Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
File: rOzREmnuoGcmJ3zjYatRzkIEnjY.cer (raw, json)
Hash identifier: yTOCung0L+NwCmqxYPtU8ryIBkK/OK3GKThhVLw2ojA=
Subject key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199697B93CAF706C73F60848274D9AE4B5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 20 Sep 2025 23:35:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60223
AS: 213448
IP: 2a14:9e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:69:7b:93:ca:f7:06:c7:3f:60:84:82:74:d9:ae:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 20 23:35:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acecd11269eea06726277ce361ab51ce42049e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:f0:fc:6e:da:e1:2a:5b:2f:0b:a9:7a:57:
e6:0a:69:4b:f8:65:16:99:18:7f:85:ac:69:80:42:
96:58:1b:b8:d4:82:9d:6b:94:59:65:eb:68:48:c4:
ca:c5:da:c3:b8:e6:aa:dd:e0:f6:8c:2e:d7:aa:4e:
90:be:33:d5:5c:0b:db:47:a2:2b:3d:3a:7b:6e:70:
fa:58:bf:7a:ce:4a:59:d6:f5:ae:6a:47:35:22:da:
d9:5e:9e:cc:c7:c1:01:dc:04:68:b4:3e:a5:af:96:
3d:2e:80:0b:60:a3:25:2c:72:f6:19:18:57:5e:9b:
45:83:bc:6b:fd:f8:1a:09:80:3f:e9:e7:34:0d:90:
c3:4f:b7:76:a9:05:42:78:03:3e:16:62:82:b1:0f:
52:32:03:fb:21:8e:a4:7b:20:bb:c8:71:3f:ae:31:
14:cf:07:19:0b:5c:19:8d:f7:c3:65:63:25:15:85:
98:a2:a6:46:bf:61:98:91:64:35:7e:79:05:0d:38:
1b:4f:1b:6a:03:7d:3d:db:eb:16:ce:ed:4e:87:66:
1d:50:da:32:de:7e:54:5b:96:e5:8b:ce:9f:ce:48:
34:42:f0:e1:26:a4:86:c3:a2:60:72:b3:62:b5:d2:
9b:30:5d:aa:99:75:8b:a4:90:d6:31:5a:6a:ae:00:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60223
213448
Signature Algorithm: sha256WithRSAEncryption
74:1e:f8:51:d4:ca:51:7a:15:78:01:07:82:34:df:59:a2:50:
f7:27:9e:04:81:2e:56:50:06:d6:ea:25:54:a8:57:b6:ed:84:
42:b3:69:ac:16:29:be:bf:8d:a9:28:fd:bd:e7:92:8f:34:37:
fd:1e:9d:b7:f4:fc:36:e1:d5:d7:e3:34:8b:b2:f2:08:1b:c3:
e4:a1:80:7c:66:a1:39:bd:a5:c4:f3:81:80:5f:bb:86:bd:66:
4e:a4:69:1b:4d:89:85:4d:5f:18:88:ad:9c:6a:aa:17:bd:01:
40:91:74:4a:45:53:7a:ee:74:d7:25:1d:2c:b8:f7:e3:4f:04:
a3:f7:f9:9e:3a:a3:7b:22:cc:df:f7:2d:79:94:a3:17:82:f7:
0f:c1:38:da:25:cf:b9:04:08:3f:d7:e5:88:0d:1a:da:1d:2f:
b2:d6:02:9a:d4:68:e4:c8:5a:dd:df:6b:bf:50:d6:47:04:da:
3f:91:3a:e8:7a:34:66:1d:06:cb:63:b8:74:68:8a:c8:4f:fe:
bc:a2:51:b0:6b:9d:a4:70:7a:ef:e6:72:9f:22:8f:d3:bc:c3:
08:37:b1:5e:39:1f:03:c7:4f:79:59:ab:63:aa:9b:d0:33:20:
20:60:c7:63:51:9f:0e:c4:a8:28:0a:27:c0:7a:7a:ea:b5:25:
9b:5b:da:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:08 2025 by rpki-client