Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.cer (raw, json)
Hash identifier: TU7ie865Cvx4UrzqijVceBlC8G4PRfVs7GyOrAPmaag=
Subject key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7258A28E3DD3EB08686FF1806CCF3D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 9031
AS: 203640
IP: 77.109.64.0/18
IP: 79.132.224.0/19
IP: 85.234.192.0/19
IP: 109.236.128.0/20
IP: 185.29.108.0/22
IP: 185.95.72.0/22
IP: 212.71.0.0/19
IP: 212.233.32.0/19
IP: 213.211.128.0/18
IP: 213.219.128.0/18
IP: 2a02:578::/32
IP: 2a04:4400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:8a:28:e3:dd:3e:b0:86:86:ff:18:06:cc:f3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d48551e26169b3b3e124f6964e2702e95768253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:2e:44:83:72:9b:96:46:3b:0a:6a:ba:20:
90:cf:73:13:14:ed:ab:de:0c:0e:81:be:b6:2f:1b:
f6:2d:43:45:99:45:df:d2:32:f6:1d:47:59:56:65:
2e:7b:39:bc:6f:1f:58:07:f9:a9:48:03:8d:a5:6f:
dd:ed:30:4f:e2:c7:69:27:18:ad:3d:de:81:2f:d6:
41:cb:3a:71:6e:da:1e:12:83:b5:f9:1f:80:47:8d:
6d:ae:32:3a:0f:06:0f:56:8d:25:ea:09:8c:30:ee:
1b:a3:02:63:0c:c9:82:c0:42:27:4a:4b:4e:2f:23:
f4:f8:50:c0:55:7c:b5:97:a1:24:ed:56:42:cb:5a:
db:ae:f3:67:aa:ec:f6:98:0d:fc:a3:5d:33:fc:6f:
0b:5d:03:7f:84:15:ad:f0:3d:94:5e:17:e3:d8:45:
b0:9f:95:41:a2:81:81:6d:d7:79:3f:a9:66:53:23:
61:e3:9e:af:57:0c:79:48:c9:d6:e1:92:88:80:37:
38:18:5b:88:20:96:f4:1c:c9:fa:80:9e:a8:ea:9c:
fb:6c:fb:05:ee:6a:0c:a4:36:d6:57:86:68:3a:ff:
22:47:d3:67:dc:0b:53:b9:75:0c:73:dd:f2:38:79:
12:3a:4d:43:99:ea:4e:71:8b:0b:e6:61:b5:99:29:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.109.64.0/18
79.132.224.0/19
85.234.192.0/19
109.236.128.0/20
185.29.108.0/22
185.95.72.0/22
212.71.0.0/19
212.233.32.0/19
213.211.128.0/18
213.219.128.0/18
IPv6:
2a02:578::/32
2a04:4400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9031
203640
Signature Algorithm: sha256WithRSAEncryption
8e:d8:3c:2f:2f:22:7b:8e:cb:d4:69:9f:27:30:c3:4a:4b:96:
86:4b:dd:10:7d:53:00:7c:1a:1f:a2:fe:0f:87:a4:d4:e4:cd:
6d:c5:ff:5b:4e:19:b4:5b:96:1b:69:0b:f1:fc:3d:ba:8c:4d:
60:14:c2:71:dc:70:99:03:ce:6d:e4:5a:d9:c9:18:c4:96:7d:
e5:f3:3a:10:1a:cb:46:ca:25:5a:ee:ac:4f:e7:b7:ad:5c:75:
98:e1:bf:b7:7d:83:00:51:70:ac:fa:30:e0:9b:42:63:de:ff:
95:c2:2a:15:f6:c2:73:45:7c:fb:ac:a4:48:81:41:2f:93:da:
4c:64:cc:54:7e:a6:b6:0e:95:eb:fa:93:aa:2c:f0:58:01:0a:
a4:e3:d3:ec:b5:73:ee:7e:5e:c8:6e:18:8e:00:80:87:99:6d:
83:47:16:34:bc:c7:af:1e:b4:67:61:95:d3:87:1c:29:54:3f:
8a:3a:ba:5c:aa:7a:2e:ad:9b:dd:c0:b2:e0:78:d0:6b:09:af:
a7:81:a7:7b:b2:d1:88:c2:e8:b7:ff:1a:97:bf:1e:a7:77:90:
7a:ef:2e:75:12:1c:53:af:e4:cb:02:5b:d8:7d:e8:18:e4:54:
e1:90:d8:4b:e2:64:6e:4f:03:87:f6:6a:86:f7:29:4d:e2:87:
6b:09:b8:76
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISAYzHJYoo490+sIaG/xgGzPPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDg1NTFlMjYxNjliM2IzZTEyNGY2OTY0ZTI3MDJlOTU3NjgyNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDIuRINym5ZGOwpquiCQz3MTFO2r
3gwOgb62Lxv2LUNFmUXf0jL2HUdZVmUuezm8bx9YB/mpSAONpW/d7TBP4sdpJxit
Pd6BL9ZByzpxbtoeEoO1+R+AR41trjI6DwYPVo0l6gmMMO4bowJjDMmCwEInSktO
LyP0+FDAVXy1l6Ek7VZCy1rbrvNnquz2mA38o10z/G8LXQN/hBWt8D2UXhfj2EWw
n5VBooGBbdd5P6lmUyNh456vVwx5SMnW4ZKIgDc4GFuIIJb0HMn6gJ6o6pz7bPsF
7moMpDbWV4ZoOv8iR9Nn3AtTuXUMc93yOHkSOk1DmepOcYsL5mG1mSlJcwIDAQAB
o4IC8DCCAuwwHQYDVR0OBBYEFNSFUeJhabOz4ST2lk4nAulXaCU+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2VhZDI3
Ny04NGM5LTRiOGUtODc5ZS01ZjczMjY3MTAyYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvZWFkMjc3
LTg0YzktNGI4ZS04NzllLTVmNzMyNjcxMDJhNi8xLzFJVlI0bUZwczdQaEpQYVdU
aWNDNlZkb0pUNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF
BwEHAQH/BFwwWjBCBAIAATA8AwQGTW1AAwQFT4TgAwQFVerAAwQEbeyAAwQCuR1s
AwQCuV9IAwQF1EcAAwQF1OkgAwQG1dOAAwQG1duAMBQEAgACMA4DBQAqAgV4AwUD
KgREADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIjRwIDAxt4MA0GCSqGSIb3DQEB
CwUAA4IBAQCO2DwvLyJ7jsvUaZ8nMMNKS5aGS90QfVMAfBofov4Ph6TU5M1txf9b
Thm0W5YbaQvx/D26jE1gFMJx3HCZA85t5FrZyRjEln3l8zoQGstGyiVa7qxP57et
XHWY4b+3fYMAUXCs+jDgm0Jj3v+VwioV9sJzRXz7rKRIgUEvk9pMZMxUfqa2DpXr
+pOqLPBYAQqk49PstXPufl7IbhiOAICHmW2DRxY0vMevHrRnYZXThxwpVD+KOrpc
qnourZvdwLLgeNBrCa+ngad7stGIwui3/xqXvx6nd5B67y51EhxTr+TLAlvYfegY
5FThkNhL4mRuTwOH9mqG9ylN4odrCbh2
-----END CERTIFICATE-----
Generated at Fri May 3 06:40:55 2024 by rpki-client on console-fra.rpki-client.org