8b:b4:b5:d9:70:45:c9:b4:11:75:8e:02:d3:
70:5c:e5:f6:0b:89:c2:d9:67:09:fd:08:ad:d0:03:49:90:d3:
06:33:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:30:42 2025 by rpki-client