Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer (raw, json)
Hash identifier: I3SvTmoCjUULGvEOryw0yveQON+Vj2jaJGjTut3Xs2w=
Subject key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E2FD2C3E8C7C7F7C6BFD274714218F39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Oct 2025 13:51:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 7480
AS: 51930
IP: 103.156.184.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:fd:2c:3e:8c:7c:7f:7c:6b:fd:27:47:14:21:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 13:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:f0:81:d9:27:32:f8:d0:13:a4:10:29:fd:
90:ae:69:28:1c:83:c0:51:21:e1:93:22:f9:8f:3c:
4a:af:e2:1f:f9:0a:42:87:26:c1:85:0c:03:41:f0:
63:fc:7f:51:79:14:62:79:6e:af:6e:25:0f:83:db:
2d:49:a3:c2:10:03:d9:2c:1c:cb:da:92:63:88:fd:
5e:e3:cc:a3:e5:63:4a:9c:9c:68:1c:66:30:e9:be:
a3:0a:2d:e1:fb:30:9e:d0:7b:31:54:29:9d:c8:01:
e6:21:bf:1f:15:b3:59:c8:65:6c:ae:20:51:de:c5:
82:31:d4:8c:b4:d0:83:f8:46:97:e8:3c:b1:ea:5d:
26:2c:2e:44:da:a7:ca:0a:88:23:d8:13:44:5f:2f:
74:df:42:57:e3:2c:8c:8f:9c:3a:58:53:0a:b7:98:
79:27:32:2e:e5:2f:4a:02:42:d0:26:a3:94:9d:21:
75:54:9e:4e:6f:eb:a8:6b:7b:d9:68:62:a7:56:31:
50:fc:76:7f:cc:cb:40:3f:53:14:d4:76:8c:d1:87:
de:11:7c:5a:b0:c7:44:ac:f1:97:32:e1:de:81:a7:
79:dd:9f:4a:06:fc:2d:86:ef:cb:be:04:8e:35:e7:
4b:c0:13:82:00:dd:13:5a:a7:88:93:44:c5:8c:74:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7480
51930
Signature Algorithm: sha256WithRSAEncryption
47:fb:e6:1c:3c:a5:3a:b8:6c:15:98:36:dc:47:bb:1a:23:34:
34:81:e9:6a:4b:9e:44:69:21:98:03:ad:87:9c:25:56:69:d6:
c5:85:1f:9b:c7:cc:82:d0:db:55:69:5a:64:0c:38:37:36:ce:
79:49:f2:af:41:c9:02:35:70:04:15:ba:c8:80:4a:e5:52:90:
19:5a:b1:fa:48:6b:b2:91:ce:a2:53:97:87:b1:8f:03:19:ef:
94:b5:71:fc:14:ef:92:25:c2:80:5e:05:77:2e:9c:c0:da:a8:
7d:9f:7b:93:05:5f:0f:10:1c:c0:22:de:01:80:9e:e9:20:ad:
c3:b0:96:9a:a3:fc:25:6e:f8:d8:fb:66:73:f5:d2:8a:67:a2:
0f:e8:a3:d2:47:cc:77:30:b1:d9:3e:e5:4f:3d:95:7f:b7:ec:
d8:aa:7f:cd:4c:8f:b7:e4:2d:31:41:81:c2:3c:99:4c:77:fe:
67:61:b6:68:03:73:ca:ee:88:7b:bc:9d:59:7d:c3:c4:fd:e8:
20:e8:fa:fc:fd:f8:54:1e:b0:87:54:7b:e9:26:4c:a5:b1:24:
ad:26:37:c5:7e:16:10:bf:a6:d2:42:ce:f6:d0:db:32:48:ea:
ce:f0:d2:82:89:c7:1c:d0:c6:d5:68:69:71:2b:26:54:43:b7:
ae:9e:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:14 2025 by rpki-client