Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
File: nzbQijzYpC9Goslt_XLtjO4nlHc.cer (raw, json)
Hash identifier: v/ki2D19Uh84YwwFYEnlYZBt3teA0UrS1DHYu0XDWW0=
Subject key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A0DD9D58B94EFB2D2A23B13CDF9B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50467
AS: 50994
AS: 60317
IP: 31.134.48.0/20
IP: 46.151.16.0/21
IP: 87.239.168.0/21
IP: 91.221.88.0/23
IP: 109.95.112.0/21
IP: 109.95.144.0/21
IP: 178.218.224.0/20
IP: 185.235.76.0/24
IP: 193.106.208.0/23
IP: 193.200.133.0/24
IP: 2a0c:db00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a0:dd:9d:58:b9:4e:fb:2d:2a:23:b1:3c:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:13:ee:44:b6:64:ec:aa:b2:13:4d:5e:1f:
23:65:7d:34:70:80:32:2d:f4:ea:60:79:3f:ed:95:
11:de:cc:e6:6d:74:d5:c4:07:79:23:62:59:5b:6c:
9b:03:40:6f:be:51:2a:f3:62:24:ed:0a:e4:1d:0d:
5e:f1:f7:41:10:84:8e:74:65:4e:8f:64:12:17:bf:
84:77:0b:24:a6:76:bb:0a:0f:c4:47:f1:48:1a:2a:
15:d4:57:6c:b3:da:13:a1:b2:d8:cf:b8:76:82:42:
f6:e9:d4:2d:88:27:ae:8d:15:d1:7e:2d:7e:10:d6:
64:20:54:75:63:2b:ad:c0:9d:60:97:0a:b2:a7:bc:
93:4c:57:84:52:ac:77:a2:ee:21:1c:94:24:d6:38:
a0:df:7e:49:e2:61:9e:a8:0d:68:99:59:a8:87:36:
34:6e:37:1b:8a:e4:e1:07:36:63:01:66:dc:75:27:
ab:ae:e5:d9:93:3f:7a:11:fa:7a:f1:3b:ad:e6:e9:
e2:35:ac:ea:17:35:86:96:ca:cf:ee:3f:56:83:e3:
e3:9f:d6:d2:de:94:0c:1b:f8:e6:a1:58:c0:20:25:
c3:2f:a6:58:2c:17:85:00:fd:f2:66:dc:38:1e:9f:
4e:7c:c4:b8:58:09:c8:dd:bc:ec:ce:72:78:36:78:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.48.0/20
46.151.16.0/21
87.239.168.0/21
91.221.88.0/23
109.95.112.0/21
109.95.144.0/21
178.218.224.0/20
185.235.76.0/24
193.106.208.0/23
193.200.133.0/24
IPv6:
2a0c:db00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50467
50994
60317
Signature Algorithm: sha256WithRSAEncryption
9e:45:a8:d3:99:ee:19:82:0d:30:ea:a5:50:f9:74:51:14:b0:
ea:b4:8d:32:11:a7:eb:4e:89:62:2d:5c:c1:e9:26:f4:11:c1:
b5:d3:36:70:e9:d4:21:cc:5c:8e:95:3e:76:72:c2:90:90:59:
9e:f3:02:5e:cb:6e:ef:4c:f3:28:60:9d:28:ce:9b:81:be:89:
38:52:06:e2:c0:08:49:35:5d:78:9b:cf:be:e1:f1:a2:9e:04:
07:7b:11:52:12:90:cc:6e:a3:0e:bf:48:bd:28:0a:e7:60:20:
e5:40:c5:37:c2:93:3d:8f:a3:03:fc:43:23:70:de:ca:b9:dd:
e1:19:f2:b3:20:e9:2c:5b:e3:94:e5:db:0c:91:86:f9:18:86:
23:f3:13:1a:e0:d2:4d:aa:0b:0e:d6:15:2a:ef:eb:96:ef:c1:
10:c7:76:a1:74:f1:a5:4a:d9:62:5a:9e:97:61:85:e7:01:e7:
3f:e8:1a:2a:04:b6:39:f0:dc:ff:20:fa:e2:f1:91:01:f1:87:
34:81:dd:f0:c4:44:83:52:9c:53:10:b3:20:9a:29:ce:7a:01:
c8:7d:58:04:77:18:59:34:5a:28:58:4b:63:97:ee:a2:00:13:
30:d3:e7:b8:d8:4a:39:9c:f1:3d:e2:a6:8b:cc:ea:8e:36:e6:
e8:3c:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:19:25 2025 by rpki-client