Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XborxkAZK24FLkdzrfU0AseAN_A.cer
File: XborxkAZK24FLkdzrfU0AseAN_A.cer (raw, json)
Hash identifier: w1kp0eosyUdAfISMqHQlI5HicdR1MoevZPilLpx/m3A=
Subject key identifier: 5D:BA:2B:C6:40:19:2B:6E:05:2E:47:73:AD:F5:34:02:C7:80:37:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199EC312C89B6885D4257F263DA82445471
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Oct 2025 08:44:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197114
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:31:2c:89:b6:88:5d:42:57:f2:63:da:82:44:54:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 08:44:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dba2bc640192b6e052e4773adf53402c78037f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:33:97:01:07:ac:9d:3f:15:18:52:17:e6:
e6:5f:56:89:7f:2d:f3:75:00:98:2d:b2:2f:b0:5f:
6e:04:b7:1c:d6:b5:f2:2c:af:69:86:07:7f:bc:a0:
01:d1:97:1b:79:bf:6f:41:d4:f3:22:44:fc:49:9b:
b6:d5:96:f3:d3:85:dd:e2:f1:b1:75:64:c9:83:92:
b0:f7:f1:08:b5:27:16:fe:6a:4a:b4:41:e3:81:36:
c1:98:55:17:2e:89:8e:36:3d:6d:4c:dd:f6:2d:58:
cc:32:98:5d:12:be:80:30:05:fe:96:fe:9a:91:f6:
f8:08:97:2c:7a:4b:4e:3e:59:fe:52:c7:fb:37:78:
99:ea:3e:ce:1c:bf:7f:3d:51:62:06:e3:43:1a:4c:
1e:2a:55:74:ca:30:bc:1a:cf:72:50:4c:cb:94:a3:
74:e9:5b:26:21:b3:5a:ec:07:6c:33:00:6c:3e:bc:
25:7b:9d:5a:32:90:0d:5e:c5:a2:d5:45:ae:8b:08:
53:89:dc:87:2e:fe:67:9b:d6:1d:0b:50:01:35:bf:
bc:81:cc:a9:d4:89:dd:d1:05:0e:69:6d:ec:1b:bd:
4a:7c:f5:6a:9a:97:b7:8d:dc:ef:96:f5:ad:2b:25:
9c:3c:f5:df:1f:5b:c8:68:e1:9d:2c:52:15:fc:c8:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:2B:C6:40:19:2B:6E:05:2E:47:73:AD:F5:34:02:C7:80:37:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d25a1b-1137-4d59-bf60-e0b7cf41b527/1/XborxkAZK24FLkdzrfU0AseAN_A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197114
Signature Algorithm: sha256WithRSAEncryption
8b:de:a1:52:84:0f:56:d3:fe:86:52:e1:ad:b1:39:a3:f2:c0:
ca:82:4c:e9:60:4d:54:ef:6c:2b:a7:03:d1:44:8b:85:12:59:
95:96:d0:cc:5e:8e:04:7d:f3:77:df:2e:8c:be:88:91:d7:2c:
92:cf:9a:a7:a7:b8:2c:29:5e:bb:54:7d:07:7a:56:b4:e2:93:
ea:47:5b:0b:2b:15:21:b3:bc:72:2d:d2:fb:f8:32:8d:a8:2e:
98:73:4d:ab:e3:3a:07:4c:44:2a:5d:89:54:cf:50:d0:15:f2:
45:ba:d8:e5:ba:59:cb:c2:2b:49:40:0e:36:e4:43:d3:36:3e:
0a:77:f1:75:c9:91:9c:23:c8:95:7f:7b:fc:b3:a1:23:7c:9e:
ca:c2:fa:41:97:74:23:61:6e:73:d0:b9:b8:87:ad:f9:5e:65:
47:0f:95:03:01:42:c4:69:37:d8:26:6c:c0:7f:93:02:d5:51:
b2:75:88:45:5c:b5:a6:e6:08:1a:18:be:d5:17:06:b1:ca:2f:
b3:3f:f7:1c:06:c9:d1:b8:9c:ea:91:50:db:5f:f5:33:2d:b1:
ff:bf:a3:14:bb:5a:e2:0c:a5:b6:d1:cf:c1:cf:fe:49:ba:0e:
3a:ac:62:4e:a9:f9:3e:3e:d8:05:7d:a9:fe:0c:01:f8:34:eb:
06:35:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:47 2025 by rpki-client