Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
File: L7goDGy32z4HOVDVNdbYxwXZC4c.cer (raw, json)
Hash identifier: mSCEFq1ClR2OuChAG/pZgosqYkYhiwHVBn08GvO4RT0=
Subject key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143EB3302E8F6B73F2207840F1DBCA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.24.121.0/24
IP: 2a14:1b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:33:02:e8:f6:b7:3f:22:07:84:0f:1d:bc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:f2:0b:35:a6:e4:4c:86:b4:0e:08:19:c6:
6f:91:c8:57:33:70:9c:b2:4f:f8:37:99:44:2e:0c:
fe:cf:3c:d5:bb:f2:3b:aa:dd:7f:08:af:cf:e8:bd:
d0:f6:4a:9e:08:4e:5c:93:d6:ed:ad:9a:d7:95:69:
7c:d0:eb:20:b9:3b:3f:9f:34:fe:2a:75:30:70:d1:
f9:21:78:0b:3d:62:79:36:99:75:97:96:c3:43:0e:
34:97:45:bd:f8:8d:f8:0b:5a:7f:12:87:84:03:52:
35:8a:8e:5c:e7:f9:79:bc:79:df:51:be:3c:13:6a:
d4:c0:6e:d5:e8:c5:ca:ee:47:ab:fd:1e:75:1d:52:
e3:7b:02:40:be:86:83:67:3f:0f:47:cb:4d:47:5f:
6e:a1:4b:65:42:ea:ce:bb:e6:28:f9:eb:1a:22:ec:
b1:91:d5:0b:79:a7:1a:41:f4:ba:6a:e8:b4:25:47:
e1:91:a3:1c:f3:3c:25:67:43:88:f7:a3:b5:b2:eb:
53:32:d4:a2:d3:12:bd:c1:0e:6c:41:6e:cd:d0:86:
e6:8d:c9:84:28:c2:04:77:83:c6:a7:a9:0b:90:f9:
ff:f7:a8:fa:0d:bb:56:56:97:0f:4d:15:eb:90:e6:
d3:6c:63:ac:de:63:c0:d0:de:cd:75:90:5a:9d:38:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.121.0/24
IPv6:
2a14:1b40::/29
Signature Algorithm: sha256WithRSAEncryption
3c:3d:92:3a:a8:d0:39:ca:56:25:1d:63:9a:56:ae:fc:4b:0b:
04:db:65:bd:ff:1c:29:19:0b:84:8b:69:0d:b3:9f:b9:e4:95:
48:29:97:3d:45:39:24:50:e8:47:af:67:bf:c2:8d:ea:1c:e2:
9e:53:43:4b:b1:93:a8:83:f4:1e:78:91:82:44:d2:68:3a:2d:
a4:bb:40:fe:77:38:9f:c8:f3:ec:1b:90:3c:48:44:bf:3b:62:
d9:2d:a0:33:d9:dd:62:44:fa:b5:65:f3:0f:51:15:55:04:c3:
94:f8:f5:bb:a2:28:19:cf:18:5f:bc:e9:6e:8d:0c:fc:3a:3c:
d8:60:1e:15:82:3d:14:fc:9a:1a:7f:72:6b:92:0b:3e:ea:5e:
68:d5:18:50:97:e6:f2:e2:e9:b2:9e:a8:8e:c2:86:fc:6e:66:
16:62:c9:e3:aa:de:82:5e:15:a5:99:74:84:a2:32:67:c4:a5:
04:a0:f5:b1:c0:75:10:2a:e1:af:07:62:ff:00:fc:28:13:ef:
59:75:65:83:5b:98:eb:cd:3b:72:59:b9:1a:15:7c:0a:28:78:
f8:72:e4:2e:bb:5a:2b:66:24:ff:97:da:48:b7:62:2e:30:da:
32:88:8b:25:4d:e3:37:41:60:d0:95:6e:b3:bb:82:87:f7:6f:
a3:84:bc:4a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhQ+szAuj2tz8iB4QPHbynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmI4MjgwYzZjYjdkYjNlMDczOTUwZDUzNWQ2ZDhjNzA1ZDkwYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64jyCzWm5EyGtA4IGcZvkchXM3Cc
sk/4N5lELgz+zzzVu/I7qt1/CK/P6L3Q9kqeCE5ck9btrZrXlWl80OsguTs/nzT+
KnUwcNH5IXgLPWJ5Npl1l5bDQw40l0W9+I34C1p/EoeEA1I1io5c5/l5vHnfUb48
E2rUwG7V6MXK7ker/R51HVLjewJAvoaDZz8PR8tNR19uoUtlQurOu+Yo+esaIuyx
kdULeacaQfS6aui0JUfhkaMc8zwlZ0OI96O1sutTMtSi0xK9wQ5sQW7N0IbmjcmE
KMIEd4PGp6kLkPn/96j6DbtWVpcPTRXrkObTbGOs3mPA0N7NdZBanTjSWQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFC+4KAxst9s+BzlQ1TXW2McF2QuHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2FhNzY0
ZC1mNWFjLTRhY2YtYjJiZC05ZmRiNWM1NWFlNTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYWE3NjRk
LWY1YWMtNGFjZi1iMmJkLTlmZGI1YzU1YWU1MC8xL0w3Z29ER3kzMno0SE9WRFZO
ZGJZeHdYWkM0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwRh5MA0EAgACMAcDBQMqFBtAMA0GCSqGSIb3
DQEBCwUAA4IBAQA8PZI6qNA5ylYlHWOaVq78SwsE22W9/xwpGQuEi2kNs5+55JVI
KZc9RTkkUOhHr2e/wo3qHOKeU0NLsZOog/QeeJGCRNJoOi2ku0D+dzifyPPsG5A8
SES/O2LZLaAz2d1iRPq1ZfMPURVVBMOU+PW7oigZzxhfvOlujQz8OjzYYB4Vgj0U
/Joaf3Jrkgs+6l5o1RhQl+by4umynqiOwob8bmYWYsnjqt6CXhWlmXSEojJnxKUE
oPWxwHUQKuGvB2L/APwoE+9ZdWWDW5jrzTtyWbkaFXwKKHj4cuQuu1orZiT/l9pI
t2IuMNoyiIslTeM3QWDQlW6zu4KH92+jhLxK
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:19:32 2025 by rpki-client