
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
File: vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer (raw, json)
Hash identifier: faJ3nCZl6FRKZw9y2MegbiKBXY0+waKocYAGkTB8vcI=
Subject key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992E4BB9FFB9535E1E28DACF5122A25B6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Sep 2025 11:45:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:4b:b9:ff:b9:53:5e:1e:28:da:cf:51:22:a2:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 11:45:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:31:7a:d9:b8:d3:f0:32:03:78:4d:10:28:
5e:9f:4c:ec:2a:c8:62:df:12:71:91:fd:63:2e:80:
59:1c:de:26:0f:8e:09:6d:45:ca:c4:00:cd:88:16:
aa:34:67:44:33:58:1a:4a:e5:69:48:73:7c:72:06:
f0:bc:15:25:2e:50:5c:ab:6f:94:96:6b:e5:a8:9f:
1b:92:07:c1:eb:b3:cf:c5:71:1b:09:f7:21:06:15:
ab:57:75:8b:75:d8:e0:b2:59:7b:ce:45:7a:6f:b0:
7e:60:75:28:dc:ad:b6:0a:d7:db:f6:32:77:94:18:
fe:2b:80:40:9b:3b:ea:02:f7:cf:e6:b9:73:83:53:
5a:f9:09:42:58:5d:d7:e7:b2:04:ff:4c:73:69:31:
87:94:0e:87:9d:af:94:60:c6:e0:55:0e:86:3d:c4:
50:8d:e3:f7:4b:31:eb:ea:9e:e6:7b:2e:9f:12:aa:
59:09:25:e5:1a:da:54:45:66:b2:ef:cf:2c:5b:ed:
2a:46:04:28:6f:65:d1:b0:f9:d3:e0:c0:44:21:86:
3e:2c:96:b0:6f:e5:92:f7:fd:73:28:b0:b9:b5:95:
e8:32:7e:f5:f6:5b:c8:d3:8d:92:32:ba:7f:31:05:
cf:a6:94:2d:cd:17:8f:f1:04:c1:e3:fa:28:68:d1:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216255
Signature Algorithm: sha256WithRSAEncryption
a7:68:0f:06:60:d6:28:2e:e6:86:ac:59:f1:b6:3e:0a:32:15:
86:88:ae:9c:49:2e:ef:11:21:09:ad:de:4b:6e:aa:01:9e:c1:
30:81:94:a1:7a:7a:fd:06:a4:2e:53:c8:45:2a:30:cb:bd:84:
c3:dd:d9:a7:fb:1e:29:97:11:4f:c1:25:c7:60:fc:d1:30:61:
30:95:fa:1a:fc:39:12:84:80:29:2b:9e:1b:5f:4f:60:e0:34:
1a:49:11:b8:83:56:80:be:5e:34:54:6c:e2:b5:22:50:ce:a8:
78:e4:bb:73:20:f3:36:9b:c8:71:e9:78:4b:55:32:08:8a:e6:
29:1d:7a:7e:d1:08:86:b0:e9:13:d8:a8:e3:64:32:0e:38:26:
89:8c:e6:32:63:45:ff:99:99:02:29:4b:e2:ff:47:9e:43:c5:
a1:a7:6a:d8:60:8c:d4:6e:a8:55:74:7c:29:01:06:76:6a:5c:
6d:29:22:6d:92:bd:06:9d:b2:ce:d1:44:9e:30:58:e7:76:db:
d4:aa:5d:37:bd:75:af:06:94:e7:0f:d7:0a:4a:ca:8f:b7:d9:
34:29:f7:a7:24:4c:90:59:6a:4a:f6:69:03:4b:39:fc:3b:4b:
a2:05:14:94:e5:a0:ce:00:6f:fb:5b:72:28:3c:bf:a0:36:20:
4b:a5:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:08 2025 by rpki-client