Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
File: ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer (raw, json)
Hash identifier: cCvyZ9r3JgL/51aycXhEKY0JtQWP8duD+7KqOeHgaEE=
Subject key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDCDA92DB5B69E421776B601171993
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 33923
IP: 79.139.16.0/20
IP: 94.246.128.0/18
IP: 185.48.8.0/22
IP: 185.183.236.0/22
IP: 194.6.246.0/24
IP: 194.145.184.0/22
IP: 2a00:1a40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:a9:2d:b5:b6:9e:42:17:76:b6:01:17:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:ca:d4:4b:9a:3e:30:40:ff:fc:0a:5c:8d:
aa:a4:d9:8f:fc:1b:31:a2:f3:d5:eb:1e:6a:df:a4:
2e:3c:d5:e5:71:b6:44:55:90:eb:7a:ec:c9:a0:dc:
0b:f6:fb:2d:97:94:96:e2:2b:2c:50:ec:bb:11:31:
20:9c:e3:33:06:23:b4:a3:3e:33:11:a4:bf:9d:3b:
55:f0:d2:62:ca:73:91:21:1c:e2:29:ed:79:71:88:
28:0c:27:b9:26:6f:fb:69:33:22:52:42:78:12:ca:
b5:bf:b9:83:ba:36:44:ba:18:70:a1:d1:99:dd:15:
c1:35:db:a8:70:39:79:f7:e4:d5:40:5b:f0:6c:07:
6b:e9:09:9a:3b:3e:7f:7c:ca:a7:af:94:b7:d8:d7:
37:5b:c4:19:f2:76:67:56:c8:3d:1b:2a:61:62:56:
80:18:41:46:f8:20:f4:7b:8e:fe:f1:e2:87:e2:fd:
45:b2:80:af:da:29:22:d1:38:2f:74:2b:d3:03:67:
4c:81:fc:a2:24:b5:85:53:05:c1:aa:ca:ac:75:96:
78:aa:24:94:a4:d6:6f:08:2b:d8:c8:4c:75:3c:8b:
9d:63:17:bb:3a:85:6f:cb:e6:38:32:ae:ab:88:57:
49:39:dd:5d:1b:c3:c2:fc:9f:ba:f6:90:86:d5:43:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.16.0/20
94.246.128.0/18
185.48.8.0/22
185.183.236.0/22
194.6.246.0/24
194.145.184.0/22
IPv6:
2a00:1a40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33923
Signature Algorithm: sha256WithRSAEncryption
13:84:3c:b4:1f:cb:1b:4e:71:f1:cd:28:a1:96:df:50:d2:3c:
f4:54:fd:d7:03:47:dd:8b:f6:f8:ac:96:45:30:d3:40:b3:18:
ad:34:5c:01:ac:64:21:e9:62:e0:5e:39:66:e7:fb:e7:38:0f:
b9:bb:eb:29:26:95:8a:ad:4b:b4:36:bb:aa:a8:fa:9d:0b:e6:
bc:6a:9e:94:d6:34:61:c2:71:3f:18:64:9c:64:ac:0b:a7:a9:
40:4b:eb:68:ef:c5:8b:d2:94:07:a5:f7:a9:61:fb:89:d5:2c:
5a:bd:a8:d9:93:89:47:d6:c6:b7:fa:72:61:e3:eb:64:bc:fb:
92:62:ec:f0:87:d8:eb:c2:2a:0e:81:85:0e:23:99:51:2d:ad:
8b:c0:3d:07:c6:ff:a8:f1:1b:78:85:cd:71:cb:4b:4a:88:c7:
5a:8f:c3:f6:04:9c:ad:9d:cd:78:a0:18:85:a5:63:69:e9:ce:
de:99:74:84:d3:a4:58:d0:2d:c6:4c:41:d7:e8:dc:12:64:f1:
82:42:80:e2:11:48:d1:a9:be:91:ac:42:b6:b7:90:f4:53:37:
d3:17:54:92:a7:2f:1d:aa:60:37:8d:51:a7:74:57:5e:4d:ff:
c5:c4:40:8e:6d:87:fb:9f:07:56:9d:06:43:aa:67:b6:67:b2:
45:76:6e:b5
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZQl/c2pLbW2nkIXdrYBFxmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI4N2IzYjA5Y2NiNjlhNmRlMjA0NjhlOTBlY2JiMThmNWVjYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEbK1EuaPjBA//wKXI2qpNmP/Bsx
ovPV6x5q36QuPNXlcbZEVZDreuzJoNwL9vstl5SW4issUOy7ETEgnOMzBiO0oz4z
EaS/nTtV8NJiynORIRziKe15cYgoDCe5Jm/7aTMiUkJ4Esq1v7mDujZEuhhwodGZ
3RXBNduocDl59+TVQFvwbAdr6QmaOz5/fMqnr5S32Nc3W8QZ8nZnVsg9GyphYlaA
GEFG+CD0e47+8eKH4v1FsoCv2iki0TgvdCvTA2dMgfyiJLWFUwXBqsqsdZZ4qiSU
pNZvCCvYyEx1PIudYxe7OoVvy+Y4Mq6riFdJOd1dG8PC/J+69pCG1UNlqQIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFLm4ezsJzLaabeIEaOkOy7GPXsu2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzAwZGRh
Zi0zYmU1LTQyMGQtOTE5Zi0zYjRjYjk3NWE5YmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMDBkZGFm
LTNiZTUtNDIwZC05MTlmLTNiNGNiOTc1YTliYy8xL3ViaDdPd25NdHBwdDRnUm82
UTdMc1k5ZXk3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQET4sQAwQGXvaAAwQCuTAIAwQCubfsAwQAwgb2
AwQCwpG4MA0EAgACMAcDBQAqABpAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCE
gzANBgkqhkiG9w0BAQsFAAOCAQEAE4Q8tB/LG05x8c0ooZbfUNI89FT91wNH3Yv2
+KyWRTDTQLMYrTRcAaxkIeli4F45Zuf75zgPubvrKSaViq1LtDa7qqj6nQvmvGqe
lNY0YcJxPxhknGSsC6epQEvraO/Fi9KUB6X3qWH7idUsWr2o2ZOJR9bGt/pyYePr
ZLz7kmLs8IfY68IqDoGFDiOZUS2ti8A9B8b/qPEbeIXNcctLSojHWo/D9gScrZ3N
eKAYhaVjaenO3pl0hNOkWNAtxkxB1+jcEmTxgkKA4hFI0am+kaxCtreQ9FM30xdU
kqcvHapgN41Rp3RXXk3/xcRAjm2H+58HVp0GQ6pntmeyRXZutQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:03 2025 by rpki-client