Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.cer (raw, json)
Hash identifier: 4OuJ8PSWsUjNmDM9FwGqJ5OnmapAzPk7Jhhh/YBIp1M=
Subject key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9676E82A711E32BB26AC1A3A38CE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212398
IP: 91.194.7.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:67:6e:82:a7:11:e3:2b:b2:6a:c1:a3:a3:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:bf:31:5d:27:68:d0:fb:42:0d:4c:58:2e:
d8:b5:13:94:e8:b6:b0:b2:f8:a2:8f:2e:c5:38:2b:
44:94:5e:29:7d:f3:53:a4:f5:4e:0a:54:85:5d:6a:
b9:36:e0:00:2b:bf:78:1c:c1:6e:6e:71:3d:86:9b:
ba:c8:3b:c9:5c:a1:2f:0d:c5:c9:1b:c3:ba:c5:6b:
ae:34:32:e2:f1:0b:66:45:c6:e9:45:cc:e8:1d:03:
96:b4:b3:97:51:ee:99:c0:6c:2b:ef:8d:11:46:1b:
5f:0b:e3:71:c2:4c:6e:c5:a1:e1:00:77:24:19:72:
9c:c1:2c:23:b9:50:83:8e:cc:52:67:ac:c9:e5:1d:
56:cd:4b:2a:65:0c:64:64:04:10:c9:b2:67:65:b4:
c5:d5:c8:61:07:27:3a:b3:15:ad:f8:04:42:7c:4b:
54:36:c2:4e:80:d2:10:7f:03:5e:83:f2:7c:7d:db:
2d:49:5c:5f:95:9f:e0:f4:51:47:f3:5a:21:80:44:
b6:64:49:6e:85:ef:07:40:69:fa:31:0d:2d:a1:84:
7e:6a:45:52:f4:93:5a:89:9d:57:46:06:2b:f7:9d:
59:a5:03:0c:ed:57:85:a3:3b:97:09:9a:35:4c:c3:
79:9f:3e:c4:ce:3a:b6:60:04:e5:34:d7:b3:5e:67:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212398
Signature Algorithm: sha256WithRSAEncryption
65:31:40:02:54:4a:cf:c2:3d:a9:97:99:fa:08:2b:7d:7e:ab:
06:cf:07:35:06:a0:c3:d8:d4:68:b3:34:be:bb:68:d5:65:70:
33:3d:68:85:eb:36:36:84:84:25:6b:df:08:84:3c:a7:29:0f:
b2:8a:fd:64:7c:9c:8c:d9:2e:88:5d:09:f9:17:09:db:c8:c4:
74:fd:86:79:9e:a4:8c:48:7c:6a:c9:d3:03:f6:1e:31:16:a8:
d6:68:72:e5:82:a1:38:84:fa:b2:9f:bd:23:58:05:8e:30:50:
6a:73:9e:37:bd:54:bf:b4:98:e4:0b:07:51:f3:0c:d0:ae:2c:
fa:d5:e3:14:51:c7:9e:7e:a5:f6:7e:2f:54:bf:c3:96:69:f1:
1c:ef:40:03:13:7c:a0:2d:86:67:14:c0:19:0b:fe:83:bf:d4:
b6:8a:9f:cf:42:93:1d:eb:7e:e1:21:53:4e:3b:02:a4:68:12:
07:e9:7f:bf:2a:47:73:d5:4e:e5:54:d8:7a:1c:1f:ef:03:bf:
28:3d:05:52:fa:c5:07:db:9c:69:a2:5a:5b:bb:e5:1b:94:8e:
bf:c5:90:07:39:b9:54:00:6c:d3:f2:2f:83:e0:8d:20:f3:fa:
fc:ce:c9:4b:a7:bd:15:c4:78:36:db:44:dd:cd:65:e6:56:96:
56:65:62:ee
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2WdugqcR4yuyasGjo4zgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTA2NWY0ZmI2YjY3OWU3ZjFjYmRkODAzNWY5Njc0NjcwMTBlYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVa/MV0naND7Qg1MWC7YtROU6Law
sviijy7FOCtElF4pffNTpPVOClSFXWq5NuAAK794HMFubnE9hpu6yDvJXKEvDcXJ
G8O6xWuuNDLi8QtmRcbpRczoHQOWtLOXUe6ZwGwr740RRhtfC+NxwkxuxaHhAHck
GXKcwSwjuVCDjsxSZ6zJ5R1WzUsqZQxkZAQQybJnZbTF1chhByc6sxWt+ARCfEtU
NsJOgNIQfwNeg/J8fdstSVxflZ/g9FFH81ohgES2ZEluhe8HQGn6MQ0toYR+akVS
9JNaiZ1XRgYr951ZpQMM7VeFozuXCZo1TMN5nz7Ezjq2YATlNNezXmcv0QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNEGX0+2tnnn8cvdgDX5Z0ZwEOqZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1Lzc4ZjQ5
Zi0yNDdkLTQ4ODgtYWY4ZC1hMWYwNDBlOGU4ZDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvNzhmNDlm
LTI0N2QtNDg4OC1hZjhkLWExZjA0MGU4ZThkNC8xLzBRWmZUN2EyZWVmeHk5MkFO
ZmxuUm5BUTZway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8IHMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM9rjANBgkqhkiG9w0BAQsFAAOCAQEAZTFAAlRKz8I9qZeZ+ggrfX6rBs8HNQag
w9jUaLM0vrto1WVwMz1ohes2NoSEJWvfCIQ8pykPsor9ZHycjNkuiF0J+RcJ28jE
dP2GeZ6kjEh8asnTA/YeMRao1mhy5YKhOIT6sp+9I1gFjjBQanOeN71Uv7SY5AsH
UfMM0K4s+tXjFFHHnn6l9n4vVL/DlmnxHO9AAxN8oC2GZxTAGQv+g7/Utoqfz0KT
Het+4SFTTjsCpGgSB+l/vypHc9VO5VTYehwf7wO/KD0FUvrFB9ucaaJaW7vlG5SO
v8WQBzm5VABs0/Ivg+CNIPP6/M7JS6e9FcR4NttE3c1l5laWVmVi7g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:17:50 2025 by rpki-client