Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer
File: 10eU-ZasWj8CtWp1wUlJQD0CrGQ.cer (raw, json)
Hash identifier: miqBIzubzGnwca87AjRdJ+mOfx2yr6u056clVFv31BI=
Subject key identifier: D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBB9FD8691463943D197B2173227F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31303
IP: 217.174.16.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b9:fd:86:91:46:39:43:d1:97:b2:17:32:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d74794f996ac5a3f02b56a75c14949403d02ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:61:db:f8:5b:cd:36:20:16:1a:16:0f:10:
32:5f:21:45:57:72:87:06:a4:64:8a:dc:ce:bc:cf:
44:39:c3:6b:21:05:67:01:24:b5:5d:95:72:c6:b2:
1f:11:2d:e3:f5:8c:b0:58:62:52:aa:25:3f:f7:a9:
92:1b:ac:f2:a1:3a:d3:c6:28:f7:8a:80:c6:68:cf:
da:d3:b0:0a:b4:a1:57:51:5c:c5:a2:ea:f5:08:4b:
7a:72:7a:68:0b:33:88:92:46:60:66:72:03:3f:ce:
b8:22:18:c6:22:ea:e9:86:75:0f:84:21:4e:de:d9:
4e:04:ed:b2:87:de:58:37:8e:67:96:54:a7:ff:a8:
d7:5b:28:20:71:aa:16:14:e1:d4:36:15:7d:52:cc:
48:72:80:41:7d:be:64:3f:9f:a3:13:67:e0:76:8c:
22:f7:86:c6:d7:1a:98:8a:53:fb:cc:a2:2f:8b:23:
47:29:f6:66:b6:8d:de:2a:81:87:01:ec:d2:fa:88:
b6:63:6a:6f:e7:7d:0a:6b:91:50:62:d5:39:05:8a:
dc:2f:72:67:4a:0f:7c:23:69:83:14:07:4c:fe:1f:
19:58:12:f0:a4:b2:60:4c:b5:f7:d8:bb:6e:5f:8a:
18:5d:cd:8c:44:a4:57:18:29:af:da:ac:c8:b6:79:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:94:F9:96:AC:5A:3F:02:B5:6A:75:C1:49:49:40:3D:02:AC:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed0296-43be-489f-a82f-8d6b6ab61b75/1/10eU-ZasWj8CtWp1wUlJQD0CrGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.174.16.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31303
Signature Algorithm: sha256WithRSAEncryption
2f:97:80:79:22:26:88:bb:99:d9:7e:38:23:15:96:a1:b1:20:
75:0e:68:5a:19:f9:40:f8:c0:e0:8e:56:b6:b1:9e:f8:3d:07:
55:1a:10:28:5a:3a:f8:6c:76:2e:a5:07:cb:63:2d:91:6c:2e:
fa:f2:7b:4b:4d:ce:69:e7:88:98:72:93:9e:d0:28:0c:c0:35:
99:fb:3e:26:66:10:0e:5a:31:1d:18:81:9f:58:a4:dd:0e:27:
23:f2:68:06:42:e0:7a:69:13:ea:cb:77:be:75:1b:26:4e:e3:
11:8e:63:98:ed:5a:9f:b9:3a:bd:56:45:e8:b5:ad:9f:e3:17:
17:9a:6c:e5:66:8a:70:39:99:ea:eb:4a:36:a5:d0:9d:a3:a3:
50:a5:1e:8a:47:41:a2:3c:9d:4c:eb:8d:6a:e5:2e:b6:34:fd:
f9:76:b4:bc:25:4a:f3:03:b3:02:cc:72:b9:6e:37:80:49:ab:
c8:64:c9:b9:1f:ff:b3:64:06:ff:a0:5c:3b:cd:5f:bd:8a:d7:
45:3b:d8:90:e3:79:ea:d3:15:9c:1d:53:03:b1:1e:17:b7:12:
5c:e8:be:11:2d:80:ce:00:5f:3a:2b:af:5e:f3:ee:5e:70:73:
07:b3:34:39:81:13:03:3c:96:9e:ce:d2:e8:ab:68:2b:6d:50:
6e:08:3d:0c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQi+7n9hpFGOUPRl7IXMif3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzQ3OTRmOTk2YWM1YTNmMDJiNTZhNzVjMTQ5NDk0MDNkMDJhYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3hh2/hbzTYgFhoWDxAyXyFFV3KH
BqRkitzOvM9EOcNrIQVnASS1XZVyxrIfES3j9YywWGJSqiU/96mSG6zyoTrTxij3
ioDGaM/a07AKtKFXUVzFour1CEt6cnpoCzOIkkZgZnIDP864IhjGIurphnUPhCFO
3tlOBO2yh95YN45nllSn/6jXWyggcaoWFOHUNhV9UsxIcoBBfb5kP5+jE2fgdowi
94bG1xqYilP7zKIviyNHKfZmto3eKoGHAezS+oi2Y2pv530Ka5FQYtU5BYrcL3Jn
Sg98I2mDFAdM/h8ZWBLwpLJgTLX32LtuX4oYXc2MRKRXGCmv2qzItnkmowIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFNdHlPmWrFo/ArVqdcFJSUA9AqxkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2VkMDI5
Ni00M2JlLTQ4OWYtYTgyZi04ZDZiNmFiNjFiNzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZWQwMjk2
LTQzYmUtNDg5Zi1hODJmLThkNmI2YWI2MWI3NS8xLzEwZVUtWmFzV2o4Q3RXcDF3
VWxKUUQwQ3JHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQE2a4QMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnpHMA0GCSqGSIb3DQEBCwUAA4IBAQAvl4B5IiaIu5nZfjgjFZahsSB1DmhaGflA
+MDgjla2sZ74PQdVGhAoWjr4bHYupQfLYy2RbC768ntLTc5p54iYcpOe0CgMwDWZ
+z4mZhAOWjEdGIGfWKTdDicj8mgGQuB6aRPqy3e+dRsmTuMRjmOY7VqfuTq9VkXo
ta2f4xcXmmzlZopwOZnq60o2pdCdo6NQpR6KR0GiPJ1M641q5S62NP35drS8JUrz
A7MCzHK5bjeASavIZMm5H/+zZAb/oFw7zV+9itdFO9iQ43nq0xWcHVMDsR4XtxJc
6L4RLYDOAF86K69e8+5ecHMHszQ5gRMDPJaeztLoq2grbVBuCD0M
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:14 2025 by rpki-client