Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
File: vQY9lEu4H8McuhFJndAG607OliQ.cer (raw, json)
Hash identifier: Fv5xpf8NfFQQv2TN5W8EMR48Azady3QCmu8Uwe6/jkY=
Subject key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01965D96DEF2911A13B19D82DF626D2CC21F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Apr 2025 13:01:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48971
AS: 49236
IP: 94.231.80.0/20
IP: 185.19.84.0/22
IP: 195.2.228.0/23
IP: 2001:678:1c4::/48
IP: 2a00:41c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:de:f2:91:1a:13:b1:9d:82:df:62:6d:2c:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 13:01:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:54:df:d6:73:37:a7:e2:b4:78:11:30:6b:
f8:d2:23:a3:dd:ff:28:c1:40:53:9f:26:9f:95:f2:
70:3c:05:4e:c2:41:8c:83:51:6d:85:26:36:79:96:
57:6e:bc:0a:21:07:41:39:d3:0a:8b:6e:21:8f:2e:
2f:50:b4:c8:56:e5:86:38:7f:07:d0:e2:ab:e9:3d:
9f:8e:66:f5:bb:f6:6b:91:72:5b:29:1c:63:9c:52:
6f:ea:d3:88:22:d6:53:9d:93:ab:d6:28:07:ed:de:
d8:76:e1:0d:e5:3a:bd:66:3f:40:46:95:4d:79:07:
a8:ff:98:69:60:b2:74:72:dc:9f:a4:90:db:05:81:
cb:1b:06:12:95:1b:46:26:d4:b7:42:53:59:7d:e0:
f0:8a:d3:f9:8c:db:61:9b:63:ca:b4:36:aa:af:be:
00:26:17:e3:52:42:60:77:9f:e5:f6:c7:b0:cf:eb:
34:f8:fb:82:40:80:33:3a:c0:19:29:4a:f0:cb:b7:
6a:41:ff:ac:01:dd:fd:49:eb:b9:b3:49:29:fc:0d:
af:d9:9f:30:0a:3b:4a:88:c2:e4:a0:2a:e7:55:0b:
e6:01:66:0b:40:ca:d5:db:2b:fa:18:39:44:83:3a:
3a:e9:af:4e:60:f8:e6:44:10:19:3b:e7:a4:56:e5:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.80.0/20
185.19.84.0/22
195.2.228.0/23
IPv6:
2001:678:1c4::/48
2a00:41c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48971
49236
Signature Algorithm: sha256WithRSAEncryption
29:e5:6b:d0:73:15:9b:1b:43:85:42:13:3d:f7:2c:72:0c:29:
c3:dc:a7:18:32:be:fd:f6:86:18:e1:a3:58:25:00:a1:74:e8:
5c:95:e9:77:55:12:a4:a1:4b:f9:db:e8:bd:9e:26:c1:a6:0f:
27:2c:f5:b5:ef:ef:5d:ea:e1:db:e3:47:7a:46:c5:6b:92:2f:
60:b9:80:41:2a:37:0a:b5:43:da:6d:5d:98:d6:2f:17:0f:5f:
fd:e8:e0:60:47:d0:8c:c0:33:ab:5c:c8:bb:00:93:21:df:1d:
c8:09:a3:fc:d8:2f:c9:48:24:d5:3f:59:bd:04:35:6a:0a:ab:
58:10:33:0c:c8:a5:eb:a4:44:d9:76:96:b6:7b:fd:d0:4c:22:
d6:48:df:1c:a5:41:31:63:df:38:30:7b:41:0b:61:d4:30:c1:
68:00:b9:4d:01:4f:61:04:cc:a8:8c:32:74:63:1f:61:48:6a:
2f:d5:d3:fc:22:d7:b8:7c:02:d5:3c:c9:26:17:64:6f:95:0d:
ed:4d:58:29:85:ca:73:39:f3:1a:93:ea:9b:30:3f:ce:79:3a:
3b:6e:34:d3:d1:2d:be:f5:ab:ff:d5:0c:24:ea:85:58:9d:c8:
09:52:f0:2f:63:fe:e1:ab:5e:22:7b:de:7d:17:ed:e2:df:f9:
37:66:a3:67
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAZZdlt7ykRoTsZ2C32JtLMIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDIyMTMwMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDA2M2Q5NDRiYjgxZmMzMWNiYTExNDk5ZGQwMDZlYjRlY2U5NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uBU39ZzN6fitHgRMGv40iOj3f8o
wUBTnyaflfJwPAVOwkGMg1FthSY2eZZXbrwKIQdBOdMKi24hjy4vULTIVuWGOH8H
0OKr6T2fjmb1u/ZrkXJbKRxjnFJv6tOIItZTnZOr1igH7d7YduEN5Tq9Zj9ARpVN
eQeo/5hpYLJ0ctyfpJDbBYHLGwYSlRtGJtS3QlNZfeDwitP5jNthm2PKtDaqr74A
JhfjUkJgd5/l9sewz+s0+PuCQIAzOsAZKUrwy7dqQf+sAd39Seu5s0kp/A2v2Z8w
CjtKiMLkoCrnVQvmAWYLQMrV2yv6GDlEgzo66a9OYPjmRBAZO+ekVuXWFwIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFL0GPZRLuB/DHLoRSZ3QButOzpYkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2ViZmMz
ZC01NGZjLTQ2NDMtYmU1Ni1lYTcwYTI5Yzc2ZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvZWJmYzNk
LTU0ZmMtNDY0My1iZTU2LWVhNzBhMjljNzZmMC8xL3ZRWTlsRXU0SDhNY3VoRkpu
ZEFHNjA3T2xpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAYBAIAATASAwQEXudQAwQCuRNUAwQBwwLkMBYEAgACMBADBwAg
AQZ4AcQDBQMqAEHAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC/SwIDAMBUMA0G
CSqGSIb3DQEBCwUAA4IBAQAp5WvQcxWbG0OFQhM99yxyDCnD3KcYMr799oYY4aNY
JQChdOhclel3VRKkoUv52+i9nibBpg8nLPW17+9d6uHb40d6RsVrki9guYBBKjcK
tUPabV2Y1i8XD1/96OBgR9CMwDOrXMi7AJMh3x3ICaP82C/JSCTVP1m9BDVqCqtY
EDMMyKXrpETZdpa2e/3QTCLWSN8cpUExY984MHtBC2HUMMFoALlNAU9hBMyojDJ0
Yx9hSGov1dP8Ite4fALVPMkmF2RvlQ3tTVgphcpzOfMak+qbMD/OeTo7bjTT0S2+
9av/1Qwk6oVYncgJUvAvY/7hq14ie959F+3i3/k3ZqNn
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:14:09 2025 by rpki-client