Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iLFUzheYuaxTDyB_LasGo606KWY.cer
File: iLFUzheYuaxTDyB_LasGo606KWY.cer (raw, json)
Hash identifier: wBPuy29nzfe5JW4bUrxbwVzzMoxWw754H/5rfkehi90=
Subject key identifier: 88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01983C74B2CFA3A4119E7197C1BF165CE24B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Jul 2025 12:42:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 74.122.239.0/24
IP: 81.27.74.0/24
IP: 195.210.33.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:74:b2:cf:a3:a4:11:9e:71:97:c1:bf:16:5c:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 24 12:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88b154ce1798b9ac530f207f2dab06a3ad3a2966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:5a:de:db:96:30:89:02:0b:8e:2e:52:ae:
90:95:80:40:7a:52:a5:f0:00:6a:b8:ae:84:58:26:
09:e0:07:3e:1f:3b:4f:29:76:8b:b5:a5:f3:fd:a3:
b3:e0:02:f9:05:2f:1b:d2:d5:9d:9d:16:ad:ad:0e:
01:c0:7d:cd:e8:e4:bb:c9:e1:e4:d0:2c:fd:44:05:
a5:9f:42:df:5d:e7:6a:70:4a:4e:3f:9e:e2:48:4e:
17:56:d1:79:50:49:47:07:ef:c6:b1:5f:fc:10:d6:
0a:ed:e3:2d:ea:0b:d4:74:af:df:fa:fd:a0:f4:17:
6b:76:e6:11:73:6f:44:6b:c8:57:78:b3:5d:ab:6e:
ff:4d:2e:20:aa:f4:87:7f:68:30:2b:04:f4:03:4e:
54:a4:c4:b2:cd:ac:e5:db:80:e7:93:0f:0c:24:4b:
16:1c:e3:3f:e5:95:91:97:03:0f:6a:9b:4f:98:f4:
e1:67:df:d6:9e:1f:d7:b8:96:85:1e:c4:a0:a5:d3:
7f:e0:29:e5:ac:a5:c7:e5:ca:03:06:62:7f:25:d5:
7b:a7:b1:81:0c:6d:63:11:b3:7f:bd:d0:9b:e5:63:
17:40:e7:83:cf:ef:69:c0:e4:25:e8:49:02:b7:ca:
b3:83:e2:78:df:56:0a:ff:e0:78:35:59:52:b3:c2:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:54:CE:17:98:B9:AC:53:0F:20:7F:2D:AB:06:A3:AD:3A:29:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b23203-7d89-4bf4-b6b5-ab43c008547f/1/iLFUzheYuaxTDyB_LasGo606KWY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.122.239.0/24
81.27.74.0/24
195.210.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6d:c6:16:9f:bd:e1:44:ff:93:a5:0f:a7:77:bc:3b:e0:da:
db:47:8d:f5:08:ae:8f:c0:b9:cc:3d:af:55:3f:2f:39:5b:6d:
7f:fd:ee:ce:16:cd:f5:50:b2:79:cc:a3:bb:a8:46:74:2a:27:
79:ea:71:ac:0e:ee:00:14:00:ab:9c:83:dc:54:58:26:43:eb:
c4:3b:3f:f8:c0:52:4c:6d:9e:c7:b1:3f:83:7c:b3:db:90:93:
ee:e1:21:bf:55:5a:31:2a:10:b6:81:27:5c:cd:4c:34:71:40:
9f:a6:0f:5b:7b:eb:86:3a:09:3e:2a:0c:aa:eb:7e:a0:3d:d3:
38:a7:a8:f3:bb:08:15:2d:34:ef:63:63:3a:32:44:8b:f3:2f:
8a:49:8b:5b:c8:ee:e1:2d:d4:ae:e3:97:8c:d1:5c:2f:e6:7f:
49:ec:15:be:4d:52:e7:d2:09:42:87:fe:13:ae:f1:60:f1:7b:
a1:ba:17:06:32:f5:85:36:e6:5d:9c:ad:bb:5f:bd:1d:ab:8a:
57:58:54:b2:62:3e:76:47:53:16:f6:93:6d:d6:a2:1a:89:b4:
52:bf:27:4f:05:5f:e5:4f:8e:81:91:0b:0f:64:0a:02:3b:90:
57:5b:21:ba:fe:d0:d6:3d:33:cc:b2:af:f6:b3:f1:d2:a7:e0:
16:5f:74:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZg8dLLPo6QRnnGXwb8WXOJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzI0MTI0MjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGIxNTRjZTE3OThiOWFjNTMwZjIwN2YyZGFiMDZhM2FkM2EyOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdxa3tuWMIkCC44uUq6QlYBAelKl
8ABquK6EWCYJ4Ac+HztPKXaLtaXz/aOz4AL5BS8b0tWdnRatrQ4BwH3N6OS7yeHk
0Cz9RAWln0LfXedqcEpOP57iSE4XVtF5UElHB+/GsV/8ENYK7eMt6gvUdK/f+v2g
9BdrduYRc29Ea8hXeLNdq27/TS4gqvSHf2gwKwT0A05UpMSyzazl24Dnkw8MJEsW
HOM/5ZWRlwMPaptPmPThZ9/Wnh/XuJaFHsSgpdN/4CnlrKXH5coDBmJ/JdV7p7GB
DG1jEbN/vdCb5WMXQOeDz+9pwOQl6EkCt8qzg+J431YK/+B4NVlSs8J6+QIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFIixVM4XmLmsUw8gfy2rBqOtOilmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2IyMzIw
My03ZDg5LTRiZjQtYjZiNS1hYjQzYzAwODU0N2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjIzMjAz
LTdkODktNGJmNC1iNmI1LWFiNDNjMDA4NTQ3Zi8xL2lMRlV6aGVZdWF4VER5Ql9M
YXNHbzYwNktXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQASnrvAwQAURtKAwQAw9IhMA0GCSqGSIb3DQEB
CwUAA4IBAQChbcYWn73hRP+TpQ+nd7w74NrbR431CK6PwLnMPa9VPy85W21//e7O
Fs31ULJ5zKO7qEZ0Kid56nGsDu4AFACrnIPcVFgmQ+vEOz/4wFJMbZ7HsT+DfLPb
kJPu4SG/VVoxKhC2gSdczUw0cUCfpg9be+uGOgk+Kgyq636gPdM4p6jzuwgVLTTv
Y2M6MkSL8y+KSYtbyO7hLdSu45eM0Vwv5n9J7BW+TVLn0glCh/4TrvFg8XuhuhcG
MvWFNuZdnK27X70dq4pXWFSyYj52R1MW9pNt1qIaibRSvydPBV/lT46BkQsPZAoC
O5BXWyG6/tDWPTPMsq/2s/HSp+AWX3Qc
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:16 2025 by rpki-client