Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
File: d-L_RonUITUPdqNzvBGT5FG4HvU.cer (raw, json)
Hash identifier: qFiHTwlTVMj7YqDFrDf1QmF4yfA9r0KR4YxMhDX2Vwc=
Subject key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01987AA2B50259D3695A2FFAD241C0F52483
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Aug 2025 14:29:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216237
IP: 185.208.203.0/24
IP: 2a13:f2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:a2:b5:02:59:d3:69:5a:2f:fa:d2:41:c0:f5:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 14:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:f2:0b:90:0a:42:86:8a:54:dd:a5:9f:ab:
33:c8:2c:2e:d0:e3:f7:8e:a3:9b:78:a4:52:ab:87:
62:1b:ed:e5:e5:0f:31:0d:cc:75:28:e6:b6:fb:1c:
5e:1e:c6:9b:07:e8:90:e0:f4:de:a6:3f:da:86:ca:
4b:f0:bc:4b:5f:54:26:29:24:e9:2d:1d:6f:6e:4f:
fb:4f:33:b7:76:c6:cc:bf:2c:32:6c:e6:7b:77:c4:
52:42:33:be:b6:a4:04:65:0f:9d:2e:c7:30:8f:48:
8a:c6:4d:78:74:ec:9b:73:b0:2e:3d:09:5c:7b:b3:
de:86:dd:04:c2:ae:54:4a:04:ab:d8:23:b1:75:63:
eb:2a:58:15:b4:d9:62:40:59:47:53:ee:de:8c:ea:
4d:f3:94:5b:25:ad:d3:e7:09:5d:76:d5:de:22:2d:
ff:cf:a5:83:86:d7:e7:99:1c:6f:82:97:44:39:ee:
6b:0a:a6:28:e2:77:10:9a:44:7b:b6:35:0b:22:79:
0f:b9:26:4f:aa:ca:2c:73:69:53:e7:c9:d8:d4:df:
a6:a4:c4:27:41:81:67:ab:5a:bf:6f:b3:31:3b:ad:
e0:ac:e3:10:73:60:21:fb:82:1a:0a:2e:e1:e6:62:
dd:7a:d8:87:c9:aa:70:99:da:4f:1f:e7:b1:be:d0:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.203.0/24
IPv6:
2a13:f2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216237
Signature Algorithm: sha256WithRSAEncryption
29:f2:21:1e:20:ca:ba:ff:cd:5b:13:2a:b0:49:b9:e7:38:97:
a3:7b:aa:a8:92:1e:10:6c:9e:e0:b3:6d:ff:6c:6d:50:da:ff:
16:7d:50:fb:a0:9e:1c:2b:65:e3:fa:31:03:52:36:af:49:bd:
23:0f:32:40:b1:86:e1:4f:54:c1:3a:2e:7f:1c:25:1f:5d:8f:
04:1c:70:06:30:b9:89:4c:a3:bc:aa:a0:1f:12:6d:69:1a:5e:
c9:c4:72:3c:b9:58:ab:53:f2:a7:3c:df:09:fa:d5:18:ce:cf:
73:cf:2d:c1:af:b7:e8:d3:e4:56:f5:cc:d6:98:6a:6c:5f:81:
56:a8:cc:c0:4a:96:19:9f:42:89:75:a3:ee:2c:2a:d2:c9:d0:
02:7d:d8:f7:03:df:86:0a:9f:48:77:d2:43:68:e7:1e:6c:4e:
a6:a9:40:fb:33:d4:4e:a8:70:4e:f4:47:8c:24:08:71:73:d3:
61:e8:38:82:b0:5b:e9:f4:d8:cb:ad:22:41:78:fe:5a:22:f0:
5c:7b:fc:1c:98:22:d8:07:5b:a6:c2:44:f4:94:75:a4:d3:a9:
21:ac:be:cf:40:70:e6:03:26:a1:5f:2d:98:d8:21:10:78:56:
a8:8a:db:2f:6b:7b:26:a1:8f:0d:ac:99:74:25:2b:b8:0e:50:
cf:43:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:17 2025 by rpki-client