Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
File: jciXK026DSBJ03yEikoh1KQ7Ljs.cer (raw, json)
Hash identifier: 3m1VC9lD4UtjTFD9nPgWRRpRsBPPlAVyR+c7N7CgvAY=
Subject key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199381D14F71355DA9BCE70C497513E42DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Sep 2025 09:30:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215264
IP: 89.187.93.0/24
IP: 91.234.238.0/24
IP: 2a14:2540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:1d:14:f7:13:55:da:9b:ce:70:c4:97:51:3e:42:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 09:30:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:4a:aa:9c:ee:90:f9:91:b7:a1:06:56:26:
66:67:d3:15:fd:6d:56:c9:66:55:fd:b8:66:c1:4b:
5e:48:c0:c3:e8:48:b6:98:d4:f8:44:19:06:01:5a:
ae:61:65:3d:2f:b8:93:95:0d:4d:e0:72:97:d3:37:
1d:c2:8d:4f:b7:ee:55:3d:c1:73:0a:18:aa:ab:e5:
73:4a:c0:54:83:c3:ab:1a:72:24:c3:68:c0:f4:2f:
bb:84:08:06:a4:cd:0e:08:92:c8:10:4c:38:98:69:
ac:0c:6e:62:60:be:8e:77:1d:3e:23:de:ad:f9:8a:
85:85:eb:26:ab:9c:19:b2:e3:ad:43:00:65:2a:c5:
c1:ab:8b:44:2b:b1:22:41:4f:8e:61:6c:57:0a:0d:
02:4a:2a:02:9a:e4:23:86:c4:14:a4:07:7a:ae:c6:
a4:1b:0d:1c:2d:35:36:23:91:49:f3:74:a7:ae:03:
8e:1a:b9:89:97:ba:d2:7a:5e:8e:17:42:4d:be:85:
42:f5:dd:1c:41:1e:72:c4:2e:02:99:fd:cd:90:81:
19:cc:2a:18:6c:4b:d8:67:26:fd:97:00:39:89:ae:
f3:49:6e:03:1e:96:d7:89:21:41:97:2d:1f:e3:57:
e4:08:aa:a2:fc:55:72:1d:f1:b1:28:67:f8:71:8a:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.93.0/24
91.234.238.0/24
IPv6:
2a14:2540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215264
Signature Algorithm: sha256WithRSAEncryption
70:63:d8:a1:43:ed:b0:62:bb:f7:d6:36:18:87:86:f2:cd:50:
57:09:72:4b:02:5a:6a:17:76:c9:59:de:57:d4:1c:26:88:61:
85:a6:2d:f5:29:72:f7:94:1b:e4:8d:00:67:c8:4b:cb:3b:a2:
ce:94:e2:d3:e8:89:85:ed:09:d4:ce:4e:02:17:ac:c9:47:45:
21:42:8a:b1:7e:71:1a:54:43:ce:62:47:4e:bd:bf:f9:e4:97:
a9:c2:2a:d7:a8:a4:a8:23:0b:f2:3e:f3:28:54:36:b0:a6:35:
5f:8d:9f:3b:58:9d:a9:9f:53:4e:5c:44:72:6b:fe:be:b3:71:
c1:94:1f:e2:ea:7c:0e:3d:17:25:85:b9:cb:6a:47:75:3d:55:
41:e1:3a:77:a0:0e:1d:9a:24:c5:8e:43:ea:0c:c6:b8:a5:d5:
69:1e:87:da:7e:5b:e8:4a:99:52:90:32:96:f5:ce:18:b4:51:
25:4c:91:73:f9:5e:db:2e:3d:18:4c:9e:ae:9f:8b:58:09:ec:
c2:d1:6e:2e:91:fd:81:f8:be:b7:e2:8e:d0:01:94:b1:7e:2d:
20:24:d0:b4:33:be:1f:14:18:7b:ff:de:bd:96:a6:99:56:60:
e9:2e:6b:0c:f0:4f:f1:0a:6b:e3:ab:7a:2e:41:c4:da:0f:50:
27:54:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:57 2025 by rpki-client