Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
File: 1uU17yFuvm9_xVz73DFTK5EtjmM.cer (raw, json)
Hash identifier: p2JAhTYU1DL2DEolWAwhZzIGREkW3fkRPSgVT9jaz5w=
Subject key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDB12E3AEDEDC6D154F740B478D599
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21069
AS: 199193
IP: 46.231.200.0/21
IP: 80.74.128.0/19
IP: 81.173.82.0 -- 81.173.95.255
IP: 94.126.16.0/21
IP: 185.46.56.0/22
IP: 192.162.28.0/22
IP: 2a00:1128::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b1:2e:3a:ed:ed:c6:d1:54:f7:40:b4:78:d5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:77:bb:95:5d:4d:6c:07:e7:76:a1:53:c2:
02:7a:6d:b8:cd:cd:dc:81:8e:f5:0c:36:88:fd:82:
6f:86:33:8c:b3:e7:36:06:1c:7c:2a:5d:b3:21:1d:
a9:ec:62:d8:8b:de:af:ad:5b:fd:d4:e4:38:5c:85:
95:37:d3:3d:cc:5a:24:47:ab:35:92:c4:1e:2b:1b:
58:d3:62:21:0c:28:57:56:58:59:9f:8d:9d:c2:7e:
00:52:f8:21:2e:fc:0b:d1:59:95:44:78:6b:8c:52:
9c:45:2b:c0:df:e4:22:aa:25:ab:49:24:9b:b9:8c:
4f:21:ea:47:e1:ed:1e:39:fe:39:30:7c:39:4a:77:
04:4e:7e:93:21:07:88:da:09:d9:06:08:00:ed:aa:
f0:9f:48:ce:d7:47:26:fc:2c:b8:5b:7a:64:38:41:
b5:b9:90:ad:fe:ae:41:0a:d3:47:b1:9f:1e:03:71:
6a:98:da:b6:22:b1:42:37:5a:f4:0d:c1:c1:65:81:
46:1b:9b:02:84:ef:fc:5e:c5:f4:5c:e5:8e:f4:b0:
6e:e9:85:43:10:a1:5b:df:80:de:b8:87:7b:62:91:
3e:69:43:65:51:64:e1:c0:fb:ea:41:66:76:02:3b:
b0:76:f2:4f:ea:2c:7b:38:a6:5e:8f:a5:df:db:a8:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.200.0/21
80.74.128.0/19
81.173.82.0-81.173.95.255
94.126.16.0/21
185.46.56.0/22
192.162.28.0/22
IPv6:
2a00:1128::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21069
199193
Signature Algorithm: sha256WithRSAEncryption
3f:d0:cf:b0:7b:1d:c2:68:ae:5b:86:c2:6c:86:17:28:bb:33:
91:83:8e:44:c0:43:18:ce:16:8c:e4:67:03:a1:52:59:ec:cf:
e4:1e:76:5a:54:c6:7f:d9:f5:6c:1c:53:19:f3:d2:2d:20:59:
fe:b8:a8:01:d3:a1:f2:b9:ff:82:97:13:91:7b:35:f9:c7:f9:
cf:da:76:b9:40:8a:e7:c7:4a:f6:63:0f:31:74:e8:9b:6f:31:
ff:1a:4e:9a:47:ac:05:1f:f5:dd:34:be:24:93:9c:6b:4a:56:
d7:b7:c8:15:eb:24:84:d4:45:8a:a3:f9:d7:69:6c:52:54:40:
0e:a2:1a:6b:f5:b0:c5:50:bf:24:f0:0f:db:43:7a:c5:2a:0c:
56:5e:c7:c1:85:ab:21:bc:b0:14:7f:00:02:65:e1:0a:ef:88:
6f:3b:18:84:da:e5:c5:93:74:ff:62:89:c2:54:74:0a:da:e0:
aa:32:3a:df:f6:a2:ba:d7:ae:d3:48:f2:7a:28:28:a3:5f:bc:
ef:a8:5d:34:9d:e9:18:51:91:33:66:b6:69:67:7d:0c:6a:4e:
12:c2:67:97:23:89:6a:e8:82:23:c0:8e:04:0b:0d:8b:8e:d0:
bc:65:d8:9e:0c:d3:93:a4:91:b0:7e:34:03:b3:3c:4a:9a:84:
a0:3b:75:83
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAZQl/bEuOu3txtFU90C0eNWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmU1MzVlZjIxNmViZTZmN2ZjNTVjZmJkYzMxNTMyYjkxMmQ4ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FN3u5VdTWwH53ahU8ICem24zc3c
gY71DDaI/YJvhjOMs+c2Bhx8Kl2zIR2p7GLYi96vrVv91OQ4XIWVN9M9zFokR6s1
ksQeKxtY02IhDChXVlhZn42dwn4AUvghLvwL0VmVRHhrjFKcRSvA3+QiqiWrSSSb
uYxPIepH4e0eOf45MHw5SncETn6TIQeI2gnZBggA7arwn0jO10cm/Cy4W3pkOEG1
uZCt/q5BCtNHsZ8eA3FqmNq2IrFCN1r0DcHBZYFGG5sChO/8XsX0XOWO9LBu6YVD
EKFb34DeuId7YpE+aUNlUWThwPvqQWZ2AjuwdvJP6ix7OKZej6Xf26hxaQIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFNblNe8hbr5vf8Vc+9wxUyuRLY5jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2JkMGQ3
ZC1mNDI1LTQwOGEtYjA3ZC0wNzcxMWVkMDJiNzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYmQwZDdk
LWY0MjUtNDA4YS1iMDdkLTA3NzExZWQwMmI3NS8xLzF1VTE3eUZ1dm05X3hWejcz
REZUSzVFdGptTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF
BwEHAQH/BEUwQzAyBAIAATAsAwQDLufIAwQFUEqAMAwDBAFRrVIDBAVRrUADBANe
fhADBAK5LjgDBALAohwwDQQCAAIwBwMFACoAESgwHgYIKwYBBQUHAQgBAf8EDzAN
oAswCQICUk0CAwMKGTANBgkqhkiG9w0BAQsFAAOCAQEAP9DPsHsdwmiuW4bCbIYX
KLszkYOORMBDGM4WjORnA6FSWezP5B52WlTGf9n1bBxTGfPSLSBZ/rioAdOh8rn/
gpcTkXs1+cf5z9p2uUCK58dK9mMPMXTom28x/xpOmkesBR/13TS+JJOca0pW17fI
FeskhNRFiqP512lsUlRADqIaa/WwxVC/JPAP20N6xSoMVl7HwYWrIbywFH8AAmXh
Cu+IbzsYhNrlxZN0/2KJwlR0CtrgqjI63/aiuteu00jyeigoo1+876hdNJ3pGFGR
M2a2aWd9DGpOEsJnlyOJauiCI8COBAsNi47QvGXYngzTk6SRsH40A7M8SpqEoDt1
gw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:32 2025 by rpki-client