Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
File: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer (raw, json)
Hash identifier: jeTR0rUoJv2V5s1waJAuc1kX1Ksry1Wn0VLmwhaBOgc=
Subject key identifier: 80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E40A05D9FED9901C1C829BAB033C2B57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Oct 2025 18:44:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213610
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:0a:05:d9:fe:d9:90:1c:1c:82:9b:ab:03:3c:2b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 18:44:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f7:c5:e5:12:15:49:c0:65:dd:dd:9a:95:c6:
ae:56:37:e4:e5:54:62:ba:9d:a5:d9:80:6a:04:96:
ee:c1:44:eb:85:55:f1:46:7e:15:84:3c:b6:4a:78:
87:76:9a:ea:8d:ec:d8:41:61:e5:f2:21:41:e1:cc:
71:0d:13:cd:b8:e9:5d:90:f6:46:35:b5:fd:f6:cf:
82:aa:43:fc:81:52:4d:d7:e8:15:be:26:f4:04:a2:
d3:08:c2:6d:ac:8d:95:aa:c6:a9:e8:68:e9:be:f6:
c6:c7:67:2a:af:56:20:78:ec:15:68:10:fc:a8:7f:
b4:30:db:5d:04:bc:49:89:5f:a4:9e:84:cf:b2:a9:
58:f9:50:47:a7:55:ea:41:15:d0:95:15:a7:88:35:
c0:99:70:a2:23:3f:7f:1a:b4:18:d4:a8:71:3d:08:
40:53:cd:2d:52:e1:19:fa:79:c9:29:c7:60:33:e1:
ee:58:70:72:8a:02:d7:08:8e:f5:90:84:5c:dd:da:
53:52:9a:62:d4:83:28:4e:c7:ce:e3:32:ba:39:65:
77:55:ca:27:ef:02:be:02:46:bb:ef:f7:d1:ff:9a:
12:47:65:dd:36:de:e9:ea:fe:61:05:a1:60:e1:96:
a6:70:38:e2:c0:29:84:55:cd:b1:07:34:db:24:4e:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213610
Signature Algorithm: sha256WithRSAEncryption
81:05:ac:11:00:48:0b:1b:57:7f:74:13:95:7f:20:af:4d:06:
8f:9e:2d:8d:6c:28:46:9b:7e:49:39:7a:2f:55:4c:0b:f2:25:
c6:26:8a:67:64:ae:2b:9f:e4:05:c6:b3:1a:d1:5f:c7:39:62:
7d:fa:49:4c:92:e5:99:e1:54:d7:6d:42:16:9a:b2:20:70:7d:
f3:00:a5:50:0a:03:cd:0e:52:26:f4:7e:b1:59:5f:51:04:a3:
f8:0e:d5:aa:e9:ba:dd:0e:fb:6f:e9:55:d0:40:2b:63:9c:5b:
05:5a:d7:ca:0d:19:7e:58:9b:dd:73:2c:88:89:27:fe:93:fa:
b9:77:dd:1b:35:26:71:e1:fe:b3:01:91:c5:39:78:57:29:7f:
6e:83:91:cd:41:1b:bb:46:3b:9b:b5:9e:9f:e3:cd:57:01:11:
a2:b5:9e:44:58:92:1f:21:f9:88:e2:af:d9:48:d1:3d:bf:63:
9a:99:bb:9b:0c:31:9e:21:84:86:14:7d:a1:58:55:e9:bf:79:
bc:b8:d5:b6:95:e0:a8:51:d4:b2:78:8d:40:2d:7f:0f:60:65:
5e:f1:6b:fd:d2:2f:79:c9:d1:a9:87:08:70:da:55:d9:09:ba:
bf:1c:5a:5c:f0:b7:c8:7a:97:5c:78:a3:ed:91:7e:40:5a:b7:
0a:d2:23:5b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZnkCgXZ/tmQHByCm6sDPCtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDE0MTg0NDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGVhY2Y2MmIzNGE0ZWZjNWIyZmQ1MjRlNTkyMTY3YzY3NDQxMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vfF5RIVScBl3d2alcauVjfk5VRi
up2l2YBqBJbuwUTrhVXxRn4VhDy2SniHdprqjezYQWHl8iFB4cxxDRPNuOldkPZG
NbX99s+CqkP8gVJN1+gVvib0BKLTCMJtrI2Vqsap6GjpvvbGx2cqr1YgeOwVaBD8
qH+0MNtdBLxJiV+knoTPsqlY+VBHp1XqQRXQlRWniDXAmXCiIz9/GrQY1KhxPQhA
U80tUuEZ+nnJKcdgM+HuWHByigLXCI71kIRc3dpTUppi1IMoTsfO4zK6OWV3Vcon
7wK+Aka77/fR/5oSR2XdNt7p6v5hBaFg4ZamcDjiwCmEVc2xBzTbJE6S8wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIDqz2KzSk78Wy/VJOWSFnxnRBAeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzQ3YzE2
ZC03YzRmLTRlYmQtOWIwMC03MTI4Zjg1M2E0MDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNDdjMTZk
LTdjNGYtNGViZC05YjAwLTcxMjhmODUzYTQwNi8xL2dPclBZck5LVHZ4Ykw5VWs1
WklXZkdkRUVCNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNCajANBgkqhkiG9w0BAQsFAAOCAQEAgQWsEQBICxtX
f3QTlX8gr00Gj54tjWwoRpt+STl6L1VMC/IlxiaKZ2SuK5/kBcazGtFfxzliffpJ
TJLlmeFU121CFpqyIHB98wClUAoDzQ5SJvR+sVlfUQSj+A7Vqum63Q77b+lV0EAr
Y5xbBVrXyg0Zflib3XMsiIkn/pP6uXfdGzUmceH+swGRxTl4Vyl/boORzUEbu0Y7
m7Wen+PNVwERorWeRFiSHyH5iOKv2UjRPb9jmpm7mwwxniGEhhR9oVhV6b95vLjV
tpXgqFHUsniNQC1/D2BlXvFr/dIvecnRqYcIcNpV2Qm6vxxaXPC3yHqXXHij7ZF+
QFq3CtIjWw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:57 2025 by rpki-client