Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
File: iXj_XaszxC2mX-Thq_vKTq-90qo.cer (raw, json)
Hash identifier: M7eQ6qs50YuTeHVVtGB55Eyc4xSnrQQsHtjdRDpEmAE=
Subject key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199A54DAC3DC35692C67B5DCCF235F73FFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Oct 2025 14:22:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207147
IP: 45.11.68.0/22
IP: 45.88.128.0/22
IP: 45.89.112.0/22
IP: 45.143.208.0/22
IP: 46.183.32.0/21
IP: 84.247.4.0/22
IP: 85.204.148.0/22
IP: 89.37.228.0/22
IP: 130.0.88.0/22
IP: 176.223.176.0/22
IP: 185.164.212.0/22
IP: 185.178.88.0/22
IP: 185.194.120.0/22
IP: 185.237.40.0/22
IP: 2a0b:9c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:4d:ac:3d:c3:56:92:c6:7b:5d:cc:f2:35:f7:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 14:22:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:df:d0:bd:db:d0:59:bd:3f:87:47:96:e4:
55:a5:19:a0:01:c0:d6:01:98:d8:17:0c:40:3f:a2:
91:ed:35:a7:cb:17:2c:fe:ba:07:64:7a:d5:0c:13:
e1:1b:2f:5a:ab:16:83:c7:b3:c6:a2:42:e4:fb:e3:
9a:c0:37:6d:31:b3:bb:4c:e4:db:95:e1:1e:26:ae:
ae:d9:0a:ab:5f:dd:a8:a5:18:db:b9:a8:98:bc:05:
04:2e:ee:b5:72:2e:f4:fd:35:92:e2:94:9b:9e:63:
a9:2f:b6:40:86:a2:f7:99:01:92:fc:c4:f0:b2:ff:
c7:9f:84:64:ee:8b:83:d7:03:d9:2c:7a:9a:a2:d6:
a9:16:48:61:4b:44:7d:6b:6b:ce:6f:0c:fb:e9:84:
bb:58:eb:59:d8:86:0e:50:e5:1e:8d:ed:b0:19:1d:
9e:0e:45:f0:11:5e:32:5c:f1:46:a4:cb:43:6a:2c:
6c:e0:59:61:c9:82:90:6e:0f:71:f8:16:d8:61:cf:
ec:4b:d2:6a:52:2e:46:67:61:7d:25:9d:8b:6c:99:
12:ec:dd:5e:93:86:57:48:4f:49:af:90:df:06:ce:
78:d5:8e:ca:d0:22:e3:ac:36:3f:ac:3d:3a:a4:e0:
a0:32:23:25:97:2d:52:75:52:af:b5:28:06:49:3f:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.68.0/22
45.88.128.0/22
45.89.112.0/22
45.143.208.0/22
46.183.32.0/21
84.247.4.0/22
85.204.148.0/22
89.37.228.0/22
130.0.88.0/22
176.223.176.0/22
185.164.212.0/22
185.178.88.0/22
185.194.120.0/22
185.237.40.0/22
IPv6:
2a0b:9c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207147
Signature Algorithm: sha256WithRSAEncryption
41:d8:7f:aa:ed:a6:b1:1d:7f:31:47:0e:97:4d:5c:26:31:8a:
ef:e1:48:43:37:e4:c2:9f:0e:05:d2:1a:69:55:e0:26:20:53:
93:47:dc:53:6d:9e:af:ea:6d:b0:e3:4e:29:ed:99:a1:9d:11:
a6:1d:3a:25:d7:17:eb:f0:88:d4:ff:50:14:61:b6:be:d2:89:
98:24:ac:4d:6c:32:77:f4:83:ec:88:f3:28:b6:84:84:c9:fa:
fb:c9:8b:91:7a:e8:6b:b6:1c:e5:03:2b:82:6d:8f:95:9c:1b:
da:de:17:3b:8e:20:3e:3c:5c:06:4d:60:88:9c:de:29:b3:cf:
01:9f:e2:0b:89:64:13:28:ac:ba:38:7e:77:c7:db:60:17:99:
52:ff:0e:66:d0:e6:75:59:7a:d6:77:a3:bc:8c:c3:07:49:81:
5d:41:6a:0f:c8:b1:c7:20:b4:34:f7:90:1b:1d:f8:79:3f:11:
d1:5f:7a:46:0f:11:23:41:8c:67:eb:e2:d8:5b:c9:52:24:61:
b6:01:af:55:1a:15:8a:9f:30:0f:78:bd:ad:2e:25:88:21:c7:
52:0f:f8:e9:2d:85:8a:e2:e7:78:36:b0:f6:50:6a:d9:4d:08:
d5:32:df:69:bd:44:d6:73:0c:10:f7:8a:20:2a:bb:ea:69:46:
84:a1:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:15 2025 by rpki-client