Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
File: 1-75S2DTiaNxpiDApL95LY8faOS4.cer (raw, json)
Hash identifier: epCuosbJmFhcSNw7GPiZ2gjhay9kmIaQi+twF1Hf8Lw=
Subject key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBA0CEDDB478AF340284767751AEB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15411
IP: 193.149.128.0/24
IP: 193.149.137.0 -- 193.149.138.255
IP: 193.149.140.0/23
IP: 193.149.146.0/23
IP: 193.149.150.0/24
IP: 193.149.152.0/24
IP: 193.149.154.0/24
IP: 193.149.165.0/24
IP: 193.149.171.0 -- 193.149.172.255
IP: 193.149.177.0/24
IP: 193.149.184.0/24
IP: 193.149.186.0/24
IP: 193.149.188.0/24
IP: 193.149.191.0/24
IP: 195.85.0.0/23
IP: 195.85.4.0/23
IP: 195.85.8.0/23
IP: 195.85.13.0 -- 195.85.18.255
IP: 195.85.22.0/24
IP: 195.85.24.0 -- 195.85.26.255
IP: 195.85.28.0/22
IP: 195.85.37.0/24
IP: 195.85.39.0/24
IP: 195.85.45.0 -- 195.85.47.255
IP: 195.85.50.0/24
IP: 195.85.52.0/23
IP: 195.85.55.0 -- 195.85.58.255
IP: 195.85.60.0/23
IP: 195.85.66.0/23
IP: 195.85.74.0/24
IP: 195.85.76.0/23
IP: 195.85.80.0 -- 195.85.84.255
IP: 195.85.86.0/23
IP: 195.85.89.0 -- 195.85.93.255
IP: 195.85.96.0 -- 195.85.101.255
IP: 195.85.104.0/23
IP: 195.85.109.0 -- 195.85.112.255
IP: 195.85.117.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a0:ce:dd:b4:78:af:34:02:84:76:77:51:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:5e:20:b3:d1:93:a8:40:ef:1a:ea:34:63:
4c:eb:ee:c8:6a:69:8d:03:76:b1:83:2a:b3:a7:b4:
75:14:53:44:d4:e5:2a:c7:cf:9d:88:ec:ca:ff:b2:
b0:11:88:93:53:b6:97:c2:24:82:ad:61:79:77:28:
59:84:c7:01:d1:d7:47:f6:92:4b:e7:d5:b2:9c:ed:
03:a9:ac:64:91:72:d2:f1:ac:f0:6a:86:cc:28:c0:
14:52:ab:b1:26:89:44:2e:e0:5c:48:b0:12:cf:8c:
19:17:c8:12:aa:b8:dd:67:b4:02:cc:b1:9f:bd:a1:
1d:87:66:65:68:84:db:3a:2e:e4:74:1f:e8:a8:5a:
81:c8:fb:1e:3a:08:87:d9:10:54:a7:be:d3:5e:06:
27:96:61:e5:fd:17:68:0d:7e:a0:02:60:53:ee:47:
4d:c5:33:39:c5:54:29:a9:d8:82:7b:3a:0c:1c:14:
aa:dd:a7:c4:c7:7b:da:b3:25:6d:59:d2:f5:d2:8a:
b8:c9:4f:3b:cc:a0:3d:84:25:b5:5d:c4:e8:35:27:
50:06:f7:44:78:8b:a0:d2:73:b8:06:2b:39:91:75:
e9:ea:c8:31:0b:48:4a:20:1a:be:11:55:60:de:4a:
28:06:7f:2d:d8:8b:b4:ee:73:b9:ac:c7:61:de:f1:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.128.0/24
193.149.137.0-193.149.138.255
193.149.140.0/23
193.149.146.0/23
193.149.150.0/24
193.149.152.0/24
193.149.154.0/24
193.149.165.0/24
193.149.171.0-193.149.172.255
193.149.177.0/24
193.149.184.0/24
193.149.186.0/24
193.149.188.0/24
193.149.191.0/24
195.85.0.0/23
195.85.4.0/23
195.85.8.0/23
195.85.13.0-195.85.18.255
195.85.22.0/24
195.85.24.0-195.85.26.255
195.85.28.0/22
195.85.37.0/24
195.85.39.0/24
195.85.45.0-195.85.47.255
195.85.50.0/24
195.85.52.0/23
195.85.55.0-195.85.58.255
195.85.60.0/23
195.85.66.0/23
195.85.74.0/24
195.85.76.0/23
195.85.80.0-195.85.84.255
195.85.86.0/23
195.85.89.0-195.85.93.255
195.85.96.0-195.85.101.255
195.85.104.0/23
195.85.109.0-195.85.112.255
195.85.117.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15411
Signature Algorithm: sha256WithRSAEncryption
a5:42:7d:3c:e8:18:a6:f4:f4:34:ca:61:4c:27:4b:5f:8f:60:
fd:5d:5a:5c:16:68:ad:78:89:2e:37:af:15:92:75:51:60:fe:
38:bd:c9:2f:27:fe:8e:af:99:47:e9:7e:35:d8:56:1d:d1:4e:
c0:94:24:8e:a8:e9:1b:8b:36:26:05:e4:91:1e:e0:0e:50:1f:
f9:94:a9:f1:ab:47:b6:aa:70:8e:71:50:cc:e5:a8:f4:d0:52:
3a:72:c2:db:53:cf:85:ea:eb:9c:83:31:60:7d:de:46:1a:ba:
fd:ca:a5:cd:b0:4f:4d:a7:80:1e:54:b0:d9:6a:27:a2:c1:71:
d8:9e:db:65:47:9a:84:49:57:fd:51:df:1b:e5:51:49:63:54:
51:bf:0c:65:11:ca:01:69:79:0d:fe:19:54:f4:ee:31:b7:23:
8d:f7:86:31:95:44:c3:43:f1:8b:8c:a9:a2:57:4e:a2:96:95:
46:27:28:03:38:a3:7e:db:9d:e7:64:ba:06:ad:30:d4:94:5e:
d3:66:f1:22:a2:b6:54:e4:5a:a1:09:2a:4b:a1:29:d7:6f:66:
55:1b:04:24:6d:10:7d:a5:43:75:e7:f7:c3:91:6a:88:d4:32:
d0:18:be:85:7a:2c:7c:d1:98:4d:92:ac:7c:f8:70:26:2e:26:
98:67:cc:5f
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgISAYzJu6DO3bR4rzQChHZ3Ua62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMjQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmJlNTJkODM0ZTI2OGRjNjk4ODMwMjkyZmRlNGI2M2M3ZGEzOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8BeILPRk6hA7xrqNGNM6+7IammN
A3axgyqzp7R1FFNE1OUqx8+diOzK/7KwEYiTU7aXwiSCrWF5dyhZhMcB0ddH9pJL
59WynO0DqaxkkXLS8azwaobMKMAUUquxJolELuBcSLASz4wZF8gSqrjdZ7QCzLGf
vaEdh2ZlaITbOi7kdB/oqFqByPseOgiH2RBUp77TXgYnlmHl/RdoDX6gAmBT7kdN
xTM5xVQpqdiCezoMHBSq3afEx3vasyVtWdL10oq4yU87zKA9hCW1XcToNSdQBvdE
eIug0nO4Bis5kXXp6sgxC0hKIBq+EVVg3kooBn8t2Iu07nO5rMdh3vGtUQIDAQAB
o4ID2DCCA9QwHQYDVR0OBBYEFPu+Utg04mjcaYgwKS/eS2PH2jkuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M5L2Q4NGI3
YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMxZjUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0Yjdh
LTdlYjAtNDZhMi04YThhLTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFw
TDk1TFk4ZmFPUzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAVUGCCsG
AQUFBwEHAQH/BIIBRDCCAUAwggE8BAIAATCCATQDBADBlYAwDAMEAMGViQMEAMGV
igMEAcGVjAMEAcGVkgMEAMGVlgMEAMGVmAMEAMGVmgMEAMGVpTAMAwQAwZWrAwQA
wZWsAwQAwZWxAwQAwZW4AwQAwZW6AwQAwZW8AwQAwZW/AwQBw1UAAwQBw1UEAwQB
w1UIMAwDBADDVQ0DBADDVRIDBADDVRYwDAMEA8NVGAMEAMNVGgMEAsNVHAMEAMNV
JQMEAMNVJzAMAwQAw1UtAwQEw1UgAwQAw1UyAwQBw1U0MAwDBADDVTcDBADDVToD
BAHDVTwDBAHDVUIDBADDVUoDBAHDVUwwDAMEBMNVUAMEAMNVVAMEAcNVVjAMAwQA
w1VZAwQBw1VcMAwDBAXDVWADBAHDVWQDBAHDVWgwDAMEAMNVbQMEAMNVcAMEAMNV
dTAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI8MzANBgkqhkiG9w0BAQsFAAOCAQEA
pUJ9POgYpvT0NMphTCdLX49g/V1aXBZorXiJLjevFZJ1UWD+OL3JLyf+jq+ZR+l+
NdhWHdFOwJQkjqjpG4s2JgXkkR7gDlAf+ZSp8atHtqpwjnFQzOWo9NBSOnLC21PP
herrnIMxYH3eRhq6/cqlzbBPTaeAHlSw2WonosFx2J7bZUeahElX/VHfG+VRSWNU
Ub8MZRHKAWl5Df4ZVPTuMbcjjfeGMZVEw0Pxi4ypoldOopaVRicoAzijftud52S6
Bq0w1JRe02bxIqK2VORaoQkqS6Ep129mVRsEJG0QfaVDdef3w5FqiNQy0Bi+hXos
fNGYTZKsfPhwJi4mmGfMXw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:50:25 2024 by rpki-client on console-fra.rpki-client.org