Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
File: tcsrXq88wV3Us7I62LlHKlJAwDs.cer (raw, json)
Hash identifier: GPvEpoZs8AII9V6ki4o3D3uju44t5gYnQVKy+Zz3JJ0=
Subject key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198854EF14847756789853F34C35C427153
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Aug 2025 16:13:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60476
AS: 61178
AS: 205830
IP: 31.177.104.0/22
IP: 46.245.234.0/24
IP: 185.30.176.0/22
IP: 185.205.76.0/22
IP: 2a14:25c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:4e:f1:48:47:75:67:89:85:3f:34:c3:5c:42:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 16:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:90:0e:38:3c:ab:58:ae:fb:a7:2f:3f:84:
c3:b2:8f:3b:d7:0f:19:d3:01:b1:df:c3:7c:d2:9e:
cb:95:c3:3b:ae:20:7a:0a:be:f3:7a:35:f8:e2:de:
a3:86:20:8c:7a:53:8d:16:6e:d4:61:c5:de:4f:1f:
ad:25:ca:3c:d3:5b:5a:37:fc:44:62:fc:5d:ac:24:
10:90:ff:05:38:7d:a9:ba:7f:2c:b4:db:e8:ca:7c:
10:03:83:9e:3f:cd:4c:8b:62:59:c1:29:73:b4:13:
4a:17:09:6f:d2:e2:b3:1a:25:47:c2:b6:34:6f:36:
76:94:d9:dc:ac:61:af:ec:67:7d:42:40:cb:36:78:
b3:7f:39:5e:f5:d9:4c:a6:c7:50:51:10:2a:fb:4f:
d4:18:45:42:ee:93:ba:cf:aa:42:81:b6:2a:48:6e:
55:07:14:36:86:52:0d:5b:c3:ee:7c:ec:65:55:ef:
62:fa:cc:f8:28:cc:3c:08:9b:be:fd:77:b1:44:58:
5d:db:56:7f:c2:86:0f:24:8d:78:99:4d:d4:13:5d:
b3:d8:e8:93:20:fe:6d:4f:90:1b:38:50:2c:b8:6b:
8a:24:f0:4f:49:0e:38:41:ca:b5:c7:f8:e3:2d:f8:
20:3d:ad:f7:fc:59:ea:13:8b:be:ae:09:c6:f9:07:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.104.0/22
46.245.234.0/24
185.30.176.0/22
185.205.76.0/22
IPv6:
2a14:25c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60476
61178
205830
Signature Algorithm: sha256WithRSAEncryption
67:03:b5:5d:b6:52:d0:a5:40:a1:67:1e:33:72:1c:aa:31:8e:
f9:6b:f4:d3:13:0e:c2:2f:38:af:60:9e:09:b5:50:2f:8e:42:
97:65:b3:83:8a:34:3e:a8:0d:55:33:56:bd:e2:ad:ca:d1:9d:
c6:83:e7:4c:2a:32:bb:0a:86:b3:af:ac:96:f7:91:f7:0e:30:
4a:cd:0e:e2:8f:1a:ee:6a:26:7c:62:34:77:42:86:bb:81:b0:
79:fa:4e:40:ab:8b:a6:b8:ea:49:67:02:f6:ef:36:96:4c:7b:
c2:11:8c:54:98:04:c6:c2:ab:ac:02:1c:9b:ad:c8:0c:3b:96:
fb:56:32:88:29:55:73:3e:7a:37:cd:d8:41:71:6d:4a:d4:8f:
78:7f:03:7c:e1:0d:00:69:6f:12:55:0b:9b:83:e0:77:4f:3a:
6e:62:ec:e7:42:a3:ce:d2:7b:15:3f:d8:d1:df:f6:8f:22:83:
d0:53:51:a8:91:9b:c2:06:6d:8d:7d:a1:37:4d:e9:fa:99:45:
a8:23:8a:11:f5:e1:fb:59:d2:3c:12:55:ac:52:36:24:de:cc:
8a:19:c3:3b:61:08:9f:b3:d2:a2:ac:d7:61:2c:58:fd:9e:81:
8b:cf:9b:1d:38:22:f7:31:3a:97:eb:01:ed:01:09:14:b1:59:
2f:d6:65:25
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAZiFTvFIR3VniYU/NMNcQnFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODA3MTYxMzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWNiMmI1ZWFmM2NjMTVkZDRiM2IyM2FkOGI5NDcyYTUyNDBjMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF+QDjg8q1iu+6cvP4TDso871w8Z
0wGx38N80p7LlcM7riB6Cr7zejX44t6jhiCMelONFm7UYcXeTx+tJco801taN/xE
YvxdrCQQkP8FOH2pun8stNvoynwQA4OeP81Mi2JZwSlztBNKFwlv0uKzGiVHwrY0
bzZ2lNncrGGv7Gd9QkDLNnizfzle9dlMpsdQURAq+0/UGEVC7pO6z6pCgbYqSG5V
BxQ2hlINW8PufOxlVe9i+sz4KMw8CJu+/XexRFhd21Z/woYPJI14mU3UE12z2OiT
IP5tT5AbOFAsuGuKJPBPSQ44Qcq1x/jjLfggPa33/FnqE4u+rgnG+Qc2xQIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFLXLK16vPMFd1LOyOti5RypSQMA7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzc5NWVk
OS04ZmFkLTRjNDQtODU4My0wNmNhNzA5YTNjNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNzk1ZWQ5
LThmYWQtNGM0NC04NTgzLTA2Y2E3MDlhM2M1OS8xL3Rjc3JYcTg4d1YzVXM3STYy
TGxIS2xKQXdEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQCH7FoAwQALvXqAwQCuR6wAwQCuc1MMA0EAgAC
MAcDBQMqFCXAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDsPAIDAO76AgMDJAYw
DQYJKoZIhvcNAQELBQADggEBAGcDtV22UtClQKFnHjNyHKoxjvlr9NMTDsIvOK9g
ngm1UC+OQpdls4OKND6oDVUzVr3ircrRncaD50wqMrsKhrOvrJb3kfcOMErNDuKP
Gu5qJnxiNHdChruBsHn6TkCri6a46klnAvbvNpZMe8IRjFSYBMbCq6wCHJutyAw7
lvtWMogpVXM+ejfN2EFxbUrUj3h/A3zhDQBpbxJVC5uD4HdPOm5i7OdCo87SexU/
2NHf9o8ig9BTUaiRm8IGbY19oTdN6fqZRagjihH14ftZ0jwSVaxSNiTezIoZwzth
CJ+z0qKs12EsWP2egYvPmx04IvcxOpfrAe0BCRSxWS/WZSU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:26:37 2025 by rpki-client