Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
File: JU0Xi-GyC41zhEa-BS4InImgCrM.cer (raw, json)
Hash identifier: GWapHGVHUs4/L5eu0KLUqOXoyN5FDt42q+KqEvw2H2U=
Subject key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C306E22920587D90EC53197086284
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16097
IP: 80.64.176.0/20
IP: 85.232.0.0/19
IP: 85.239.96.0/19
IP: 94.101.32.0/20
IP: 109.104.32.0/19
IP: 146.0.96.0/19
IP: 185.19.52.0/22
IP: 185.80.120.0/22
IP: 212.122.32.0/19
IP: 213.187.64.0/19
IP: 217.69.224.0/19
IP: 2a02:238::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:6e:22:92:05:87:d9:0e:c5:31:97:08:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=254d178be1b20b8d738446be052e089c89a00ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:42:0b:9e:6f:79:36:ae:a1:7c:c7:59:60:
88:01:d7:a8:94:a9:1f:ab:f7:20:11:2a:ff:99:81:
7a:19:1d:c0:84:7c:8f:8c:ef:65:20:30:cf:cb:16:
97:28:6c:52:d1:29:44:14:75:da:0e:f0:95:89:29:
7d:dc:d5:5e:55:17:e1:d3:8f:03:d5:75:fb:8c:5d:
e3:c4:0e:86:fb:f6:76:13:5b:e7:f0:ad:de:78:25:
4a:2b:35:ac:7f:c0:d3:66:60:65:bb:41:d1:13:dc:
3e:35:b9:44:e7:cb:44:a1:36:3e:3f:e4:fa:4a:0f:
a9:72:1b:58:ca:d8:84:14:4c:e8:29:05:8f:6f:82:
93:07:aa:9f:53:58:bc:76:ec:4d:a0:7b:47:61:37:
97:14:54:89:25:a3:ad:cd:78:3b:7b:c1:18:4f:59:
e4:b9:a8:b3:93:fe:f1:cc:c0:56:c2:fc:4b:3b:52:
d0:30:46:55:fa:44:3a:ab:87:d3:09:55:6d:ab:f9:
10:72:62:df:be:56:e8:25:14:f6:43:52:81:99:34:
1d:6f:e0:cd:7b:5d:5a:96:3c:04:5f:62:65:33:00:
83:7b:6a:af:7f:39:29:0a:e4:34:46:07:fe:0c:fc:
66:d1:db:f1:f8:ed:ab:d6:68:c6:25:68:3d:1a:21:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.176.0/20
85.232.0.0/19
85.239.96.0/19
94.101.32.0/20
109.104.32.0/19
146.0.96.0/19
185.19.52.0/22
185.80.120.0/22
212.122.32.0/19
213.187.64.0/19
217.69.224.0/19
IPv6:
2a02:238::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16097
Signature Algorithm: sha256WithRSAEncryption
7b:d5:9d:45:2d:d7:a5:e0:34:4b:a1:8a:42:0a:65:0c:be:20:
0a:87:50:eb:51:d8:e6:f8:77:e9:31:f1:ba:6b:da:5a:6c:1f:
f4:d7:21:77:eb:dd:45:1b:b8:28:a1:c4:38:2a:7b:47:31:af:
d7:e1:3d:9f:18:a7:e2:32:b4:43:bc:df:10:07:d9:82:df:0b:
e4:c9:37:c1:92:18:a7:1d:2a:e6:19:28:01:ad:70:7e:bc:b1:
31:26:8b:0e:2a:a9:1d:30:c6:89:fc:94:5e:4b:42:59:6d:51:
9d:af:6d:ab:32:d3:95:4f:ca:66:77:59:eb:16:15:64:d6:3d:
63:31:ef:90:f8:f5:ca:f4:df:7e:0b:98:ba:3d:a6:63:b5:12:
37:1a:f2:af:24:bc:7e:1c:6c:a2:ad:c5:9f:07:0e:ff:0f:b7:
c4:c5:44:ca:8a:a8:ba:6c:e6:02:84:aa:6b:d9:d9:bd:ed:ed:
bb:d5:11:a3:81:bd:b1:aa:ff:4c:c6:fc:a8:94:e9:60:3c:eb:
b2:f3:71:9e:73:d4:a6:1c:40:37:40:4f:43:7b:1c:1a:57:46:
a0:3e:10:86:d4:7a:8d:29:eb:58:5c:c6:76:7c:fc:a1:b0:39:
25:84:3c:8d:0d:81:c3:da:39:2f:89:a8:ab:4a:13:19:f8:e6:
63:a2:b2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:31:59 2025 by rpki-client