Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
File: siZANRqyGg3HqqFfq1sRCXdxSjw.cer (raw, json)
Hash identifier: Wm9PGLB4Zdc9fZtgc26iUOl9SVTxpYIMQhBHI1Dh4EA=
Subject key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199DD5B38658B3EF20734B93E182065BBC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Oct 2025 11:36:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215231
IP: 194.117.72.0/24
IP: 2a14:2ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:5b:38:65:8b:3e:f2:07:34:b9:3e:18:20:65:bb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 11:36:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:27:3e:d2:9d:c9:a9:16:41:6e:2c:bb:6a:
ae:1a:49:cf:4d:3e:bb:7f:1a:82:da:19:9c:c5:ec:
24:28:a1:5b:68:ee:ce:ff:78:12:53:07:ce:53:12:
3a:fd:9a:6c:2d:36:84:a3:e0:fb:bc:6f:ce:e6:89:
78:2e:c5:a9:26:ba:36:11:d8:67:03:4a:2b:77:f1:
84:a5:74:eb:46:2e:63:04:77:69:fe:db:a5:e8:50:
73:5b:4a:7f:07:9b:79:03:4f:8e:20:97:93:9c:62:
c2:09:5b:44:59:9b:65:c5:30:76:52:1a:9f:17:e1:
e1:f5:98:10:84:52:7b:de:c9:1d:1e:e2:e5:e3:a4:
21:ad:5a:1a:2f:35:3e:85:c7:ef:36:7d:75:b6:00:
37:0d:ac:c6:2e:48:b2:eb:77:b6:a7:ff:b6:5b:b6:
d3:83:26:b0:08:ff:52:a4:e4:b8:c1:0c:38:78:71:
10:77:a7:6a:86:84:1f:ae:0a:f6:e0:42:41:f5:dd:
6f:f4:8e:0c:c4:d3:43:94:e8:8e:28:f0:5a:bf:05:
a2:4c:42:c2:b2:94:f0:9b:d9:b0:1c:5e:3c:f4:1c:
8c:24:7b:a3:7c:c4:fd:1e:f7:66:1a:f9:5e:83:82:
04:36:cd:c1:1b:3c:11:19:10:e8:ee:4b:85:c5:08:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.72.0/24
IPv6:
2a14:2ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215231
Signature Algorithm: sha256WithRSAEncryption
5b:6b:03:8c:44:9c:2c:4f:c2:28:5a:f1:46:76:ed:22:87:1b:
77:25:ad:40:eb:b1:bb:df:44:73:6b:bb:45:58:2a:c3:86:06:
d9:5f:d1:4d:4d:ee:51:f0:3d:a2:1a:48:25:54:b0:9d:94:cd:
f9:f3:d2:f5:1c:01:ae:13:db:20:29:03:91:4c:30:81:c5:e4:
0a:7b:31:62:ca:9c:cc:b8:b4:a2:ac:00:0d:15:6d:73:47:7f:
71:3e:6c:fd:f4:bd:bc:ac:1c:a5:c2:61:0c:d2:2e:a1:0c:01:
03:73:e4:aa:d2:dd:2e:92:4f:f8:b9:b0:65:51:fd:3a:ed:06:
6e:38:56:5b:d6:b0:49:c1:3b:2f:c0:38:58:0e:df:66:65:5a:
9e:e0:2d:5f:91:8e:e5:6f:02:fd:9c:47:9a:d6:dc:86:32:1d:
4e:c1:6a:bb:fc:a3:36:da:e9:ea:3f:15:2c:71:a1:ae:15:7b:
e0:17:6e:e9:96:ea:9e:5b:15:eb:f4:f2:bd:aa:94:ee:45:31:
05:c2:cb:5c:21:25:0d:6b:12:d3:f5:ab:e3:df:3c:ca:b3:58:
5c:5b:9c:a5:34:6d:d7:ab:c8:5e:1a:1c:e8:10:96:ab:10:ac:
e4:c2:e4:8f:21:a8:20:81:e2:28:09:a2:87:d0:19:72:f5:bc:
69:5c:50:c1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZndWzhliz7yBzS5PhggZbvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDEzMTEzNjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjI2NDAzNTFhYjIxYTBkYzdhYWExNWZhYjViMTEwOTc3NzE0YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0snPtKdyakWQW4su2quGknPTT67
fxqC2hmcxewkKKFbaO7O/3gSUwfOUxI6/ZpsLTaEo+D7vG/O5ol4LsWpJro2Edhn
A0ord/GEpXTrRi5jBHdp/tul6FBzW0p/B5t5A0+OIJeTnGLCCVtEWZtlxTB2Uhqf
F+Hh9ZgQhFJ73skdHuLl46QhrVoaLzU+hcfvNn11tgA3DazGLkiy63e2p/+2W7bT
gyawCP9SpOS4wQw4eHEQd6dqhoQfrgr24EJB9d1v9I4MxNNDlOiOKPBavwWiTELC
spTwm9mwHF489ByMJHujfMT9HvdmGvleg4IENs3BGzwRGRDo7kuFxQhDwwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLImQDUashoNx6qhX6tbEQl3cUo8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2UzOGZm
MC00NjliLTQxZTUtYmJlZC0xNzllNmU0MjkwYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvZTM4ZmYw
LTQ2OWItNDFlNS1iYmVkLTE3OWU2ZTQyOTBjMC8xL3NpWkFOUnF5R2czSHFxRmZx
MXNSQ1hkeFNqdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwnVIMA0EAgACMAcDBQMqFC7AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNIvzANBgkqhkiG9w0BAQsFAAOCAQEAW2sDjEScLE/C
KFrxRnbtIocbdyWtQOuxu99Ec2u7RVgqw4YG2V/RTU3uUfA9ohpIJVSwnZTN+fPS
9RwBrhPbICkDkUwwgcXkCnsxYsqczLi0oqwADRVtc0d/cT5s/fS9vKwcpcJhDNIu
oQwBA3PkqtLdLpJP+LmwZVH9Ou0GbjhWW9awScE7L8A4WA7fZmVanuAtX5GO5W8C
/ZxHmtbchjIdTsFqu/yjNtrp6j8VLHGhrhV74Bdu6ZbqnlsV6/TyvaqU7kUxBcLL
XCElDWsS0/Wr4988yrNYXFucpTRt16vIXhoc6BCWqxCs5MLkjyGoIIHiKAmih9AZ
cvW8aVxQwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:36:41 2025 by rpki-client