Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.cer (raw, json)
Hash identifier: 9LxFR4zz+ja85stbtt6bAJd8UpdzlHLDfHltBvJDX4k=
Subject key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199F18E6C0A36F1C8C1C97683A723896D97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Oct 2025 09:44:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58209
IP: 194.117.92.0/24
IP: 217.18.81.0/24
IP: 2a0e:5e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:8e:6c:0a:36:f1:c8:c1:c9:76:83:a7:23:89:6d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 17 09:44:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:40:00:fa:d3:e0:0c:d3:c4:32:46:9c:c6:
40:42:a4:3f:cf:04:b7:3f:3f:f1:df:b3:e0:c3:d4:
45:3a:16:32:86:dc:eb:e1:f2:fd:76:41:d9:e3:77:
10:07:76:ad:67:f3:14:38:80:d4:22:56:e9:80:9c:
35:93:90:ab:72:09:f1:f4:39:d2:5c:ec:ac:32:9a:
56:99:de:03:e0:b1:77:14:22:45:62:2a:8d:66:60:
cd:5a:43:9f:36:34:18:28:55:74:02:d9:73:b3:3d:
5e:52:48:15:22:4c:e8:e3:71:f8:2d:85:40:2a:9a:
2a:4e:af:01:63:00:eb:8c:77:d6:8c:87:c8:1d:11:
b3:db:c3:17:fd:a4:53:98:85:80:db:07:e0:f5:f5:
b3:a1:8d:bc:6b:b6:c7:ea:62:4b:31:19:56:1d:6c:
13:df:c9:5f:11:6f:01:0a:a2:0f:d5:4e:7e:42:07:
a0:76:6c:a7:8d:46:41:cf:8c:36:e7:a5:d1:7c:d5:
a7:fd:69:33:20:ae:a4:86:5e:b2:82:c0:f3:2c:d1:
80:c4:d2:21:b6:a9:d4:ef:1f:75:df:40:40:82:96:
7a:c9:02:89:05:7e:c9:0f:cc:a0:c6:32:f2:7e:1a:
ed:18:a1:ec:c0:84:5f:e0:99:1a:2b:bb:54:99:bd:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.92.0/24
217.18.81.0/24
IPv6:
2a0e:5e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58209
Signature Algorithm: sha256WithRSAEncryption
9b:d7:27:ac:5d:f6:6a:95:b2:ec:16:1e:ef:76:da:41:ad:28:
d6:d5:c0:53:98:bd:2e:96:89:fe:31:d2:ff:55:8a:5a:8d:0f:
fd:bc:68:a6:56:38:66:bd:d0:1f:97:24:3d:4b:ed:37:ab:f8:
64:7e:0d:70:81:4f:88:0f:5b:c1:cc:b3:22:04:88:86:1e:23:
66:0f:9a:35:bb:b4:a1:41:23:16:1f:56:21:30:a6:73:f1:13:
14:12:69:e6:a4:91:a9:00:0b:ee:d3:f8:ea:08:06:f3:5c:71:
6f:e3:7a:d1:e5:47:e7:ba:50:ec:d3:79:17:91:c1:48:d2:b3:
4b:71:bb:57:25:10:b8:bd:82:64:0d:77:2c:d5:b7:cf:a5:47:
49:cb:f6:72:ab:d5:10:a1:d5:54:29:85:c0:f9:cf:9a:f8:39:
05:a4:06:b3:2c:52:fe:15:29:39:b7:d4:bc:12:d0:ca:97:d5:
2d:d1:1d:93:05:be:34:71:5a:06:77:59:a2:cc:6b:27:1d:e9:
11:37:3c:f6:dc:1c:28:9e:d8:a0:9a:8b:84:00:7d:97:a0:fb:
8e:e7:4f:81:01:c8:15:13:ba:3e:46:f3:95:b8:2a:72:df:5b:
02:af:22:80:74:f3:71:8a:ce:50:e8:89:cc:11:4f:81:f9:09:
e7:6d:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:50 2025 by rpki-client