Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
File: saew2N6CUdNtfIP69rx-_sc7UDQ.cer (raw, json)
Hash identifier: NjocITE4m1RIkX7qmyH65K9t4kHf2+iOZ7vxG7muy+8=
Subject key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01989DF8343026709D562066534EE83E55EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Aug 2025 11:09:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.56.164.0/22
IP: 5.182.48.0/22
IP: 45.81.20.0/22
IP: 45.90.144.0/22
IP: 45.140.220.0/22
IP: 77.83.240.0/22
IP: 78.108.216.0/22
IP: 83.143.116.0 -- 83.143.118.255
IP: 85.202.160.0/22
IP: 89.190.156.0/22
IP: 178.218.144.0/22
IP: 185.185.40.0/23
IP: 185.185.43.0/24
IP: 185.186.64.0/22
IP: 185.227.68.0/22
IP: 185.234.72.0/22
IP: 185.242.224.0/22
IP: 193.31.28.0/22
IP: 193.34.76.0/22
IP: 193.105.165.0/24
IP: 193.105.177.0/24
IP: 193.221.192.0/22
IP: 194.31.140.0/22
IP: 194.50.16.0/22
IP: 194.56.224.0/22
IP: 212.107.12.0/22
IP: 2a0b:b80::/29
IP: 2a0b:7080::/29
IP: 2a0d:77c0::/29
IP: 2a0e:c7c0::/29
IP: 2a0e:e800::/29
IP: 2a0f:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f8:34:30:26:70:9d:56:20:66:53:4e:e8:3e:55:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 11:09:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:41:50:47:07:28:b3:34:60:89:30:38:b2:
8f:f3:76:94:f2:f7:97:4f:e5:0a:a0:2c:d6:63:53:
8d:34:e0:b1:70:e3:ad:15:47:29:ac:24:7c:67:57:
2b:34:b8:74:e8:65:04:4e:b8:dc:6b:27:f0:a6:5d:
8c:b6:e5:e2:8e:97:84:5c:78:ea:ff:48:f6:ec:96:
04:3e:d0:8a:2d:8d:5b:53:2b:18:1b:47:18:ca:94:
dd:94:cb:a5:31:97:42:17:e3:8d:f3:70:e8:38:80:
8d:bd:08:db:36:63:44:29:20:e5:fe:48:27:1c:14:
f7:71:23:3a:bd:56:bf:05:97:85:fe:37:ec:19:24:
ab:39:9d:43:00:89:05:74:fa:38:b4:7a:c5:f6:d8:
bb:e8:79:33:b3:bd:2c:d9:59:52:d9:7d:09:32:59:
ca:33:38:27:fa:23:04:f5:96:30:81:01:2b:14:9f:
1d:c8:08:bf:ab:eb:1f:f3:28:34:ad:c1:3c:f4:fc:
90:ab:44:83:e3:81:f5:6e:d3:cd:fd:72:20:f0:ac:
78:5d:52:41:39:7c:4e:48:d4:7f:b1:78:a5:f1:fd:
ed:2c:d6:b9:2f:e8:6d:d3:11:8b:bd:f2:62:56:fb:
eb:90:a5:0a:1c:54:04:af:34:09:e6:13:a8:c1:0d:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0-83.143.118.255
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/23
185.185.43.0/24
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.165.0/24
193.105.177.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b80::/29
2a0b:7080::/29
2a0d:77c0::/29
2a0e:c7c0::/29
2a0e:e800::/29
2a0f:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
52:15:0f:31:88:47:44:9d:82:2f:f5:6a:14:a8:47:12:35:2a:
d9:9d:1f:0f:f2:2a:88:c9:88:4e:d0:50:1e:f9:a7:19:2f:07:
72:5a:2c:bc:2c:05:de:62:5d:2d:58:02:3c:d6:27:59:7c:51:
7b:1d:9f:2b:61:06:72:0e:0a:12:cc:60:bc:5c:0d:75:ab:20:
3e:5c:66:d4:6c:b7:dc:ef:52:11:7b:84:ee:68:89:80:a1:da:
ae:c1:c4:64:bd:51:15:18:de:9a:a7:71:5f:80:35:67:b4:b9:
3f:fb:e8:d5:ca:20:12:b0:12:24:40:9d:bc:d6:6c:95:40:63:
0e:9b:37:ed:ca:dc:c5:db:84:23:ae:e8:9c:07:8d:03:1d:71:
92:fc:9b:62:56:ec:91:28:cf:dd:70:00:6f:d4:5d:46:ef:a7:
55:17:c1:8a:76:93:13:55:0f:34:ae:23:92:a3:68:30:3a:28:
a2:6f:6c:17:de:81:a8:d8:10:ee:50:e9:77:a9:42:b3:95:3e:
69:80:e7:b4:d8:83:75:fb:80:ed:55:45:07:e6:eb:40:3c:25:
73:e4:18:8a:54:e0:93:cd:53:da:e0:05:58:4f:da:eb:6f:e8:
86:a6:07:d7:03:94:eb:3d:25:74:ca:fc:a7:77:2e:e9:54:27:
e2:94:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:16 2025 by rpki-client