Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
File: 0d4STg-K2059lXbOrjJfZo3SJLE.cer (raw, json)
Hash identifier: u45Ah9BhROaEfDkFmfU1V3nNoQG/WeNszAkeSkWSieQ=
Subject key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369BACC9741B18A227AD925565CADAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60506
IP: 45.140.244.0/22
IP: 81.199.24.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jan 2025 14:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ba:cc:97:41:b1:8a:22:7a:d9:25:56:5c:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:6d:16:4b:59:05:56:ca:a7:59:4e:22:87:
27:9e:24:ad:36:44:8e:b1:27:7b:dc:b1:a5:06:03:
ff:e3:e9:d8:8c:2f:74:66:ce:45:09:12:60:b4:77:
87:0f:e3:4e:9b:56:96:db:fc:49:a3:91:ed:d4:9b:
d1:01:7e:43:c3:4a:3f:f3:2a:10:2e:7d:83:65:fc:
60:72:23:89:e7:54:7c:75:b3:0b:b3:2a:e9:24:17:
c8:0d:84:15:ea:24:e2:ba:4a:53:fc:8a:c9:fd:67:
09:e2:ce:d1:45:4b:d4:2b:4b:4b:42:8a:3d:a9:f9:
67:60:ce:7b:53:3b:72:5f:2d:84:d1:5c:93:0a:4d:
e7:5f:0b:fa:71:ef:77:b4:97:6f:f3:69:fa:1e:0d:
35:19:b1:c6:32:da:ac:ab:61:92:98:d4:09:1f:e6:
5f:c8:91:0c:cb:72:82:51:9e:36:e3:2d:db:fe:0a:
4a:e9:e9:28:e0:cc:00:26:5e:c1:f5:6c:fd:9a:45:
b8:c4:1d:fd:c1:c5:74:bb:bf:0d:c7:8d:39:64:58:
95:0a:3a:75:b3:02:91:8b:43:04:93:30:ee:a8:62:
ca:a7:ba:2d:20:c9:91:4d:d2:7c:32:de:af:e5:ba:
68:49:59:8c:f2:a0:50:66:76:a8:2e:dc:0b:73:34:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/22
81.199.24.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60506
Signature Algorithm: sha256WithRSAEncryption
5c:09:e6:b0:07:af:23:b0:e3:52:61:aa:c3:fb:cb:fb:a1:06:
34:55:0f:c2:41:d3:a8:bc:3f:42:79:c0:25:29:7e:31:0d:59:
75:f9:52:47:b6:db:a2:de:0b:b7:6f:0b:e4:66:0c:af:c7:1b:
be:7f:1c:c1:d3:17:b2:1a:4c:ca:bd:12:c0:9b:84:eb:13:4c:
d2:b5:a2:51:f8:97:83:af:b3:be:6b:00:4a:aa:19:04:ad:35:
ae:c4:20:52:a9:4b:41:7d:ae:80:3d:44:06:e8:c3:e6:42:11:
49:3c:38:f7:17:a9:a2:2e:07:5d:d4:34:0d:e3:f0:fb:8b:5e:
c6:2f:ca:00:ed:72:c7:e9:f3:6f:f1:63:5d:c8:0a:10:25:0f:
b5:25:71:59:57:13:d0:ab:03:4b:5c:cc:09:a9:b9:7c:30:2a:
72:c4:b6:d9:e3:98:a5:30:a5:0b:90:d3:fd:f2:83:c2:a8:42:
a6:fb:61:79:40:a7:aa:85:25:a0:f3:73:04:68:6f:2b:53:b2:
13:6b:6e:89:ff:af:b3:51:6d:33:d1:d4:42:be:38:72:d0:5b:
9a:76:08:6e:28:cb:ab:90:87:40:2d:bb:bc:21:fb:5c:2a:8d:
06:8b:d7:70:6d:70:0b:b6:fb:6a:43:2b:e6:64:6a:e5:44:b0:
fd:9f:19:8a
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQjabrMl0GxiiJ62SVWXK2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWRlMTI0ZTBmOGFkYjRlN2Q5NTc2Y2VhZTMyNWY2NjhkZDIyNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yJtFktZBVbKp1lOIocnniStNkSO
sSd73LGlBgP/4+nYjC90Zs5FCRJgtHeHD+NOm1aW2/xJo5Ht1JvRAX5Dw0o/8yoQ
Ln2DZfxgciOJ51R8dbMLsyrpJBfIDYQV6iTiukpT/IrJ/WcJ4s7RRUvUK0tLQoo9
qflnYM57UztyXy2E0VyTCk3nXwv6ce93tJdv82n6Hg01GbHGMtqsq2GSmNQJH+Zf
yJEMy3KCUZ424y3b/gpK6eko4MwAJl7B9Wz9mkW4xB39wcV0u78Nx405ZFiVCjp1
swKRi0MEkzDuqGLKp7otIMmRTdJ8Mt6v5bpoSVmM8qBQZnaoLtwLczTcqQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFNHeEk4PittOfZV2zq4yX2aN0iSxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2FiZTEz
NC0wMDkzLTQ2NTItOTA1Ny00ZjRjOWIzNDNlOTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYWJlMTM0
LTAwOTMtNDY1Mi05MDU3LTRmNGM5YjM0M2U5MC8xLzBkNFNUZy1LMjA1OWxYYk9y
akpmWm8zU0pMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCLYz0AwQDUccYMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwDsWjANBgkqhkiG9w0BAQsFAAOCAQEAXAnmsAevI7DjUmGqw/vL+6EG
NFUPwkHTqLw/QnnAJSl+MQ1ZdflSR7bbot4Lt28L5GYMr8cbvn8cwdMXshpMyr0S
wJuE6xNM0rWiUfiXg6+zvmsASqoZBK01rsQgUqlLQX2ugD1EBujD5kIRSTw49xep
oi4HXdQ0DePw+4texi/KAO1yx+nzb/FjXcgKECUPtSVxWVcT0KsDS1zMCam5fDAq
csS22eOYpTClC5DT/fKDwqhCpvtheUCnqoUloPNzBGhvK1OyE2tuif+vs1FtM9HU
Qr44ctBbmnYIbijLq5CHQC27vCH7XCqNBovXcG1wC7b7akMr5mRq5USw/Z8Zig==
-----END CERTIFICATE-----
Generated at Thu Jan 16 17:04:08 2025 by rpki-client on console-fra.rpki-client.org