Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
File: j0znci-ZB12Uc4t-YQcEASaes9Y.cer (raw, json)
Hash identifier: FwtHlYmWsTmFblFQsz/R3zPouEk8XQd79OLyzZBm6/8=
Subject key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420685947B83431A193B9F2C926700986
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.192.172.0/22
IP: 77.83.252.0/22
IP: 85.209.16.0/22
IP: 185.181.0.0/22
IP: 193.163.127.0/24
IP: 212.102.114.0/24
IP: 2a06:fe00::/29
IP: 2a09:9f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:59:47:b8:34:31:a1:93:b9:f2:c9:26:70:09:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:3c:58:db:88:1a:11:91:33:e7:cd:55:8e:
2d:88:5c:67:14:00:28:1d:c1:25:8b:37:39:c3:c3:
fd:6f:64:54:90:7e:9d:b7:a8:b2:9f:70:9d:7d:1e:
fe:fd:3c:ac:17:1c:b1:1a:c6:d4:61:07:19:b3:45:
99:1f:e9:9f:f1:2d:41:5e:ba:37:e7:82:83:15:8e:
b0:bf:0d:ca:8b:b7:4b:06:ff:46:94:b3:36:57:a9:
97:f5:51:d9:76:11:6d:93:61:70:fc:92:c7:c5:e3:
45:d6:bf:3a:ea:94:6d:6b:6d:56:44:b4:58:21:dd:
a9:af:ba:5a:13:44:e2:08:3d:0d:07:af:92:81:7d:
12:fe:42:d2:b5:86:8f:57:ec:b3:e5:9d:1f:c2:69:
e4:43:24:45:69:66:a1:bb:ff:28:8f:3d:63:74:1b:
ef:c1:f0:e6:64:3c:dd:21:75:97:90:4d:a5:98:f3:
ca:31:73:8c:2c:02:82:b3:85:d7:a5:a0:d8:1d:79:
a7:72:56:9d:f6:75:b7:fa:a0:81:cb:a9:da:1c:a8:
aa:74:64:0f:e0:88:6f:f0:4f:76:41:5b:c3:96:87:
a9:7e:64:b1:0c:72:72:75:c3:24:a7:56:3d:e6:0c:
13:9d:f3:be:cb:a0:52:30:57:0d:d2:fc:cc:20:41:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.172.0/22
77.83.252.0/22
85.209.16.0/22
185.181.0.0/22
193.163.127.0/24
212.102.114.0/24
IPv6:
2a06:fe00::/29
2a09:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
08:76:1e:3b:5f:d8:8c:d4:9c:58:9f:aa:c4:bf:37:c7:52:e0:
e2:24:76:ea:4f:4a:e2:36:f5:cf:57:1d:93:ec:ea:28:7e:e4:
09:5e:e0:ec:06:8a:aa:6d:16:a7:a2:5c:32:0a:36:47:59:31:
63:3f:09:52:54:a4:50:95:bd:aa:72:04:6c:75:71:41:bf:6e:
77:f7:68:f0:f0:34:1f:79:b5:31:a8:24:6b:6e:e4:69:d2:38:
dc:85:19:32:ea:f1:61:d2:37:99:9d:94:91:2f:b6:d8:ce:01:
c7:d9:29:f9:2f:29:5c:6e:5f:46:2e:be:a4:2f:48:10:35:be:
53:30:f3:b7:e8:23:36:ff:d3:af:c7:82:a1:bd:6c:c6:54:d2:
ed:bd:2c:cf:8b:d1:8d:dc:22:f9:dd:45:b4:27:1a:1b:3e:c5:
03:0e:6c:44:27:2a:27:94:02:85:69:17:0a:f7:23:e4:13:35:
f3:d9:9a:6b:7f:eb:51:48:98:16:19:ab:d0:60:dc:04:2c:65:
52:72:13:25:eb:05:a7:4a:f7:05:b1:d3:03:f3:65:01:22:b1:
31:93:78:73:a3:e2:7d:c2:15:04:d7:8e:ed:3b:dd:f2:bc:62:
7c:da:b5:07:61:e6:85:6c:ad:e4:de:47:45:f4:64:96:08:d9:
8f:7c:91:fc
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAZQgaFlHuDQxoZO58skmcAmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjRjZTc3MjJmOTkwNzVkOTQ3MzhiN2U2MTA3MDQwMTI2OWViM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a08WNuIGhGRM+fNVY4tiFxnFAAo
HcElizc5w8P9b2RUkH6dt6iyn3CdfR7+/TysFxyxGsbUYQcZs0WZH+mf8S1BXro3
54KDFY6wvw3Ki7dLBv9GlLM2V6mX9VHZdhFtk2Fw/JLHxeNF1r866pRta21WRLRY
Id2pr7paE0TiCD0NB6+SgX0S/kLStYaPV+yz5Z0fwmnkQyRFaWahu/8ojz1jdBvv
wfDmZDzdIXWXkE2lmPPKMXOMLAKCs4XXpaDYHXmnclad9nW3+qCBy6naHKiqdGQP
4Ihv8E92QVvDloepfmSxDHJydcMkp1Y95gwTnfO+y6BSMFcN0vzMIEHHxQIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFI9M53IvmQddlHOLfmEHBAEmnrPWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhOTc3
MTE1LTUxMTAtNDI1Ny05NGVmLTRkMmI0Mzg4NDA0MC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5
NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvOEY0Q0U3NzIyRjk5
MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wREMEIwKgQCAAEwJAME
Aj7ArAMEAk1T/AMEAlXREAMEArm1AAMEAMGjfwMEANRmcjAUBAIAAjAOAwUDKgb+
AAMFAyoJn4AwDQYJKoZIhvcNAQELBQADggEBAAh2Hjtf2IzUnFifqsS/N8dS4OIk
dupPSuI29c9XHZPs6ih+5Ale4OwGiqptFqeiXDIKNkdZMWM/CVJUpFCVvapyBGx1
cUG/bnf3aPDwNB95tTGoJGtu5GnSONyFGTLq8WHSN5mdlJEvttjOAcfZKfkvKVxu
X0YuvqQvSBA1vlMw87foIzb/06/HgqG9bMZU0u29LM+L0Y3cIvndRbQnGhs+xQMO
bEQnKieUAoVpFwr3I+QTNfPZmmt/61FImBYZq9Bg3AQsZVJyEyXrBadK9wWx0wPz
ZQEisTGTeHOj4n3CFQTXju073fK8YnzatQdh5oVsreTeR0X0ZJYI2Y98kfw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:12:18 2025 by rpki-client