Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
File: YbG7REdxjxaz02Z10gXE3qQbugo.cer (raw, json)
Hash identifier: ZCpcNyt2NsLBlKyq1KUrRBascAg95SP21hjWLAAmw3M=
Subject key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191DC33158878FAE2FDA234CF1C9826467C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 10 Sep 2024 13:50:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209526
IP: 2.57.16.0/21
IP: 2.58.28.0/22
IP: 2.58.172.0/22
IP: 5.45.36.0/22
IP: 5.181.124.0 -- 5.181.135.255
IP: 5.182.108.0/22
IP: 5.252.68.0 -- 5.252.83.255
IP: 5.252.160.0/22
IP: 5.253.200.0/22
IP: 37.143.60.0/22
IP: 45.81.0.0/22
IP: 45.87.184.0/22
IP: 45.88.96.0/22
IP: 45.89.240.0/22
IP: 45.89.248.0/21
IP: 45.93.44.0/22
IP: 45.95.12.0/22
IP: 45.95.20.0/22
IP: 45.95.36.0/22
IP: 45.133.168.0 -- 45.133.179.255
IP: 45.137.28.0/22
IP: 45.137.116.0/22
IP: 45.137.124.0/22
IP: 45.137.132.0/22
IP: 45.137.156.0/22
IP: 45.139.180.0/22
IP: 45.231.206.0/23
IP: 85.208.72.0/22
IP: 85.209.176.0/22
IP: 89.19.44.0 -- 89.19.51.255
IP: 92.118.160.0/22
IP: 92.119.32.0/22
IP: 92.242.184.0/22
IP: 103.141.68.0/23
IP: 109.106.0.0/22
IP: 130.185.124.0/22
IP: 141.98.88.0/22
IP: 149.62.40.0/22
IP: 179.61.128.0/17
IP: 181.41.192.0/19
IP: 181.214.0.0/15
IP: 185.34.40.0/22
IP: 185.130.204.0/22
IP: 185.135.8.0/22
IP: 185.135.156.0/22
IP: 185.137.12.0/22
IP: 185.137.92.0/22
IP: 185.139.0.0/22
IP: 185.139.236.0/22
IP: 185.141.164.0/22
IP: 185.142.24.0/22
IP: 185.143.228.0/22
IP: 185.145.36.0/22
IP: 185.151.56.0/22
IP: 185.158.100.0 -- 185.158.107.255
IP: 185.158.132.0/22
IP: 185.158.148.0/22
IP: 185.170.40.0/22
IP: 185.170.56.0/22
IP: 185.172.56.0/22
IP: 185.172.64.0/22
IP: 185.173.24.0/22
IP: 185.173.32.0/22
IP: 185.174.60.0/22
IP: 191.96.0.0/16
IP: 191.101.0.0/16
IP: 193.7.200.0/22
IP: 193.31.40.0/22
IP: 193.58.104.0/22
IP: 193.107.208.0/22
IP: 194.53.140.0/22
IP: 194.110.12.0/22
IP: 194.110.242.0/24
IP: 213.109.168.0/22
IP: 2a00:d1a0::/32
IP: 2a03:a960::/29
IP: 2a03:fbc0::/29
IP: 2a06:2b80::/29
IP: 2a09:4b40::/29
IP: 2a0a:4e80::/29
IP: 2a0a:7a00::/29
IP: 2a0a:7e00::/29
IP: 2a0a:8600::/29
IP: 2a0a:8e00::/29
IP: 2a0a:9200::/29
IP: 2a0a:9600::/29
IP: 2a0a:9a00::/29
IP: 2a0a:9e00::/29
IP: 2a0a:9f00::/29
IP: 2a0a:a600::/29
IP: 2a0a:a700::/29
IP: 2a0a:b200::/29
IP: 2a0a:b600::/29
IP: 2a0a:ba00::/29
IP: 2a0a:be00::/29
IP: 2a0a:c600::/29
IP: 2a0a:ce00::/29
IP: 2a0a:d200::/29
IP: 2a0b:300::/29
IP: 2a0b:500::/29
IP: 2a0b:3300::/29
IP: 2a0b:3700::/29
IP: 2a0b:8700::/29
IP: 2a0c:fa40::/29
IP: 2a0d:5c0::/29
IP: 2a0d:4b40::/29
IP: 2a0d:4c40::/29
IP: 2a0e:1c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:33:15:88:78:fa:e2:fd:a2:34:cf:1c:98:26:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 13:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:da:79:63:5b:c6:cf:fa:55:17:11:e3:24:
38:c3:ce:d7:32:1a:5d:42:a5:d6:ea:cf:9d:43:1f:
be:82:a7:80:ca:e5:fe:4a:ef:b5:99:05:00:1b:6a:
88:95:c2:54:55:70:c6:5b:9c:1b:b4:3c:93:4d:e7:
af:9e:5a:6e:4c:6a:e3:71:5b:21:1a:4f:6f:84:94:
a0:28:a4:02:45:9f:31:84:c8:a8:92:17:99:5f:26:
54:73:bb:af:3b:2e:bc:41:b2:5c:a0:20:92:37:e6:
4d:fb:7f:10:7e:33:a3:5e:19:fe:53:b2:06:a2:a0:
5c:1e:93:c1:5a:7e:a9:b9:58:08:81:07:a3:43:2d:
ea:f3:94:38:c7:a2:82:8e:00:35:93:ca:53:51:38:
00:86:df:b0:bc:26:b7:59:f0:1d:e3:8b:c7:59:15:
5f:d6:5c:b6:94:a5:d0:d8:77:8c:ac:a4:f2:1d:b7:
3f:5a:a8:d0:20:c1:8e:05:34:39:05:0c:89:45:a1:
18:a8:2a:c9:fc:31:8f:3f:c1:e9:83:ae:df:23:c1:
48:62:ae:0e:0b:1c:3e:87:d4:2b:7c:66:e9:ad:32:
9c:71:fa:ed:b8:06:b9:60:b0:90:ff:c6:39:ef:2c:
6a:c2:b0:76:e3:3e:56:ab:46:3c:6d:5e:97:9c:2c:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.16.0/21
2.58.28.0/22
2.58.172.0/22
5.45.36.0/22
5.181.124.0-5.181.135.255
5.182.108.0/22
5.252.68.0-5.252.83.255
5.252.160.0/22
5.253.200.0/22
37.143.60.0/22
45.81.0.0/22
45.87.184.0/22
45.88.96.0/22
45.89.240.0/22
45.89.248.0/21
45.93.44.0/22
45.95.12.0/22
45.95.20.0/22
45.95.36.0/22
45.133.168.0-45.133.179.255
45.137.28.0/22
45.137.116.0/22
45.137.124.0/22
45.137.132.0/22
45.137.156.0/22
45.139.180.0/22
45.231.206.0/23
85.208.72.0/22
85.209.176.0/22
89.19.44.0-89.19.51.255
92.118.160.0/22
92.119.32.0/22
92.242.184.0/22
103.141.68.0/23
109.106.0.0/22
130.185.124.0/22
141.98.88.0/22
149.62.40.0/22
179.61.128.0/17
181.41.192.0/19
181.214.0.0/15
185.34.40.0/22
185.130.204.0/22
185.135.8.0/22
185.135.156.0/22
185.137.12.0/22
185.137.92.0/22
185.139.0.0/22
185.139.236.0/22
185.141.164.0/22
185.142.24.0/22
185.143.228.0/22
185.145.36.0/22
185.151.56.0/22
185.158.100.0-185.158.107.255
185.158.132.0/22
185.158.148.0/22
185.170.40.0/22
185.170.56.0/22
185.172.56.0/22
185.172.64.0/22
185.173.24.0/22
185.173.32.0/22
185.174.60.0/22
191.96.0.0/16
191.101.0.0/16
193.7.200.0/22
193.31.40.0/22
193.58.104.0/22
193.107.208.0/22
194.53.140.0/22
194.110.12.0/22
194.110.242.0/24
213.109.168.0/22
IPv6:
2a00:d1a0::/32
2a03:a960::/29
2a03:fbc0::/29
2a06:2b80::/29
2a09:4b40::/29
2a0a:4e80::/29
2a0a:7a00::/29
2a0a:7e00::/29
2a0a:8600::/29
2a0a:8e00::/29
2a0a:9200::/29
2a0a:9600::/29
2a0a:9a00::/29
2a0a:9e00::/29
2a0a:9f00::/29
2a0a:a600::/29
2a0a:a700::/29
2a0a:b200::/29
2a0a:b600::/29
2a0a:ba00::/29
2a0a:be00::/29
2a0a:c600::/29
2a0a:ce00::/29
2a0a:d200::/29
2a0b:300::/29
2a0b:500::/29
2a0b:3300::/29
2a0b:3700::/29
2a0b:8700::/29
2a0c:fa40::/29
2a0d:5c0::/29
2a0d:4b40::/29
2a0d:4c40::/29
2a0e:1c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209526
Signature Algorithm: sha256WithRSAEncryption
82:2a:bd:cd:5e:42:e2:3f:e5:69:7c:67:3e:11:ed:82:6b:cc:
59:d2:60:5a:96:0f:c9:9b:4e:28:a6:c7:07:50:5f:22:42:bb:
62:29:59:a6:51:90:72:1e:f3:7b:30:d3:2a:1a:d3:cd:5d:77:
92:f8:a8:10:4a:48:68:06:ca:5f:31:c5:e2:91:3d:df:b9:88:
62:2b:94:b2:17:c0:b0:2c:36:4f:d4:fa:6d:47:2a:21:7b:b5:
14:16:36:78:bd:60:f7:e9:bc:ea:79:5f:5a:74:6a:fe:49:8e:
cb:f9:f6:ee:73:17:b7:9a:24:58:15:ec:8c:43:a4:6c:d9:43:
cb:d1:5c:b7:12:da:3f:7d:4b:6b:ad:90:4b:d3:d0:84:77:e0:
e7:4e:c7:64:9c:13:ac:74:91:96:cf:70:e2:85:a1:5c:12:a1:
b3:f2:f0:37:0c:43:f9:5e:04:93:82:49:fd:92:83:b8:ec:b8:
f0:a8:97:2d:6d:c4:9c:44:08:52:2c:76:b8:9b:02:69:72:64:
d2:c2:75:d7:a5:f9:c6:3a:cf:44:29:40:2f:05:24:c5:ac:07:
8d:a9:65:3b:10:2b:2c:b4:66:37:03:67:96:ec:60:ad:47:78:
3b:d7:0a:96:ec:30:32:15:fb:bd:08:aa:57:1e:75:7a:c2:d7:
cc:bd:e0:75
-----BEGIN CERTIFICATE-----
MIIIjTCCB3WgAwIBAgISAZHcMxWIePri/aI0zxyYJkZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTEwMTM1MDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWIxYmI0NDQ3NzE4ZjE2YjNkMzY2NzVkMjA1YzRkZWE0MWJiYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+raeWNbxs/6VRcR4yQ4w87XMhpd
QqXW6s+dQx++gqeAyuX+Su+1mQUAG2qIlcJUVXDGW5wbtDyTTeevnlpuTGrjcVsh
Gk9vhJSgKKQCRZ8xhMiokheZXyZUc7uvOy68QbJcoCCSN+ZN+38QfjOjXhn+U7IG
oqBcHpPBWn6puVgIgQejQy3q85Q4x6KCjgA1k8pTUTgAht+wvCa3WfAd44vHWRVf
1ly2lKXQ2HeMrKTyHbc/WqjQIMGOBTQ5BQyJRaEYqCrJ/DGPP8Hpg67fI8FIYq4O
Cxw+h9QrfGbprTKccfrtuAa5YLCQ/8Y57yxqwrB24z5Wq0Y8bV6XnCxT9wIDAQAB
o4IFmTCCBZUwHQYDVR0OBBYEFGGxu0RHcY8Ws9NmddIFxN6kG7oKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1
OWU3LTJhODMtNDNkMS05YWExLTU4NDE3YWJhYzRiNi8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTM3
NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFjNGI2LzEvNjFCMUJCNDQ0Nzcx
OEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjCCAvoGCCsGAQUFBwEHAQH/BIIC6TCCAuUwggHp
BAIAATCCAeEDBAMCORADBAICOhwDBAICOqwDBAIFLSQwDAMEAgW1fAMEAwW1gAME
AgW2bDAMAwQCBfxEAwQCBfxQAwQCBfygAwQCBf3IAwQCJY88AwQCLVEAAwQCLVe4
AwQCLVhgAwQCLVnwAwQDLVn4AwQCLV0sAwQCLV8MAwQCLV8UAwQCLV8kMAwDBAMt
hagDBAIthbADBAItiRwDBAItiXQDBAItiXwDBAItiYQDBAItiZwDBAIti7QDBAEt
584DBAJV0EgDBAJV0bAwDAMEAlkTLAMEAlkTMAMEAlx2oAMEAlx3IAMEAlzyuAME
AWeNRAMEAm1qAAMEAoK5fAMEAo1iWAMEApU+KAMEB7M9gAMEBbUpwAMDAbXWAwQC
uSIoAwQCuYLMAwQCuYcIAwQCuYecAwQCuYkMAwQCuYlcAwQCuYsAAwQCuYvsAwQC
uY2kAwQCuY4YAwQCuY/kAwQCuZEkAwQCuZc4MAwDBAK5nmQDBAK5nmgDBAK5noQD
BAK5npQDBAK5qigDBAK5qjgDBAK5rDgDBAK5rEADBAK5rRgDBAK5rSADBAK5rjwD
AwC/YAMDAL9lAwQCwQfIAwQCwR8oAwQCwTpoAwQCwWvQAwQCwjWMAwQCwm4MAwQA
wm7yAwQC1W2oMIH1BAIAAjCB7gMFACoA0aADBQMqA6lgAwUDKgP7wAMFAyoGK4AD
BQMqCUtAAwUDKgpOgAMFAyoKegADBQMqCn4AAwUDKgqGAAMFAyoKjgADBQMqCpIA
AwUDKgqWAAMFAyoKmgADBQMqCp4AAwUDKgqfAAMFAyoKpgADBQMqCqcAAwUDKgqy
AAMFAyoKtgADBQMqCroAAwUDKgq+AAMFAyoKxgADBQMqCs4AAwUDKgrSAAMFAyoL
AwADBQMqCwUAAwUDKgszAAMFAyoLNwADBQMqC4cAAwUDKgz6QAMFAyoNBcADBQMq
DUtAAwUDKg1MQAMFAyoOHAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzJ2MA0G
CSqGSIb3DQEBCwUAA4IBAQCCKr3NXkLiP+VpfGc+Ee2Ca8xZ0mBalg/Jm04opscH
UF8iQrtiKVmmUZByHvN7MNMqGtPNXXeS+KgQSkhoBspfMcXikT3fuYhiK5SyF8Cw
LDZP1PptRyohe7UUFjZ4vWD36bzqeV9adGr+SY7L+fbucxe3miRYFeyMQ6Rs2UPL
0Vy3Eto/fUtrrZBL09CEd+DnTsdknBOsdJGWz3DihaFcEqGz8vA3DEP5XgSTgkn9
koO47LjwqJctbcScRAhSLHa4mwJpcmTSwnXXpfnGOs9EKUAvBSTFrAeNqWU7ECss
tGY3A2eW7GCtR3g71wqW7DAyFfu9CKpXHnV6wtfMveB1
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:27:42 2024 by rpki-client on console-fra.rpki-client.org