Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.cer (raw, json)
Hash identifier: 1+6xDS6CSzeLMdTS6ae0GBxqFMGCQWvaYIaoi/LLTvw=
Subject key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E80FB87F3DC833DD8576911D9DFFC383
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 13:29:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62044
IP: 87.58.64.0/18
IP: 137.31.0.0/16
IP: 147.161.128.0/17
IP: 159.254.0.0/16
IP: 164.137.0.0/16
IP: 185.46.212.0/22
IP: 194.9.96.0 -- 194.9.116.255
IP: 2a03:eec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:0f:b8:7f:3d:c8:33:dd:85:76:91:1d:9d:ff:c3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 13:29:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:99:16:f6:6e:c6:5b:2a:aa:6e:9c:20:c9:
19:4c:68:68:52:40:02:3f:24:a0:69:ce:af:5d:6a:
97:23:6b:b4:b6:3f:62:c5:0c:f6:36:fc:c7:e9:13:
e4:2c:fa:20:38:e5:fb:96:55:59:48:bd:08:99:28:
7b:ab:1d:ff:6d:53:98:cf:c2:10:ea:74:98:92:c4:
e1:84:c0:c4:0e:46:d3:32:b7:1d:1c:4b:a3:22:35:
6c:be:ef:a4:3b:36:9a:ba:d4:d3:4a:49:8b:6a:5b:
00:83:98:28:cb:cd:42:27:35:d3:ea:05:98:76:70:
79:73:e4:37:c5:35:d8:6b:54:5f:04:14:c1:ad:4e:
d8:ba:44:5e:ce:c7:46:89:0f:ad:1f:b7:2b:48:08:
c8:40:b7:af:77:6d:36:f6:ab:4d:aa:48:8b:b7:b4:
3f:3a:86:39:bf:34:a9:74:ec:99:ba:b0:dc:37:52:
67:b4:b1:e9:7d:29:1d:1c:13:3f:a7:89:8a:7d:e3:
17:f5:db:54:e9:72:6d:89:e9:68:b3:58:1b:39:0d:
90:37:4d:66:9a:92:85:95:9d:cf:6d:1a:1d:7b:9a:
60:34:9c:41:6d:bf:84:96:17:cc:e2:36:4f:8c:54:
b3:81:29:be:11:7c:a1:ba:ea:54:1d:c3:9b:a4:20:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/18
137.31.0.0/16
147.161.128.0/17
159.254.0.0/16
164.137.0.0/16
185.46.212.0/22
194.9.96.0-194.9.116.255
IPv6:
2a03:eec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62044
Signature Algorithm: sha256WithRSAEncryption
0e:87:3c:8a:62:5c:6d:06:2e:80:e9:d5:d3:2c:52:fb:3e:09:
76:14:a2:46:d6:80:36:b0:be:a6:02:31:04:5d:13:d3:78:08:
c1:37:25:ff:68:9c:a3:6d:e1:85:92:c4:bf:0a:06:38:15:a1:
a0:aa:bd:51:7e:91:8f:f9:26:2e:d3:de:c8:15:56:ab:9e:49:
97:32:32:2f:5a:3b:5a:c3:87:07:03:53:d0:80:bf:c2:e7:91:
63:a0:89:9f:b7:0c:ba:09:4c:4b:8d:5f:fd:44:e3:18:c8:d8:
75:0a:47:a4:57:ea:f7:51:6c:73:e1:57:d8:93:f0:1c:f8:cc:
94:a0:d4:0a:ce:e0:92:89:86:21:ca:29:67:9a:18:f4:df:9c:
af:b9:b7:a0:08:01:62:6c:62:56:3f:8b:39:39:96:cd:bf:da:
82:0f:a1:de:aa:3f:42:07:f0:be:5f:84:ce:78:52:a9:47:da:
b5:54:2b:8c:93:d8:de:4f:22:4f:cf:30:56:7d:7d:52:54:78:
94:8f:0a:aa:16:09:fa:c1:c2:92:38:82:45:2d:ab:74:5b:24:
0e:f6:92:76:8c:84:e7:87:aa:c8:eb:ca:d0:28:89:ce:aa:cf:
33:c5:e5:19:04:61:8a:a8:d0:1f:4a:b9:23:f3:60:e3:24:b8:
53:ab:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:39:04 2025 by rpki-client