Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer (raw, json)
Hash identifier: GOFt6T+ub0rx9NzyFUl1WVMF4p6Nj6HXeoqGHGr+bvI=
Subject key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199A90EEB6CF9C9CA5A7ECD3F6C021FEA3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Oct 2025 07:52:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44622
AS: 44999
AS: 48478
AS: 196798
IP: 85.202.224.0/20
IP: 87.236.8.0/21
IP: 91.209.218.0/24
IP: 91.222.208.0/22
IP: 91.223.1.0/24
IP: 91.225.252.0/22
IP: 93.188.120.0/21
IP: 176.62.216.0/21
IP: 185.110.208.0/22
IP: 185.121.244.0/22
IP: 188.94.224.0/21
IP: 195.162.8.0/23
IP: 2a01:6e20::/32
IP: 2a03:ccc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:0e:eb:6c:f9:c9:ca:5a:7e:cd:3f:6c:02:1f:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 07:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:87:5c:6e:80:15:7d:c6:b0:9a:b2:8e:1c:
ea:e3:69:4e:31:8b:a9:52:08:12:b5:f6:53:8d:3d:
dd:a0:3a:15:36:e1:87:d6:7b:21:69:6a:e7:7a:32:
77:aa:5c:a1:fc:a3:09:ec:39:54:07:4f:c1:b9:8d:
6c:5f:60:0f:ed:5f:b8:d1:35:20:cf:87:e6:59:17:
e5:65:12:a0:39:e6:67:4d:11:f5:a3:98:59:19:18:
d2:37:91:03:5d:9b:b8:d5:8f:69:b2:48:04:96:af:
a6:5a:3e:3b:5f:66:44:1c:d3:ea:11:7e:21:10:bb:
7d:af:fb:f6:9b:88:d4:59:8e:49:87:44:7a:fb:d2:
14:55:92:47:28:09:9a:32:d2:db:e9:a8:0b:67:b2:
9c:d1:0b:be:47:3c:39:51:22:ed:2b:1d:60:36:69:
d7:d1:7a:c1:d9:52:4d:1f:08:cb:2d:bd:f4:f0:9f:
fd:85:a8:4c:de:4e:f2:6b:a3:e7:82:76:04:b5:36:
34:85:6c:96:77:1e:a1:2b:9d:95:a4:e1:38:c8:f5:
7e:93:78:e1:6d:21:14:85:3e:ae:48:15:66:70:ec:
12:f3:f5:ce:79:73:2d:44:c5:a1:b8:1f:ea:82:6a:
bf:65:d6:d0:f7:bb:33:be:30:72:90:14:f0:7f:f8:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.224.0/20
87.236.8.0/21
91.209.218.0/24
91.222.208.0/22
91.223.1.0/24
91.225.252.0/22
93.188.120.0/21
176.62.216.0/21
185.110.208.0/22
185.121.244.0/22
188.94.224.0/21
195.162.8.0/23
IPv6:
2a01:6e20::/32
2a03:ccc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44622
44999
48478
196798
Signature Algorithm: sha256WithRSAEncryption
08:be:6c:6f:ec:60:cb:e6:06:f6:43:9e:57:bb:80:52:2d:95:
0d:14:8f:41:5a:cb:74:91:1d:30:8e:88:4d:c1:50:70:c1:b4:
20:48:be:a6:03:8a:92:d1:36:b2:9d:fb:b1:78:79:a2:d3:2d:
2b:ad:99:ae:27:9d:3f:19:77:a0:0d:37:29:6c:72:56:2d:91:
cf:69:82:90:0d:95:64:b9:84:aa:36:49:da:e2:6f:2d:7c:0a:
c4:33:f1:36:07:b8:1e:d7:41:37:72:ab:57:60:55:ed:76:5b:
0e:36:8b:b3:90:97:ab:24:ff:18:e8:fc:cb:e1:7a:52:40:d7:
27:ff:56:2a:d0:3b:d4:d5:5b:9e:bc:30:f7:69:25:99:f0:75:
9a:07:06:bf:33:c1:d5:ff:52:ac:9c:92:1f:b8:c0:5e:8e:7a:
53:5b:62:73:af:89:c3:5c:9c:1b:7d:08:60:6e:ec:6f:2e:11:
d2:69:73:b2:04:51:82:0e:b4:79:15:e7:83:11:c1:6a:da:b1:
28:dd:c4:df:a4:ce:b3:42:d9:b5:3a:c1:2a:1a:0f:4d:6d:f6:
07:c8:d3:81:3f:e9:99:51:2a:74:0d:2c:bd:00:ec:e7:da:97:
aa:66:b0:d3:31:23:e5:cf:5e:60:df:44:9c:90:41:0f:d6:b7:
7b:be:ca:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:58 2025 by rpki-client