Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
File: 1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer (raw, json)
Hash identifier: aylcisZsOIUrd+99jwJYi4GPOK1wIQ/batoRR8St1kE=
Subject key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAEA3E3E61B8D0774E530D9C1A9ED5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12570
AS: 16246
AS: 29321
AS: 31246
AS: 41046
AS: 44070
AS: 47681
AS: 49767
AS: 61169
IP: 46.39.160.0/19
IP: 77.87.232.0/21
IP: 77.242.80.0/20
IP: 78.41.8.0/21
IP: 78.108.144.0/20
IP: 80.78.144.0/20
IP: 80.243.96.0/20
IP: 81.200.48.0/20
IP: 82.114.192.0/19
IP: 82.150.160.0/19
IP: 83.240.0.0/17
IP: 86.63.192.0/19
IP: 88.83.224.0/19
IP: 89.31.8.0/21
IP: 89.190.40.0 -- 89.190.63.255
IP: 91.197.116.0/22
IP: 92.240.160.0/19
IP: 94.74.192.0/18
IP: 94.143.168.0/21
IP: 95.82.128.0/18
IP: 95.143.128.0/20
IP: 109.72.0.0/20
IP: 109.105.32.0/19
IP: 109.239.64.0/20
IP: 176.98.96.0/20
IP: 178.17.96.0/20
IP: 178.72.192.0/18
IP: 185.8.188.0/22
IP: 185.15.252.0/22
IP: 185.51.240.0/22
IP: 185.152.152.0/22
IP: 185.191.184.0/22
IP: 188.175.0.0/16
IP: 194.31.216.0/22
IP: 194.59.240.0/22
IP: 212.4.128.0/19
IP: 212.96.160.0/19
IP: 213.155.224.0/19
IP: 213.180.32.0/19
IP: 213.211.32.0/19
IP: 217.195.160.0/20
IP: 2001:4ba8::/29
IP: 2001:4cc8::/31
IP: 2a00:1e60::/32
IP: 2a00:d480::/32
IP: 2a01:4240::/32
IP: 2a02:350::/29
IP: 2a02:9b8::/31
IP: 2a02:b20::/32
IP: 2a02:2930::/32
IP: 2a03:b4c0::/32
IP: 2a07:b5c0::/29
IP: 2a0a:cac0::/29
IP: 2a10:c540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:3e:3e:61:b8:d0:77:4e:53:0d:9c:1a:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:aa:f3:47:c8:b7:d3:d4:90:9c:51:3b:59:
64:c4:c8:d9:db:ea:30:97:3b:4b:2d:a7:34:81:1f:
d3:57:87:a0:57:e8:85:b1:79:22:ad:2f:77:02:06:
b0:38:58:a0:57:2f:9d:00:0f:c9:e0:e5:bc:f1:71:
86:00:b9:89:68:98:51:a1:f1:33:29:c5:d1:fb:90:
ac:6e:14:8c:18:fc:b5:3c:5a:23:35:cf:2a:db:07:
36:b2:63:f1:55:94:69:ed:c1:90:dc:ec:b8:e4:af:
54:73:7d:07:ae:a4:bd:d3:51:bf:51:cd:96:c7:40:
22:32:2b:a8:78:ac:bc:25:31:f9:70:3b:87:df:1d:
5b:cf:4c:45:f0:9d:df:99:79:10:c5:20:14:91:ce:
17:81:f5:36:c5:49:74:c4:e9:a1:cd:7b:0d:36:ac:
70:95:29:bb:2c:9a:4d:a7:22:05:cc:48:16:e3:5b:
d3:c9:be:f4:b6:65:67:97:4a:6b:e3:6c:cd:a2:4e:
83:d5:cf:25:f7:cc:a6:1b:74:d4:70:b1:32:be:ab:
8b:57:83:60:28:fd:31:02:9b:a3:25:99:6f:6a:e9:
65:9b:64:dc:8c:12:bf:a5:1b:ed:2c:5f:1e:10:c6:
aa:e5:2b:3f:95:07:0c:7e:28:53:8e:88:02:1a:57:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.160.0/19
77.87.232.0/21
77.242.80.0/20
78.41.8.0/21
78.108.144.0/20
80.78.144.0/20
80.243.96.0/20
81.200.48.0/20
82.114.192.0/19
82.150.160.0/19
83.240.0.0/17
86.63.192.0/19
88.83.224.0/19
89.31.8.0/21
89.190.40.0-89.190.63.255
91.197.116.0/22
92.240.160.0/19
94.74.192.0/18
94.143.168.0/21
95.82.128.0/18
95.143.128.0/20
109.72.0.0/20
109.105.32.0/19
109.239.64.0/20
176.98.96.0/20
178.17.96.0/20
178.72.192.0/18
185.8.188.0/22
185.15.252.0/22
185.51.240.0/22
185.152.152.0/22
185.191.184.0/22
188.175.0.0/16
194.31.216.0/22
194.59.240.0/22
212.4.128.0/19
212.96.160.0/19
213.155.224.0/19
213.180.32.0/19
213.211.32.0/19
217.195.160.0/20
IPv6:
2001:4ba8::/29
2001:4cc8::/31
2a00:1e60::/32
2a00:d480::/32
2a01:4240::/32
2a02:350::/29
2a02:9b8::/31
2a02:b20::/32
2a02:2930::/32
2a03:b4c0::/32
2a07:b5c0::/29
2a0a:cac0::/29
2a10:c540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12570
16246
29321
31246
41046
44070
47681
49767
61169
Signature Algorithm: sha256WithRSAEncryption
84:97:0e:da:b1:00:9d:b8:49:ad:53:f6:d4:99:0e:80:89:e1:
5e:75:48:a2:ff:1c:38:36:e1:2a:ed:ae:5c:fd:10:64:15:8a:
20:00:fa:35:17:5b:2b:8c:24:20:66:e9:fe:75:61:92:17:fd:
88:7a:cf:29:e1:82:dd:92:4c:09:83:8a:4f:98:09:92:b8:0a:
a3:32:eb:a3:e1:1b:83:1a:3e:07:24:cf:2c:56:86:3b:f4:d6:
7f:43:f1:f5:5b:1a:01:e2:cd:fc:7f:a3:39:a1:68:ff:b6:c1:
67:96:aa:5c:74:e5:4b:69:de:e3:fd:2d:34:75:54:aa:c2:f1:
01:99:51:e3:83:ea:76:d6:8f:2b:eb:6e:5e:3d:a0:e5:80:09:
ea:cc:a6:1b:ed:d2:00:ed:29:6a:0d:38:ee:3b:42:95:30:a5:
d3:47:84:4d:49:ff:d5:0e:27:33:e8:1c:45:e9:ae:aa:fd:49:
a3:01:38:6a:53:55:08:b5:5d:0a:36:42:5e:0a:d3:36:a6:39:
5a:a7:fd:5f:e9:5a:53:cc:52:72:65:a6:fe:52:e7:16:37:75:
40:d8:a8:98:00:31:16:4a:8d:6e:ea:46:bc:70:db:79:db:69:
b9:c6:bd:5e:d5:06:be:c3:ab:e4:df:c1:b5:4f:17:c5:50:3b:
1d:4f:0a:b8
-----BEGIN CERTIFICATE-----
MIIHGzCCBgOgAwIBAgISAYzC2uo+PmG40HdOUw2cGp7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGZmMGZlY2Q3YmY0NDE0ODkzMTc4OGRmZTdmMjBkNjdhNjdhMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Kq80fIt9PUkJxRO1lkxMjZ2+ow
lztLLac0gR/TV4egV+iFsXkirS93AgawOFigVy+dAA/J4OW88XGGALmJaJhRofEz
KcXR+5CsbhSMGPy1PFojNc8q2wc2smPxVZRp7cGQ3Oy45K9Uc30HrqS901G/Uc2W
x0AiMiuoeKy8JTH5cDuH3x1bz0xF8J3fmXkQxSAUkc4XgfU2xUl0xOmhzXsNNqxw
lSm7LJpNpyIFzEgW41vTyb70tmVnl0pr42zNok6D1c8l98ymG3TUcLEyvquLV4Ng
KP0xApujJZlvaullm2TcjBK/pRvtLF8eEMaq5Ss/lQcMfihTjogCGld56QIDAQAB
o4IEJzCCBCMwHQYDVR0OBBYEFNT/D+zXv0QUiTF4jf5/INZ6Z6DbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzBjMGM2
NS05ZjgyLTQ0NTAtOTE2NS1mMGMyMWY4MTg2ZjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvMGMwYzY1
LTlmODItNDQ1MC05MTY1LWYwYzIxZjgxODZmMC8xLzFQOFA3TmVfUkJTSk1YaU5f
bjhnMW5wbm9Ocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBgAYIKwYB
BQUHAQcBAf8EggFvMIIBazCCAQQEAgABMIH9AwQFLiegAwQDTVfoAwQETfJQAwQD
TikIAwQETmyQAwQEUE6QAwQEUPNgAwQEUcgwAwQFUnLAAwQFUpagAwQHU/AAAwQF
Vj/AAwQFWFPgAwQDWR8IMAwDBANZvigDBAZZvgADBAJbxXQDBAVc8KADBAZeSsAD
BANej6gDBAZfUoADBARfj4ADBARtSAADBAVtaSADBARt70ADBASwYmADBASyEWAD
BAaySMADBAK5CLwDBAK5D/wDBAK5M/ADBAK5mJgDBAK5v7gDAwC8rwMEAsIf2AME
AsI78AMEBdQEgAMEBdRgoAMEBdWb4AMEBdW0IAMEBdXTIAMEBNnDoDBhBAIAAjBb
AwUDIAFLqAMFASABTMgDBQAqAB5gAwUAKgDUgAMFACoBQkADBQMqAgNQAwUBKgIJ
uAMFACoCCyADBQAqAikwAwUAKgO0wAMFAyoHtcADBQMqCsrAAwUDKhDFQDA+Bggr
BgEFBQcBCAEB/wQvMC2gKzApAgIxGgICP3YCAnKJAgJ6DgIDAKBWAgMArCYCAwC6
QQIDAMJnAgMA7vEwDQYJKoZIhvcNAQELBQADggEBAISXDtqxAJ24Sa1T9tSZDoCJ
4V51SKL/HDg24Srtrlz9EGQViiAA+jUXWyuMJCBm6f51YZIX/Yh6zynhgt2STAmD
ik+YCZK4CqMy66PhG4MaPgckzyxWhjv01n9D8fVbGgHizfx/ozmhaP+2wWeWqlx0
5Utp3uP9LTR1VKrC8QGZUeOD6nbWjyvrbl49oOWACerMphvt0gDtKWoNOO47QpUw
pdNHhE1J/9UOJzPoHEXprqr9SaMBOGpTVQi1XQo2Ql4K0zamOVqn/V/pWlPMUnJl
pv5S5xY3dUDYqJgAMRZKjW7qRrxw23nbabnGvV7VBr7Dq+TfwbVPF8VQOx1PCrg=
-----END CERTIFICATE-----
Generated at Fri Apr 19 13:27:03 2024 by rpki-client on console-fra.rpki-client.org