Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
File: roOCT9wp6-SsKGygGETfhtTXXsA.cer (raw, json)
Hash identifier: VrNcyP7YsRBS90zasSGPHgKlJ8EMVqjUyYkxTPU1+LE=
Subject key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01999EEB65324497F75BBAC4C325D6135C71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Oct 2025 08:37:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213804
IP: 144.86.188.0/24
IP: 2001:67c:1354::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:eb:65:32:44:97:f7:5b:ba:c4:c3:25:d6:13:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 08:37:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:70:ca:4e:b7:52:fa:a2:29:c2:e0:27:ba:
b6:fb:ed:b0:76:70:3c:50:00:4b:ee:e9:46:a5:12:
33:c6:9c:b7:59:6c:22:9a:d7:95:76:98:b5:81:f2:
48:7f:aa:d0:88:a1:5e:06:e1:a6:25:ba:0c:68:ef:
18:6e:a4:7a:28:fc:b8:fc:2b:74:ad:35:a4:f1:67:
8b:1b:e6:1e:c4:79:e2:d8:f2:cb:f4:82:ba:f8:74:
2e:89:25:d8:4d:b8:45:43:4b:c6:1d:01:db:b4:4e:
b5:54:d4:6d:2b:77:89:cf:76:46:28:ea:04:77:0c:
ab:9c:2c:17:58:5d:a3:ee:f8:ff:5b:73:d9:19:62:
9f:34:84:ec:81:f7:b3:9f:43:1d:fb:0c:cc:6f:e6:
3f:42:c1:18:db:ab:76:1f:4d:41:e5:dd:cc:be:dc:
52:d8:39:35:82:3a:4b:76:d7:34:a9:f4:b4:cf:dc:
39:c7:ee:d2:25:75:13:d6:75:9c:81:cb:95:2f:82:
b9:68:7b:55:88:7f:f1:90:19:9d:b2:58:f5:21:3f:
1e:01:bb:80:d2:05:ff:a3:55:77:b1:90:78:f8:2b:
63:4f:39:a5:ac:5f:38:79:61:83:36:5f:07:31:a2:
e2:92:b9:ff:8e:f2:34:f2:0b:d4:d7:96:9c:f8:a7:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.86.188.0/24
IPv6:
2001:67c:1354::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213804
Signature Algorithm: sha256WithRSAEncryption
4f:a3:08:20:83:2d:fa:2d:41:83:64:4a:2a:ce:20:e6:90:f5:
ab:e5:e8:37:d5:47:a0:60:7b:52:37:d5:cb:9c:3b:e8:15:92:
ed:79:ec:f8:8d:6f:4a:13:3b:bf:27:b3:21:43:1b:cf:81:bd:
5c:bc:73:fd:53:25:06:d7:83:00:13:5b:17:e4:4f:ff:70:51:
89:e1:77:ea:a4:96:88:2e:72:3a:fb:7d:49:11:f9:b1:f3:2b:
55:8f:1e:8b:ee:3e:ce:5e:a1:f9:a0:e4:93:0b:96:fc:bf:61:
31:f9:98:d9:fd:91:b5:e3:5b:86:7c:33:b4:7d:a0:71:5e:c8:
e3:41:7e:80:7c:f9:e7:7f:53:9a:a4:83:c6:68:1d:c0:e7:cf:
3b:8d:5a:1f:ac:cf:ec:10:b4:97:08:3f:26:f0:8b:17:10:89:
44:cf:4e:99:68:62:fa:2c:72:9c:a0:f2:5a:22:19:13:be:46:
a7:6a:c5:ef:8d:3c:60:5c:84:c7:df:cf:ff:98:cd:2e:b0:32:
f3:a8:a6:50:2e:94:e0:09:7c:3d:bf:a0:47:f4:6c:8e:6c:d8:
be:01:e8:82:83:52:13:7c:55:82:81:7c:5d:d2:29:70:a5:f4:
bf:3e:b8:52:cd:a1:6c:d6:ff:ad:34:dc:c7:5e:9e:5f:8b:f2:
1b:1d:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:36:01 2025 by rpki-client