Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
File: jVqxQkxBKz-_Tvrprh5o42wr7oE.cer (raw, json)
Hash identifier: utKPwwchCK2uGLlVy5vDefh5qebpgpXjToD4JhO2Z8s=
Subject key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199738B7DCA12AF486821E5E30D55D5EA50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Sep 2025 22:29:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198533
IP: 185.164.84.0/22
IP: 2a0a:fc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:73:8b:7d:ca:12:af:48:68:21:e5:e3:0d:55:d5:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 22:29:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:bd:c3:6f:20:48:21:9e:06:22:e6:c9:d8:
fd:2d:c7:86:25:51:63:6a:2f:87:7d:39:65:12:83:
2f:48:14:a9:73:a8:18:72:58:c2:5c:ec:bc:ba:cc:
f2:eb:74:2a:d0:69:3a:22:b8:6b:ae:c5:27:43:31:
d3:48:c9:4f:3a:3e:b1:7d:6e:30:98:86:43:b5:9a:
18:09:17:ec:70:b0:a6:32:cd:ac:ca:a9:1a:8e:0c:
d4:65:88:c5:c9:ac:89:4f:2f:c6:48:f3:af:d3:62:
ee:58:02:c6:a5:55:03:b2:f8:a1:26:1b:8a:8a:41:
a3:98:07:c2:d6:71:77:6d:4f:6c:38:04:e6:fc:2f:
5e:0b:f9:f2:89:a2:77:40:13:73:63:4f:f8:6f:f8:
18:dd:c5:e2:a3:56:06:96:80:86:93:88:15:fc:8a:
f3:fa:ee:18:66:ab:68:44:54:3e:a6:c0:37:37:18:
d8:81:2f:59:c0:91:fa:5c:2b:bd:49:d6:e6:ac:b1:
60:8d:1d:0a:10:1a:9a:09:4c:96:81:a8:4d:16:c4:
ac:fc:85:b9:25:75:88:eb:71:05:51:c8:90:79:48:
af:23:7e:51:75:95:43:c5:a9:90:a0:2f:02:1d:ea:
a0:10:3a:65:8b:55:1b:35:df:50:6f:3e:fe:dd:ca:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.84.0/22
IPv6:
2a0a:fc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198533
Signature Algorithm: sha256WithRSAEncryption
0c:19:6e:f3:de:1b:38:5c:fb:ac:3e:42:6f:36:91:d7:36:94:
bd:21:d9:19:1d:76:06:37:dc:88:ad:61:bb:e0:d3:3b:66:f0:
35:6c:60:a9:75:41:ac:c1:73:cd:24:80:dd:b5:85:e3:43:ce:
cf:51:26:45:66:70:90:f1:84:1c:2a:14:5d:74:aa:02:aa:29:
f7:38:bf:6b:d0:ca:eb:41:b8:7d:55:8c:83:f8:2e:aa:8d:19:
6b:97:01:08:ca:8b:8e:f9:68:a2:96:55:2d:14:6d:4c:7c:5a:
59:f7:78:65:e3:6d:6b:9c:72:c4:32:34:35:d8:b8:c1:6f:a9:
d5:6f:72:1b:c9:43:70:ce:b3:b7:51:53:6a:eb:ec:05:a2:10:
37:20:44:27:bf:02:98:cb:da:99:f8:ee:5a:2b:46:a1:52:99:
c4:30:8a:44:b6:53:cb:52:90:94:9b:6a:fc:bf:3a:8f:40:6a:
13:b7:ed:22:59:6c:09:23:d2:f1:4a:ae:1f:08:de:24:f6:d8:
10:e7:a0:5d:7c:38:2f:ca:23:eb:1c:61:0f:f6:52:17:68:84:
ca:49:44:6f:7e:15:33:24:a4:69:52:c5:07:4e:02:bb:93:6e:
41:1f:f9:ea:9c:c4:d4:66:73:29:c3:89:e1:dd:b9:fd:76:5d:
16:de:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:10 2025 by rpki-client