Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
File: EPm9HHFv0ulaydYQddcJYhroBgA.cer (raw, json)
Hash identifier: cV4/8DyxdUdlKqJcH6FZLFTW3LYk7c0P8PmU7ph9fAA=
Subject key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D206E21F3EC708899930C6F7083C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42621
IP: 77.105.64.0/18
IP: 185.138.48.0/22
IP: 2a03:9b00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d2:06:e2:1f:3e:c7:08:89:99:30:c6:f7:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:b9:e4:89:db:00:12:2e:dc:09:fd:26:80:
2a:46:35:9b:b5:7c:c9:d7:ea:7e:b0:c0:61:59:be:
a7:7b:ba:7e:b4:9b:45:3b:8d:c4:76:e9:6f:11:7f:
2d:3a:32:43:6a:f9:81:ce:d1:d4:f0:b1:3f:93:cc:
ba:63:8d:55:71:33:15:e6:d2:f8:14:22:65:95:e6:
38:a1:4d:81:34:2c:f5:3c:96:f3:c3:e6:fe:78:ae:
6b:e2:7d:9a:a4:79:38:93:94:4f:09:a6:14:57:6c:
df:13:0e:26:ea:bd:00:ff:d2:ef:9d:9c:5e:e4:bd:
a3:a6:49:65:a8:1b:de:a4:cd:44:62:f0:23:26:66:
ec:6c:4f:4f:22:bb:69:41:23:f5:b0:7b:2b:d9:30:
c8:58:84:69:40:30:0d:49:18:0c:7f:5f:0d:a8:b6:
d3:61:48:7f:a6:5b:d3:95:9f:e3:7f:48:39:f4:f4:
1e:fe:aa:ca:80:c8:55:d4:55:c3:d6:e0:3a:da:2a:
3e:98:2e:fa:d3:4c:a3:02:f3:be:bc:f3:05:bf:22:
80:71:8a:3c:07:05:67:00:f9:7e:2d:f6:05:27:af:
94:62:4d:13:d7:b3:ae:86:47:95:3e:07:b3:f6:f5:
f5:11:0d:c2:93:82:69:b4:f9:c1:cc:4f:a0:c3:c7:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.64.0/18
185.138.48.0/22
IPv6:
2a03:9b00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42621
Signature Algorithm: sha256WithRSAEncryption
70:00:cb:f2:bb:10:74:c0:08:2f:70:60:f7:10:48:24:54:aa:
97:f0:a7:02:06:da:e9:fa:c0:ba:73:63:4c:78:fe:0f:91:4a:
60:01:dc:e0:a2:75:c3:c1:44:a3:e6:f1:cd:b8:f9:84:cf:f9:
cf:7e:20:dc:fb:ca:3b:92:27:82:0f:ef:f4:f2:94:0f:9d:11:
71:d1:23:6b:8b:7f:c5:03:dc:35:89:3d:e4:5e:3f:07:4a:aa:
aa:77:26:f5:81:6c:78:45:7a:4f:23:4a:cb:dc:c0:11:93:a1:
ef:a4:3b:38:1e:29:fa:00:ca:11:00:85:bd:18:ad:30:68:b8:
2e:ff:44:d4:1c:8d:e4:81:9f:b9:41:cf:53:52:26:b0:ff:5d:
27:34:25:7c:c8:da:c1:4a:cb:f7:93:81:c3:4b:78:5f:27:59:
e5:0c:6b:73:e6:29:92:e7:17:ec:21:62:7a:57:1a:e9:9d:cf:
d3:ee:d1:41:ac:18:24:01:22:57:59:87:9f:97:d6:53:17:7a:
86:61:4c:dc:cc:26:a5:5f:3c:50:15:7e:3d:1a:c4:af:5c:61:
dd:d8:9c:3f:f1:83:c3:23:ee:87:59:15:d8:5f:23:5c:21:2d:
45:8c:5f:fa:6f:21:b9:85:29:41:46:67:47:2b:05:5e:81:60:
b3:ce:ea:96
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQkRNIG4h8+xwiJmTDG9wg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGY5YmQxYzcxNmZkMmU5NWFjOWQ2MTA3NWQ3MDk2MjFhZTgwNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3i55InbABIu3An9JoAqRjWbtXzJ
1+p+sMBhWb6ne7p+tJtFO43EdulvEX8tOjJDavmBztHU8LE/k8y6Y41VcTMV5tL4
FCJlleY4oU2BNCz1PJbzw+b+eK5r4n2apHk4k5RPCaYUV2zfEw4m6r0A/9LvnZxe
5L2jpkllqBvepM1EYvAjJmbsbE9PIrtpQSP1sHsr2TDIWIRpQDANSRgMf18NqLbT
YUh/plvTlZ/jf0g59PQe/qrKgMhV1FXD1uA62io+mC7600yjAvO+vPMFvyKAcYo8
BwVnAPl+LfYFJ6+UYk0T17OuhkeVPgez9vX1EQ3Ck4JptPnBzE+gw8eXBQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFBD5vRxxb9LpWsnWEHXXCWIa6AYAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2U3ZGYx
Yi03YWJiLTQ1ZmItYmFiZS1kMmFmMWNjM2ZhMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZTdkZjFi
LTdhYmItNDVmYi1iYWJlLWQyYWYxY2MzZmEzMS8xL0VQbTlISEZ2MHVsYXlkWVFk
ZGNKWWhyb0JnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQGTWlAAwQCuYowMA0EAgACMAcDBQAqA5sAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCmfTANBgkqhkiG9w0BAQsFAAOCAQEAcADL
8rsQdMAIL3Bg9xBIJFSql/CnAgba6frAunNjTHj+D5FKYAHc4KJ1w8FEo+bxzbj5
hM/5z34g3PvKO5Ingg/v9PKUD50RcdEja4t/xQPcNYk95F4/B0qqqncm9YFseEV6
TyNKy9zAEZOh76Q7OB4p+gDKEQCFvRitMGi4Lv9E1ByN5IGfuUHPU1ImsP9dJzQl
fMjawUrL95OBw0t4XydZ5Qxrc+YpkucX7CFielca6Z3P0+7RQawYJAEiV1mHn5fW
Uxd6hmFM3MwmpV88UBV+PRrEr1xh3dicP/GDwyPuh1kV2F8jXCEtRYxf+m8huYUp
QUZnRysFXoFgs87qlg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:31:40 2025 by rpki-client