Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
File: p0FyV8tjZv81cjOybSXdWIfaifs.cer (raw, json)
Hash identifier: kfp2uNsWn6gyMYGiZ2DYfR5eRccTmV47zUHV8dxaqiA=
Subject key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9DB20B25B5C6242FA88E0CDF74F1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199587
IP: 185.10.52.0/22
IP: 2a03:5ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:20:b2:5b:5c:62:42:fa:88:e0:cd:f7:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:4d:5e:5c:42:d6:32:7b:8c:60:b3:67:55:
e6:91:76:48:ae:0c:e6:12:13:15:85:70:8c:f7:28:
39:b8:92:74:5d:6f:ce:10:85:99:29:40:8a:99:a7:
49:b0:73:c6:3a:10:86:8f:1b:76:a3:ca:77:3f:83:
7d:67:ce:6c:15:89:66:c2:6a:b9:ee:8d:88:cb:02:
53:9c:a4:db:1a:f6:9c:c7:ce:d9:e9:31:0e:fc:99:
a9:ab:35:76:8d:28:8d:8f:e5:0c:a4:98:4d:5a:9e:
f9:84:1b:b2:5c:5c:55:f8:82:37:58:b2:39:a0:19:
7a:07:1c:c4:da:88:dd:0a:19:1c:7f:ee:fc:e7:d0:
2d:22:fb:2c:78:79:49:95:64:17:32:55:c6:ac:d3:
a8:4b:a5:38:6c:2b:f6:b8:f8:e0:cb:42:8c:76:3c:
e0:fa:5b:94:f6:94:ce:b2:d4:9a:09:bb:0c:ce:31:
ed:0b:67:6c:19:6e:c5:3d:85:99:7e:ab:10:33:ba:
5f:38:77:dc:37:17:37:2e:4c:b3:95:8d:3d:3c:29:
bd:2a:cc:71:59:58:ed:4f:27:9c:29:9b:db:24:68:
3d:11:b8:48:d6:fc:af:4e:37:64:e5:73:96:69:ca:
0e:07:29:a1:15:b2:d6:ee:a6:1b:a7:13:7c:b6:3b:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.52.0/22
IPv6:
2a03:5ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199587
Signature Algorithm: sha256WithRSAEncryption
80:07:96:52:c0:75:0d:c6:4f:c3:bb:34:56:8c:25:36:eb:54:
ff:1f:7a:0e:06:01:fb:f8:0a:19:a8:71:e7:e0:aa:f5:5e:be:
b7:46:32:12:e4:4c:08:ac:68:2d:52:ac:ce:2b:91:1f:de:1e:
da:42:fd:71:a0:50:4f:f3:1a:2f:0a:44:53:8b:d1:b1:8a:c6:
6f:d4:c6:1d:c2:1a:2e:a9:1d:4d:84:b0:5e:df:1f:31:53:80:
15:b3:cd:63:05:00:a0:74:cd:e0:2f:bf:bf:cb:2a:1b:57:cd:
fa:a2:34:1b:56:c1:7f:af:6d:03:68:6c:c6:ce:cb:f5:e7:77:
19:ba:97:4f:4d:d2:f4:7f:99:42:e9:29:d2:07:16:98:ea:50:
a0:80:f9:ed:47:b0:76:63:cf:cd:e1:7a:d7:8a:57:d8:6c:7c:
04:e2:f9:c8:30:8c:d8:d4:54:46:89:44:a3:44:2e:b6:9c:0a:
1f:86:dc:c1:61:9b:65:1d:be:ff:8e:b8:af:10:1e:e9:1c:98:
51:c0:ea:97:20:a4:2c:a9:47:5b:b8:fa:60:fb:2d:9e:36:c4:
13:61:8b:89:da:72:c3:fb:8f:c1:48:52:70:64:85:2d:38:4a:
dc:08:c1:ef:30:78:80:03:9e:ea:5d:46:11:75:d0:15:45:a7:
62:61:cb:23
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2dsgsltcYkL6iODN908dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzQxNzI1N2NiNjM2NmZmMzU3MjMzYjI2ZDI1ZGQ1ODg3ZGE4OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n9NXlxC1jJ7jGCzZ1XmkXZIrgzm
EhMVhXCM9yg5uJJ0XW/OEIWZKUCKmadJsHPGOhCGjxt2o8p3P4N9Z85sFYlmwmq5
7o2IywJTnKTbGvacx87Z6TEO/JmpqzV2jSiNj+UMpJhNWp75hBuyXFxV+II3WLI5
oBl6BxzE2ojdChkcf+7859AtIvsseHlJlWQXMlXGrNOoS6U4bCv2uPjgy0KMdjzg
+luU9pTOstSaCbsMzjHtC2dsGW7FPYWZfqsQM7pfOHfcNxc3LkyzlY09PCm9Ksxx
WVjtTyecKZvbJGg9EbhI1vyvTjdk5XOWacoOBymhFbLW7qYbpxN8tjv4/wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKdBclfLY2b/NXIzsm0l3ViH2on7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2UyYWRm
Zi1kMTA2LTRhYjgtYTk5NC1mZjhmZTI1NTI2YzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvZTJhZGZm
LWQxMDYtNGFiOC1hOTk0LWZmOGZlMjU1MjZjNi8xL3AwRnlWOHRqWnY4MWNqT3li
U1hkV0lmYWlmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQo0MA0EAgACMAcDBQAqA1rAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMLozANBgkqhkiG9w0BAQsFAAOCAQEAgAeWUsB1DcZP
w7s0VowlNutU/x96DgYB+/gKGahx5+Cq9V6+t0YyEuRMCKxoLVKsziuRH94e2kL9
caBQT/MaLwpEU4vRsYrGb9TGHcIaLqkdTYSwXt8fMVOAFbPNYwUAoHTN4C+/v8sq
G1fN+qI0G1bBf69tA2hsxs7L9ed3GbqXT03S9H+ZQukp0gcWmOpQoID57UewdmPP
zeF614pX2Gx8BOL5yDCM2NRURolEo0QutpwKH4bcwWGbZR2+/464rxAe6RyYUcDq
lyCkLKlHW7j6YPstnjbEE2GLidpyw/uPwUhScGSFLThK3AjB7zB4gAOe6l1GEXXQ
FUWnYmHLIw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:08 2025 by rpki-client