Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer (raw, json)
Hash identifier: edQ+hyM0Mp3xYltggYkuQYIR2NxMvWMnaXQUxbE87lU=
Subject key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01989916C4B4EAF762BC4F7281A7B49C8E4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 Aug 2025 12:24:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8528
IP: 138.21.0.0/16
IP: 193.8.143.0/24
IP: 193.53.38.0/24
IP: 193.56.119.0/24
IP: 193.57.10.0/23
IP: 193.57.24.0 -- 193.57.26.255
IP: 193.194.132.0/22
IP: 194.41.4.0/22
IP: 194.146.27.0/24
IP: 194.146.54.0/24
IP: 2a00:7ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:16:c4:b4:ea:f7:62:bc:4f:72:81:a7:b4:9c:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 11 12:24:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:d5:1e:94:cb:23:87:eb:d5:ac:c9:39:fe:
13:5d:96:d6:15:15:ea:19:ce:14:eb:82:67:0a:6b:
23:6e:54:76:74:96:7c:99:c3:70:8b:ec:17:f5:5a:
ff:09:43:bf:d7:7e:f0:44:04:46:46:0d:04:d7:02:
76:2e:95:0c:7d:89:9c:05:f0:12:bf:61:df:66:58:
90:16:ad:b4:e8:a6:62:be:83:45:bb:46:99:b5:ec:
5b:e5:a8:8d:9e:c0:0d:0a:48:01:d1:cd:86:44:2e:
15:05:6d:d2:11:c6:74:2c:c4:ff:e4:bf:ae:e4:54:
86:93:b9:da:ad:fe:86:d3:65:49:9c:71:24:1a:85:
6f:ec:29:d1:29:1d:64:24:25:8f:1c:45:bb:b0:93:
90:9a:b3:57:93:fa:f1:37:fc:f8:ea:d2:b7:eb:c1:
6f:d0:e2:eb:6d:ee:ec:e6:ff:5d:81:2b:9c:3d:eb:
4d:5e:be:72:eb:49:56:28:cf:5d:ff:01:c0:fa:5a:
aa:ff:f7:b3:a1:d3:92:73:5a:88:61:65:e8:cf:c5:
70:3f:5d:94:bc:54:9d:15:1a:db:c8:eb:c9:5a:9d:
91:f1:07:78:80:cd:56:c1:3d:a1:bc:b4:f3:bb:a1:
0f:8c:62:2a:0e:91:94:de:fa:70:85:ba:45:c2:45:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.21.0.0/16
193.8.143.0/24
193.53.38.0/24
193.56.119.0/24
193.57.10.0/23
193.57.24.0-193.57.26.255
193.194.132.0/22
194.41.4.0/22
194.146.27.0/24
194.146.54.0/24
IPv6:
2a00:7ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8528
Signature Algorithm: sha256WithRSAEncryption
6a:fb:07:ee:ec:04:55:01:e4:63:47:44:d8:e6:6b:68:07:6c:
72:35:2b:e4:f4:89:d9:91:00:37:0f:ce:c3:b5:73:50:9d:26:
a6:db:66:84:be:72:c3:0a:34:01:4d:c5:ed:67:1e:43:bb:48:
88:46:b3:19:36:1c:66:cd:cd:0b:15:60:89:7a:61:26:39:75:
bd:4c:c2:71:1e:5b:79:e8:09:1d:e7:03:33:fc:44:a0:d8:06:
02:b5:36:2b:63:72:85:e8:be:0d:8b:5d:e5:34:bc:c8:44:13:
98:e6:8c:33:cb:ad:c5:e4:d0:2a:85:92:a7:f9:06:63:ef:d5:
52:a9:a3:80:9d:7a:64:ac:ab:3f:3f:95:eb:59:47:ce:a6:d6:
de:2d:a0:97:45:53:54:dd:4f:cf:c4:de:00:e4:f0:35:c0:70:
20:79:8f:bf:f2:36:8b:7d:58:e5:ae:31:6c:32:1c:7e:6e:28:
19:ab:c2:cc:ce:bf:56:a7:a8:42:03:95:5f:98:99:a6:01:f4:
76:6c:cd:e1:3d:c2:7c:1e:68:88:f8:34:04:c8:69:0b:c5:a8:
59:57:da:cd:17:07:e5:83:2e:15:a7:b0:22:c0:fe:52:81:14:
b7:6e:dc:0f:f4:cf:0b:3b:19:93:4b:86:5b:90:75:2a:a2:38:
ef:37:e3:f0
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgISAZiZFsS06vdivE9ygae0nI5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODExMTIyNDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGU5OGRlZTlhYWRjODZiNGRmYTllMTY4ZDkyMWJkODBiYTNmM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi7VHpTLI4fr1azJOf4TXZbWFRXq
Gc4U64JnCmsjblR2dJZ8mcNwi+wX9Vr/CUO/137wRARGRg0E1wJ2LpUMfYmcBfAS
v2HfZliQFq206KZivoNFu0aZtexb5aiNnsANCkgB0c2GRC4VBW3SEcZ0LMT/5L+u
5FSGk7narf6G02VJnHEkGoVv7CnRKR1kJCWPHEW7sJOQmrNXk/rxN/z46tK368Fv
0OLrbe7s5v9dgSucPetNXr5y60lWKM9d/wHA+lqq//ezodOSc1qIYWXoz8VwP12U
vFSdFRrbyOvJWp2R8Qd4gM1WwT2hvLTzu6EPjGIqDpGU3vpwhbpFwkX8wwIDAQAB
o4IC6zCCAucwHQYDVR0OBBYEFHjpje6archrTfqeFo2SG9gLo/OmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2MxY2M5
NS03NTI5LTQyNzAtYTZlYy01YzcxOTU2YTUzNzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvYzFjYzk1
LTc1MjktNDI3MC1hNmVjLTVjNzE5NTZhNTM3Ny8xL2VPbU43cHF0eUd0Ti1wNFdq
WkliMkF1ajg2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF
BwEHAQH/BFwwWjBJBAIAATBDAwMAihUDBADBCI8DBADBNSYDBADBOHcDBAHBOQow
DAMEA8E5GAMEAME5GgMEAsHChAMEAsIpBAMEAMKSGwMEAMKSNjANBAIAAjAHAwUD
KgB+wDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIhUDANBgkqhkiG9w0BAQsFAAOC
AQEAavsH7uwEVQHkY0dE2OZraAdscjUr5PSJ2ZEANw/Ow7VzUJ0mpttmhL5ywwo0
AU3F7WceQ7tIiEazGTYcZs3NCxVgiXphJjl1vUzCcR5beegJHecDM/xEoNgGArU2
K2Nyhei+DYtd5TS8yEQTmOaMM8utxeTQKoWSp/kGY+/VUqmjgJ16ZKyrPz+V61lH
zqbW3i2gl0VTVN1Pz8TeAOTwNcBwIHmPv/I2i31Y5a4xbDIcfm4oGavCzM6/Vqeo
QgOVX5iZpgH0dmzN4T3CfB5oiPg0BMhpC8WoWVfazRcH5YMuFaewIsD+UoEUt27c
D/TPCzsZk0uGW5B1KqI47zfj8A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:08:56 2025 by rpki-client