Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.cer (raw, json)
Hash identifier: 3zrj3eQf7amy5zuVaUr4GPjeQ03QkluJWLXvMo5GaY0=
Subject key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521AE26DD7499CD95E3B0EA13BEE71B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.135.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ae:26:dd:74:99:cd:95:e3:b0:ea:13:be:e7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d533b09430b048f0526ef6a937774e7f06203731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:bd:36:e2:fb:d5:95:68:43:0c:48:28:0d:
c1:70:04:dd:26:f4:d7:5e:ba:fa:ab:3e:6f:50:8c:
78:27:98:a2:10:e3:e1:98:71:6d:b9:89:87:ce:44:
47:ee:e0:53:1c:70:13:3b:85:75:f0:91:cc:0c:ca:
a5:53:e5:63:ae:9f:28:6d:1c:06:40:58:a0:4f:00:
7e:79:4e:9b:7b:5b:93:85:29:8f:b5:7c:20:c3:b2:
65:ef:ca:77:8a:7e:93:43:66:30:80:9a:74:86:d8:
02:f9:fb:1d:d0:88:82:96:b3:18:6e:bf:91:de:0e:
d7:a5:bf:a5:b6:92:ab:f2:d1:32:2e:e3:09:35:d1:
31:f6:b9:cd:db:13:86:76:44:a6:c2:9b:8e:20:f1:
83:f8:b4:05:19:b0:0e:48:85:60:e1:50:24:9b:52:
03:40:da:55:70:8c:7c:4f:85:b6:18:9d:06:2e:6e:
0f:7e:1b:ed:c2:91:28:6a:5b:64:e1:2e:d1:5f:60:
0d:ee:7e:ac:09:93:9d:38:66:65:23:25:42:6b:02:
8c:b5:7a:09:81:e6:3e:18:e0:d0:66:41:44:14:d5:
96:d0:6a:9f:97:b2:20:28:6c:20:27:b5:fb:6b:08:
13:db:20:7e:8c:f1:5b:d1:a8:00:a8:7b:a2:b9:5b:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:97:08:1c:55:d1:07:4f:7a:c8:c1:35:37:0c:ff:46:5b:29:
28:49:57:76:58:e7:a8:4c:65:83:3f:af:8f:91:ca:31:70:70:
f7:db:ed:bc:92:4e:0d:cd:1b:ed:77:9f:a6:66:9d:5c:7c:af:
64:49:b5:91:22:02:ef:6a:ca:e9:5c:07:cb:ef:87:77:31:a2:
3a:33:8f:0a:7b:01:c8:ca:bc:99:54:70:94:41:41:7c:d6:12:
ae:b0:76:6e:27:f1:80:72:0c:5c:c3:e0:79:5d:36:d2:5e:dc:
70:91:d9:48:45:8e:8b:b9:86:47:cb:2e:40:0d:98:15:50:fe:
f9:63:d4:31:b2:45:2e:b5:c2:cf:c7:72:4e:47:0b:86:00:af:
a2:91:ce:a6:99:42:0b:07:21:52:56:cc:43:3b:99:11:36:ad:
e8:31:b6:96:75:70:98:b5:80:6a:3d:05:4c:ad:62:dd:21:9d:
ab:cb:53:f7:5f:0f:3f:b2:d5:89:c6:7d:97:b4:df:3a:e5:57:
93:8e:76:73:35:e6:99:75:d3:b8:6e:37:3f:c2:fe:1e:c5:8d:
de:c9:78:f6:14:2a:8f:61:8d:ac:17:e6:f7:5d:33:68:a2:77:
32:8f:20:b8:5b:3d:f4:97:e4:11:49:a6:84:fb:c4:4c:e6:ce:
61:1a:4b:45
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlIa4m3XSZzZXjsOoTvucbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTMzYjA5NDMwYjA0OGYwNTI2ZWY2YTkzNzc3NGU3ZjA2MjAzNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUG9NuL71ZVoQwxIKA3BcATdJvTX
Xrr6qz5vUIx4J5iiEOPhmHFtuYmHzkRH7uBTHHATO4V18JHMDMqlU+Vjrp8obRwG
QFigTwB+eU6be1uThSmPtXwgw7Jl78p3in6TQ2YwgJp0htgC+fsd0IiClrMYbr+R
3g7Xpb+ltpKr8tEyLuMJNdEx9rnN2xOGdkSmwpuOIPGD+LQFGbAOSIVg4VAkm1ID
QNpVcIx8T4W2GJ0GLm4PfhvtwpEoaltk4S7RX2AN7n6sCZOdOGZlIyVCawKMtXoJ
geY+GODQZkFEFNWW0Gqfl7IgKGwgJ7X7awgT2yB+jPFb0agAqHuiuVuUewIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNUzsJQwsEjwUm72qTd3Tn8GIDcxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2Q1MjVm
OC1kNTQ5LTQ5MDktYjhjMC1mZjAxNDkwMGJlOGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZDUyNWY4
LWQ1NDktNDkwOS1iOGMwLWZmMDE0OTAwYmU4YS8xLzFUT3dsREN3U1BCU2J2YXBO
M2RPZndZZ056RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuYcsMA0GCSqGSIb3DQEBCwUAA4IBAQBslwgc
VdEHT3rIwTU3DP9GWykoSVd2WOeoTGWDP6+PkcoxcHD32+28kk4NzRvtd5+mZp1c
fK9kSbWRIgLvasrpXAfL74d3MaI6M48KewHIyryZVHCUQUF81hKusHZuJ/GAcgxc
w+B5XTbSXtxwkdlIRY6LuYZHyy5ADZgVUP75Y9QxskUutcLPx3JORwuGAK+ikc6m
mUILByFSVsxDO5kRNq3oMbaWdXCYtYBqPQVMrWLdIZ2ry1P3Xw8/stWJxn2XtN86
5VeTjnZzNeaZddO4bjc/wv4exY3eyXj2FCqPYY2sF+b3XTNooncyjyC4Wz30l+QR
SaaE+8RM5s5hGktF
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:36 2025 by rpki-client