Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.cer (raw, json)
Hash identifier: OY8qFWOHl/ShmNSEonw15aDCz6BOWBXmJXiFuz7En3Q=
Subject key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AD30237760F4ECC807E11402B993
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204996
IP: 45.67.8.0/22
IP: 185.170.248.0/22
IP: 193.30.134.0/24
IP: 193.30.162.0/24
IP: 193.30.165.0 -- 193.30.166.255
IP: 2a0a:ed00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ad:30:23:77:60:f4:ec:c8:07:e1:14:02:b9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:b4:82:40:5b:5b:84:25:25:ba:89:8c:a2:
1d:d1:cf:a9:21:79:cc:eb:1b:43:cc:ac:a7:43:03:
ca:57:91:27:ba:d1:6a:e8:ca:06:e6:08:4c:ef:26:
46:22:e3:1f:86:d9:e7:42:7f:9b:4b:70:34:1c:85:
37:77:b0:82:8a:90:57:b8:7a:0c:0d:b3:2c:92:f3:
79:4e:5c:c7:46:56:b9:9a:40:a5:cb:5b:c1:a8:16:
f5:8d:04:7f:28:d7:a8:5b:42:2c:d9:6b:11:93:a2:
f7:bc:74:06:a3:6c:3a:43:ea:f5:51:bd:fa:94:46:
10:06:b7:06:09:4d:cf:a2:75:6f:cd:02:d0:69:99:
51:40:e3:a4:a2:d7:a3:bc:d5:77:8d:4e:5a:24:f9:
d2:7f:8c:43:54:00:5b:08:bc:61:d8:68:7c:48:b9:
bd:82:c9:a6:4d:ff:83:73:fd:db:8b:c7:33:7e:4d:
f5:55:e3:df:c6:96:97:ae:8a:f6:87:b5:ed:6d:ed:
79:ff:b6:50:2b:13:90:c5:f6:24:89:b7:17:dc:48:
2b:54:27:78:4e:f3:01:0a:0a:93:37:b0:a1:a5:fb:
6e:54:a0:0f:dc:49:70:a4:a4:4f:89:bc:6d:2a:cf:
66:90:09:04:a1:a3:fc:3d:c5:d4:39:f8:68:13:f9:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.8.0/22
185.170.248.0/22
193.30.134.0/24
193.30.162.0/24
193.30.165.0-193.30.166.255
IPv6:
2a0a:ed00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204996
Signature Algorithm: sha256WithRSAEncryption
11:d1:78:79:73:5e:cc:fc:cc:97:bb:7c:d3:36:d5:be:b1:97:
06:06:39:99:db:07:60:1f:f3:b2:35:9b:0c:0c:ec:b7:b0:bd:
78:75:0b:89:c5:89:2f:e1:c3:23:6c:aa:b4:96:ab:0b:ad:87:
87:18:10:09:7e:a1:08:2a:47:80:7e:40:53:af:4c:ee:b6:33:
0d:66:54:8f:a0:e4:d5:b9:04:e4:a3:56:3d:6a:f0:a9:03:3b:
cd:64:90:c8:b8:cf:4b:80:e4:b7:1d:c8:1e:77:7d:3b:5a:56:
d4:88:b0:50:f6:44:5e:11:f3:d0:53:7b:72:bc:0a:ab:dd:e7:
e9:ad:52:c3:bf:47:77:6e:79:fa:fa:a8:e6:ca:a6:23:61:2a:
06:61:fd:54:31:62:22:d7:60:54:0f:a8:a2:a7:36:a3:8b:a1:
fc:a3:9f:2d:61:20:98:1c:3c:95:d4:de:23:42:00:74:4d:ed:
aa:4d:0a:7c:73:42:3b:4c:41:91:b3:3b:2a:1f:fa:97:bf:e3:
ac:4f:f9:7f:e4:06:3a:43:27:2b:95:78:b6:b7:7d:de:e7:9f:
ea:ca:28:8f:88:21:8a:5a:13:13:52:74:66:91:42:a0:a7:fc:
65:61:2d:72:fa:4d:88:c6:eb:49:94:25:91:04:a2:71:72:65:
00:f9:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:25:16 2025 by rpki-client