Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
File: EA5EySrUkxGKStK6gRRfHTShi8o.cer (raw, json)
Hash identifier: 17S5f5AamPJOEIb509OzsBvwnZ0FAGvXT0tP17+nPro=
Subject key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444A70ED15C0CBC6BE39C5889FD8BF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202367
IP: 194.107.136.0/22
IP: 2a07:cf00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a7:0e:d1:5c:0c:bc:6b:e3:9c:58:89:fd:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:ab:6c:73:c5:01:b8:96:63:78:9e:d2:07:
80:37:4d:31:f7:ac:bb:f6:21:ad:63:17:27:81:d1:
37:01:3f:ea:62:66:5c:a0:10:b3:0e:74:00:87:bf:
4d:6a:ae:1b:d0:b5:32:34:2f:fe:47:ca:60:ab:f1:
b4:91:c6:5b:b1:68:26:1b:a8:ba:6f:4a:f7:21:86:
77:a0:83:bb:90:fd:58:e9:3f:ea:95:9b:5e:3e:ed:
52:5a:51:ac:24:d8:72:71:b1:dc:56:1f:67:d6:9b:
51:ba:a9:f9:a3:0d:f6:a3:f4:00:23:50:33:0e:39:
6f:93:9d:18:c5:e6:f9:df:b7:eb:fa:8a:1b:29:1a:
23:bc:67:60:63:7d:bb:fb:a3:c8:6e:32:7c:44:93:
a2:e7:ff:a1:91:95:5f:a3:50:e7:a8:f4:da:09:c3:
d1:6d:82:7d:4e:4a:49:af:b9:65:1a:41:ea:94:cf:
f5:36:9f:99:5b:93:30:01:d8:8b:b5:55:03:26:c9:
4e:db:68:f4:f5:78:b4:8b:bc:6c:74:1f:4d:f6:89:
54:02:fb:b2:6c:75:a2:9c:a5:cd:54:76:4a:50:34:
1d:f2:c0:74:62:a9:26:3e:07:2b:ad:f7:92:b2:ce:
d4:ea:e1:21:68:e0:38:77:a7:72:81:7a:2d:7d:8c:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.136.0/22
IPv6:
2a07:cf00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202367
Signature Algorithm: sha256WithRSAEncryption
53:0e:6b:38:f6:02:d9:48:41:0f:dd:a9:0a:79:1a:81:a7:47:
11:2e:6d:d2:d0:97:12:fd:51:24:ab:41:a7:77:bf:9f:c1:54:
09:f0:e4:69:7e:5f:e2:0f:18:41:08:4b:5d:4e:55:4d:d8:8e:
81:18:3d:e8:89:46:f8:ed:b7:3a:93:75:c8:34:11:7f:3e:a6:
43:07:98:d8:93:a5:98:39:4d:09:78:f3:ee:50:21:63:7e:d1:
2a:5d:d3:4e:77:69:95:37:dd:cd:ea:56:06:d0:eb:60:08:f3:
b7:b6:a1:3b:50:b7:c0:e3:a2:68:f0:d9:1e:30:dc:79:57:c4:
59:6f:05:60:47:2f:3a:7d:78:61:62:1b:1e:f0:a3:5f:cc:66:
39:54:01:d2:f5:30:fc:4f:f2:8e:ee:4a:a8:36:47:c2:81:e3:
09:e2:b5:20:43:36:77:c3:60:00:44:03:cf:b6:86:23:94:0e:
14:33:d1:1f:f9:70:dd:33:f6:ca:3c:0d:f1:b6:79:dc:d1:a3:
c0:dd:81:a2:d6:75:3c:5b:4f:21:e0:e5:3f:72:6a:25:6f:a9:
74:27:40:5d:72:a7:dd:ca:28:54:73:d5:bf:27:82:84:91:b5:
e9:d3:7d:0b:82:6b:cb:b9:aa:e4:f2:1d:3a:f6:f8:a5:f8:3e:
38:ab:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:28:55 2025 by rpki-client