Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.cer (raw, json)
Hash identifier: e19kYoF877vJ1rj65qULco9TNHxeRu6D4rzDSvB4Z+Q=
Subject key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019541C048241B68896F8091079D7C71438B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Feb 2025 10:14:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212615
IP: 2a0b:7c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:c0:48:24:1b:68:89:6f:80:91:07:9d:7c:71:43:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 10:14:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:6f:5b:e4:b7:9b:f7:a8:a8:e7:6d:9a:9d:
1c:6c:b0:0c:ee:d1:42:a0:44:1e:9f:c9:6d:e4:1d:
75:97:07:8b:2e:e6:f8:90:ef:1f:a6:da:83:c8:9e:
5f:0a:ac:4f:05:9a:83:9d:e5:47:f3:ab:8f:c2:16:
ec:70:91:ee:43:cb:ba:c7:1e:65:d9:8f:d7:9b:76:
71:41:d4:72:bb:18:5d:68:29:22:93:f7:03:f6:ea:
de:1f:69:39:24:5b:b7:46:c0:a4:14:26:e0:6a:1c:
18:fb:7d:a2:f0:30:fe:c7:19:e6:f9:13:43:3c:08:
b6:53:63:7e:2a:e7:45:ef:ac:48:e8:fe:f6:a9:37:
9d:07:eb:3c:d1:5f:4a:e7:b6:b6:d5:3b:5f:08:2a:
17:68:a7:7a:fd:9a:53:d6:0f:30:ea:dd:e3:7b:2b:
27:16:f8:ef:93:da:fa:8c:4d:ee:bc:4d:8c:5a:df:
d9:4e:28:cc:9e:fd:13:28:11:b9:57:68:c6:e0:e6:
c1:1b:b7:4d:20:ca:ef:f8:8a:47:f9:5c:ff:b9:bd:
97:8f:d2:3a:aa:f9:bb:61:3e:49:5e:81:f1:ca:ac:
ca:f7:fc:52:f8:9d:5b:9c:78:0f:03:b1:9d:83:c3:
b1:ed:18:ad:43:2b:1e:75:09:cf:27:80:da:58:47:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212615
Signature Algorithm: sha256WithRSAEncryption
24:5f:f3:b6:91:c8:fa:5c:e3:da:f4:1c:94:a3:fe:c1:10:84:
36:11:ae:44:34:f4:5b:fb:b7:4b:96:d1:77:45:0d:5b:6a:cd:
30:83:76:d1:e5:c5:63:17:65:8e:74:fa:38:75:9e:0b:b3:19:
7c:0e:75:42:5a:03:07:1d:94:77:b7:6a:8c:22:50:aa:d3:f8:
8d:40:56:2b:6e:4e:70:52:20:7d:71:4f:b9:4c:87:46:1d:ba:
11:e6:4e:21:96:dc:2d:ed:58:35:81:74:8e:83:5c:fa:43:50:
9e:69:93:33:54:5c:ba:71:e2:9a:d5:98:16:ca:90:61:01:03:
35:2d:d5:b6:8a:2c:39:7b:d3:b3:f1:de:1f:1c:44:ca:de:aa:
43:e9:5c:42:a4:ab:e2:af:92:28:d2:a4:8f:d9:57:c2:fa:8a:
34:3f:07:80:6b:82:39:e3:f8:58:31:bc:81:cb:41:06:c4:4c:
9f:d3:fd:17:6c:be:2e:11:f7:8b:10:66:ba:a6:a2:90:5a:eb:
1e:3b:5b:46:8e:f0:d5:e4:95:05:ca:db:e9:f9:cb:e8:3d:d5:
45:fd:c7:4c:b6:3a:e2:b8:a6:d6:43:56:22:d4:c1:52:f3:43:
a4:7f:86:52:d3:fd:20:cd:a1:f3:b2:08:d3:ef:e7:88:6d:d7:
7a:37:74:89
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZVBwEgkG2iJb4CRB518cUOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI2MTAxNDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDYyY2Y4MDdhNTZiNzcxYTVmNDJjYzE4OWFmMmQ2MzFlYjVhYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1FvW+S3m/eoqOdtmp0cbLAM7tFC
oEQen8lt5B11lweLLub4kO8fptqDyJ5fCqxPBZqDneVH86uPwhbscJHuQ8u6xx5l
2Y/Xm3ZxQdRyuxhdaCkik/cD9ureH2k5JFu3RsCkFCbgahwY+32i8DD+xxnm+RND
PAi2U2N+KudF76xI6P72qTedB+s80V9K57a21TtfCCoXaKd6/ZpT1g8w6t3jeysn
Fvjvk9r6jE3uvE2MWt/ZTijMnv0TKBG5V2jG4ObBG7dNIMrv+IpH+Vz/ub2Xj9I6
qvm7YT5JXoHxyqzK9/xS+J1bnHgPA7Gdg8Ox7RitQysedQnPJ4DaWEdwnwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFNBiz4B6VrdxpfQswYmvLWMetarsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzg4NmVk
Ni1mNjEzLTRhMGUtOGMwZC0xZGQ1ZmFhMDZiMGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODg2ZWQ2
LWY2MTMtNGEwZS04YzBkLTFkZDVmYWEwNmIwYS8xLzBHTFBnSHBXdDNHbDlDekJp
YTh0WXg2MXF1dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgt8gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDPocwDQYJKoZIhvcNAQELBQADggEBACRf87aRyPpc49r0HJSj/sEQhDYRrkQ0
9Fv7t0uW0XdFDVtqzTCDdtHlxWMXZY50+jh1nguzGXwOdUJaAwcdlHe3aowiUKrT
+I1AVituTnBSIH1xT7lMh0YduhHmTiGW3C3tWDWBdI6DXPpDUJ5pkzNUXLpx4prV
mBbKkGEBAzUt1baKLDl707Px3h8cRMreqkPpXEKkq+KvkijSpI/ZV8L6ijQ/B4Br
gjnj+FgxvIHLQQbETJ/T/Rdsvi4R94sQZrqmopBa6x47W0aO8NXklQXK2+n5y+g9
1UX9x0y2OuK4ptZDViLUwVLzQ6R/hlLT/SDNofOyCNPv54ht13o3dIk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:58:09 2025 by rpki-client