Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
File: xP8jscNxNS85tz05pOB_jKmMzWc.cer (raw, json)
Hash identifier: 5jYWtW7VYlyarLiineitpMIqMntsXRGONwJbsQe0tYs=
Subject key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01997BB7420BFD01689945BEEDC2CBE65167
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Sep 2025 12:33:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21110
AS: 47448
AS: 196775
IP: 2.58.8.0/22
IP: 31.222.48.0/20
IP: 91.235.119.0/24
IP: 93.191.192.0/21
IP: 147.189.164.0/22
IP: 193.169.30.0/24
IP: 2a10:cec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:b7:42:0b:fd:01:68:99:45:be:ed:c2:cb:e6:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 12:33:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:bd:6a:23:f4:37:5a:45:81:f6:d8:b5:ca:
04:8e:5c:fc:dd:f3:91:b1:2e:c7:19:88:11:b1:79:
b1:19:a3:c7:2b:45:2b:61:a2:47:37:2a:c4:f6:05:
d6:21:de:0e:c5:8b:08:17:ed:5c:65:e3:76:92:8f:
34:3b:cc:2a:6e:d8:21:80:ae:8c:cf:0c:c1:11:38:
b0:55:32:56:a2:f3:60:77:55:88:6a:7e:60:e2:be:
7d:fd:a7:32:29:aa:85:97:b6:8e:66:46:52:75:b0:
3b:db:e8:35:81:b3:52:83:29:36:53:ae:f6:13:5b:
4a:59:c9:e7:e5:23:4e:03:32:ce:91:e6:14:06:56:
79:03:b3:5d:b1:bd:42:f4:f1:39:c5:6c:95:95:cd:
f9:61:ad:58:95:10:b3:4d:eb:0f:b0:4f:c4:eb:cc:
04:67:36:7a:19:b4:38:62:54:e4:78:a8:f0:d8:c9:
c7:40:4f:75:46:06:7d:8c:d3:bf:d7:79:ad:c1:86:
91:f5:6c:8a:3f:a1:36:4d:f6:5a:7c:66:5a:9a:aa:
c8:c6:7d:62:a6:95:0d:48:ec:9f:b8:94:54:16:95:
e6:30:97:72:28:c8:44:df:c2:bc:b0:24:82:0b:76:
8e:90:bd:4e:53:58:b1:3b:40:69:c5:e8:8e:69:1e:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.8.0/22
31.222.48.0/20
91.235.119.0/24
93.191.192.0/21
147.189.164.0/22
193.169.30.0/24
IPv6:
2a10:cec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21110
47448
196775
Signature Algorithm: sha256WithRSAEncryption
14:4f:d1:61:55:37:26:4e:4a:0a:b8:97:32:11:f2:93:57:f3:
82:4e:24:66:10:a1:f3:e6:60:49:36:ca:25:37:de:ba:72:a7:
f4:73:3e:c4:1e:6d:04:97:ec:5c:6a:e8:da:11:81:10:96:52:
f8:e9:03:24:c9:33:06:3e:f1:d4:16:b8:79:38:a9:ce:80:f5:
e5:b7:78:e6:90:dd:a7:7e:87:f0:de:f6:e4:1c:b1:5e:9e:ee:
4a:cc:4f:5e:33:11:9b:2f:0b:4f:28:0c:4d:05:09:29:37:ab:
1b:f4:af:4d:ff:73:26:eb:0f:17:10:d4:d3:d3:86:fe:38:a5:
e7:ad:47:5b:61:c9:7d:20:ec:e2:fa:37:07:43:4c:3b:e6:58:
89:b4:78:f6:b1:fa:2a:da:37:ef:c8:a1:19:89:ea:d6:3d:b4:
73:00:c9:83:d5:cb:1a:9d:19:79:a4:5e:e1:59:4c:be:e9:f0:
4a:3a:44:f1:2d:57:9c:4f:dd:96:37:ab:e1:ea:50:2f:c8:45:
15:9b:ce:d7:7e:93:32:83:11:a1:12:2a:63:a0:32:8d:83:78:
07:ea:7c:cc:50:65:6f:91:18:69:d9:e7:8e:73:06:65:6c:ae:
30:48:34:d7:3c:29:d1:fa:3b:ad:0a:a5:dd:1b:1c:2d:97:e2:
01:05:c6:8e
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAZl7t0IL/QFomUW+7cLL5lFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTI0MTIzMzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGZmMjNiMWMzNzEzNTJmMzliNzNkMzlhNGUwN2Y4Y2E5OGNjZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyq9aiP0N1pFgfbYtcoEjlz83fOR
sS7HGYgRsXmxGaPHK0UrYaJHNyrE9gXWId4OxYsIF+1cZeN2ko80O8wqbtghgK6M
zwzBETiwVTJWovNgd1WIan5g4r59/acyKaqFl7aOZkZSdbA72+g1gbNSgyk2U672
E1tKWcnn5SNOAzLOkeYUBlZ5A7Ndsb1C9PE5xWyVlc35Ya1YlRCzTesPsE/E68wE
ZzZ6GbQ4YlTkeKjw2MnHQE91RgZ9jNO/13mtwYaR9WyKP6E2TfZafGZamqrIxn1i
ppUNSOyfuJRUFpXmMJdyKMhE38K8sCSCC3aOkL1OU1ixO0BpxeiOaR77swIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFMT/I7HDcTUvObc9OaTgf4ypjM1nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2M2NWFh
Yi04YTUyLTQ3NmYtOWUzMi0xMDk1OWFhYThiM2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYzY1YWFi
LThhNTItNDc2Zi05ZTMyLTEwOTU5YWFhOGIzZS8xL3hQOGpzY054TlM4NXR6MDVw
T0JfakttTXpXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQCAjoIAwQEH94wAwQAW+t3AwQDXb/AAwQCk72k
AwQAwakeMA0EAgACMAcDBQAqEM7AMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAlJ2
AgMAuVgCAwMApzANBgkqhkiG9w0BAQsFAAOCAQEAFE/RYVU3Jk5KCriXMhHyk1fz
gk4kZhCh8+ZgSTbKJTfeunKn9HM+xB5tBJfsXGro2hGBEJZS+OkDJMkzBj7x1Ba4
eTipzoD15bd45pDdp36H8N725ByxXp7uSsxPXjMRmy8LTygMTQUJKTerG/SvTf9z
JusPFxDU09OG/jil561HW2HJfSDs4vo3B0NMO+ZYibR49rH6Kto378ihGYnq1j20
cwDJg9XLGp0ZeaRe4VlMvunwSjpE8S1XnE/dljer4epQL8hFFZvO136TMoMRoRIq
Y6AyjYN4B+p8zFBlb5EYadnnjnMGZWyuMEg01zwp0fo7rQql3RscLZfiAQXGjg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:41:13 2025 by rpki-client