Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
File: pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer (raw, json)
Hash identifier: sdEXgHbyu6pMFtvtT/qcJBAVoV3Dowlhc0xG48h6FBI=
Subject key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E3C07DFE6F16A561973D57E5942E0A4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Oct 2025 17:24:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49140
IP: 193.200.161.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:c0:7d:fe:6f:16:a5:61:97:3d:57:e5:94:2e:0a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 17:24:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:e7:4f:87:2f:c1:85:95:28:d7:f8:bc:18:
17:78:68:19:70:40:04:e9:8d:94:f0:b5:be:24:79:
81:a7:65:03:c9:6e:fa:8c:55:16:60:c1:94:2e:c4:
f4:ca:99:1e:04:64:fe:c3:1e:5d:f9:29:2b:e2:2a:
27:35:c0:38:f1:24:49:9c:c9:09:85:8e:e5:e0:e4:
64:3d:c6:80:bf:61:e4:17:9e:e7:a5:48:65:fe:41:
86:19:b6:24:e5:f8:2b:92:76:92:66:fe:fc:81:1a:
ae:b0:57:b3:d8:be:22:7d:5a:66:df:8a:c9:e2:f7:
d0:d1:0a:12:20:33:2e:ab:10:c8:53:45:11:94:cd:
a1:7a:e6:f3:52:03:bd:f6:40:e4:f6:e2:0d:70:66:
bb:fd:2c:e1:cb:ba:8c:ae:25:e5:56:0d:48:48:54:
2b:8a:db:21:b6:8c:5e:21:10:66:96:91:c1:db:0c:
f2:76:a0:8b:ad:6c:94:10:b9:dc:2f:d7:68:8f:ce:
ae:c1:53:2b:9f:4e:97:12:06:af:df:36:81:91:55:
76:0d:a0:71:0b:86:d9:00:94:65:63:b2:bb:7f:6d:
b4:09:05:41:7a:2a:03:48:5f:b8:0d:6f:7a:a1:99:
09:0f:9c:82:a4:ba:30:ed:b3:fd:12:1e:b3:09:9d:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.161.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49140
Signature Algorithm: sha256WithRSAEncryption
53:13:80:2e:f5:e2:e0:5f:c8:b0:25:23:13:9e:b7:91:c9:aa:
f1:9e:50:50:89:eb:74:1f:ec:0d:ea:71:d8:bd:eb:00:6f:1f:
a4:e2:ee:6c:5c:c3:10:4f:56:bc:f8:98:09:c6:b2:fe:42:45:
d7:47:c7:53:08:15:f3:d0:13:f4:29:87:94:87:e4:a7:eb:f2:
dd:a3:3d:a7:93:22:a1:ee:19:db:64:44:b7:ec:18:4e:73:dd:
e9:ea:b9:8d:39:ec:03:1d:6b:42:a3:97:f1:de:8c:38:7e:8d:
07:c7:c5:05:cf:df:62:f8:ad:53:4d:5e:8f:81:09:1f:9c:1f:
04:44:58:a9:9f:ae:2c:9f:25:36:43:70:2f:4b:9e:ad:14:e4:
dc:1b:2e:2c:54:9c:a7:08:72:bb:90:4c:d7:c4:af:10:1d:df:
52:ec:42:8c:ff:ca:fb:a5:e0:88:10:02:9e:11:5b:63:a2:8d:
f8:c2:04:70:b8:d3:84:56:61:0c:f0:f3:27:c8:cb:6b:5e:bb:
45:c2:52:46:2f:78:e5:41:b2:dd:71:ff:37:9c:c2:45:89:44:
d4:6e:95:5b:1a:23:a5:bb:cf:80:b8:6f:35:70:45:ad:7c:61:
a3:d3:eb:05:78:a2:f7:62:0f:c2:fa:6e:f7:d8:58:04:a4:76:
97:03:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:07 2025 by rpki-client