Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
File: axBPHkq67B7_gPJixi-WwlQ4yOE.cer (raw, json)
Hash identifier: Q/CfNQbJxPP9UpV1ywA/hdHq/EQfDlCRiJRXngEKXNQ=
Subject key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019875840D3AC6DDEB860A8E3A5FB0C9754E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 04 Aug 2025 14:37:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42881
AS: 49443
AS: 201813
AS: 203950
AS: 204794
AS: 204868
AS: 204872
AS: 205301
AS: 205745
AS: 205770
AS: 205884
AS: 206005
AS: 206127
AS: 206305
AS: 206340
AS: 206413
AS: 206535
AS: 206560
AS: 206582
AS: 206590
AS: 206623
AS: 206644
AS: 206744
AS: 206750
AS: 208317
AS: 209375
AS: 209396
AS: 209868
AS: 209883
AS: 209889
AS: 209896
AS: 209944
AS: 209961
AS: 209963
AS: 209982
AS: 213137
IP: 62.68.73.0/24
IP: 2a12:1c0::/29
IP: 2a12:f9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:84:0d:3a:c6:dd:eb:86:0a:8e:3a:5f:b0:c9:75:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 4 14:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:4f:09:f0:7b:e0:da:c3:01:22:08:2c:f4:
a2:24:40:8f:55:6e:9a:de:f2:a0:c4:ba:45:30:03:
78:5c:01:c9:00:95:55:21:f6:2b:da:67:c4:4b:a8:
37:19:e4:94:77:1f:b8:1d:b0:94:12:90:74:d3:10:
c4:69:62:fc:79:fe:59:5e:ac:39:2e:8b:63:83:4c:
53:8a:d6:77:36:fd:24:b0:97:b2:75:19:84:22:49:
a4:a3:a8:28:d4:53:ff:f6:d8:7f:c4:1a:cf:39:99:
7e:bc:d6:50:10:ca:0b:32:90:ff:4d:2d:2d:d8:9e:
10:78:fc:c2:6e:f7:46:fb:2d:25:33:fc:9b:a1:86:
14:72:17:20:dc:e7:47:78:ff:de:04:ea:06:c4:ef:
7f:fd:ce:4f:a6:d4:95:8f:d5:19:86:4e:03:02:fd:
47:ed:8d:e5:ba:c0:a8:90:6e:3f:f5:0f:bf:47:00:
8a:aa:69:90:53:4f:cb:dd:c9:55:c0:c4:80:a0:b3:
31:86:35:08:bd:26:00:0d:20:3b:a3:18:c5:63:97:
75:e2:52:93:5d:dc:28:ac:84:af:69:03:21:1a:89:
1f:af:a9:55:63:97:2b:b8:09:85:0d:3b:93:92:a7:
19:87:44:1c:ee:16:31:89:50:bd:27:2f:ba:11:19:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
IPv6:
2a12:1c0::/29
2a12:f9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42881
49443
201813
203950
204794
204868
204872
205301
205745
205770
205884
206005
206127
206305
206340
206413
206535
206560
206582
206590
206623
206644
206744
206750
208317
209375
209396
209868
209883
209889
209896
209944
209961
209963
209982
213137
Signature Algorithm: sha256WithRSAEncryption
84:38:04:88:77:90:ff:91:87:6b:20:06:f8:36:1a:9c:3a:8a:
11:bb:51:fe:22:c1:da:12:aa:54:be:14:70:83:75:b1:c4:b7:
44:ff:08:71:66:4b:bd:92:bc:cc:1c:e9:97:09:1c:27:0e:3d:
38:bc:df:dd:85:8c:b3:26:54:eb:8c:72:f0:8a:70:3c:a7:1a:
72:3d:75:a9:24:ae:dc:0b:49:24:9b:b9:b8:2c:7b:a3:e0:43:
84:de:ef:bb:ec:99:97:6f:7f:30:b6:43:6e:3e:49:52:58:4e:
52:28:ab:34:cd:80:2b:7a:40:57:b7:55:2a:98:d9:ba:76:43:
54:9b:7d:53:48:5c:c9:ac:85:93:55:43:b5:8e:3f:05:54:fe:
77:03:79:97:13:af:60:6a:79:8c:a8:00:35:3b:14:f5:7f:e5:
0c:6d:29:f9:92:fc:4b:54:8b:71:2f:9d:45:3f:c1:d7:8c:68:
1f:42:d8:91:6b:11:ce:0c:cd:7a:58:f1:02:b5:dd:c1:9b:23:
64:71:45:97:71:e1:58:52:70:44:fa:1f:1a:2f:24:ee:dc:bc:
a9:b5:6f:dc:96:ed:ac:d6:53:25:8b:63:15:f9:5a:ed:bf:40:
c3:79:cf:88:c7:00:ea:b4:31:fb:a7:30:0f:92:27:12:88:6c:
3c:c1:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:42:20 2025 by rpki-client