Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.cer (raw, json)
Hash identifier: 44bQgg2T/jFTg6DMnjfeflhMDSQNQlXWfIqkomCLbTQ=
Subject key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80189252FD2FD472C24F76D48057663
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25049
IP: 193.5.128.0/20
IP: 193.36.75.0/24
IP: 193.36.87.0/24
IP: 193.36.152.0 -- 193.36.161.255
IP: 193.46.92.0 -- 193.46.99.255
IP: 193.177.152.0/21
IP: 193.188.134.0/26
IP: 194.13.32.0/19
IP: 194.33.144.0 -- 194.33.148.255
IP: 194.34.16.0 -- 194.34.55.255
IP: 194.37.68.0/22
IP: 194.53.96.0/21
IP: 194.104.150.0/23
IP: 2a00:9cc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:89:25:2f:d2:fd:47:2c:24:f7:6d:48:05:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:14:52:1b:0f:03:3b:49:d8:13:67:7c:cd:
3c:8f:74:5a:5a:16:0c:b8:39:7d:af:29:e8:c7:46:
7c:d4:9d:10:bf:52:2d:f2:4c:79:f7:f2:f5:e0:d8:
f1:7b:7b:22:0d:ed:e3:45:d0:64:88:fe:c7:85:1a:
02:2a:e5:db:76:82:a5:79:9f:8e:de:3c:d3:7f:16:
91:97:d7:26:06:a5:94:28:56:2a:f9:76:fb:75:f7:
4f:04:3a:1e:57:33:d0:9f:39:32:40:86:30:a1:cb:
77:fd:53:f1:f2:7b:a6:d5:0d:7a:17:a1:7c:cf:57:
07:75:f7:40:29:12:f7:3a:26:7a:73:bd:6f:c4:51:
28:4b:80:a6:f5:3f:86:9a:2a:fe:20:8a:a6:72:60:
8c:72:01:bc:4e:da:69:45:f4:6f:31:bc:16:0f:6c:
63:cc:73:78:74:56:ee:72:56:a5:cb:ec:c1:77:65:
84:2d:8d:3c:33:6e:93:aa:d8:8d:ad:3e:5e:ba:ca:
1a:51:f7:fc:f0:75:b2:4c:23:71:3b:9f:c8:be:89:
3c:ac:7b:9d:ca:2b:0b:8f:03:16:84:7e:6e:a6:73:
23:d5:de:91:8c:bb:4e:11:e5:ea:37:37:22:dd:10:
bc:0e:d9:dd:8d:15:fb:c7:b0:d1:0e:85:82:47:d1:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.128.0/20
193.36.75.0/24
193.36.87.0/24
193.36.152.0-193.36.161.255
193.46.92.0-193.46.99.255
193.177.152.0/21
193.188.134.0/26
194.13.32.0/19
194.33.144.0-194.33.148.255
194.34.16.0-194.34.55.255
194.37.68.0/22
194.53.96.0/21
194.104.150.0/23
IPv6:
2a00:9cc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25049
Signature Algorithm: sha256WithRSAEncryption
97:80:1a:3b:dc:b3:23:af:8e:d2:40:16:ad:e6:b9:ad:43:93:
31:6e:1f:7b:db:88:15:1a:b0:3b:c6:ef:b1:7c:57:15:7d:91:
f6:10:f5:af:e7:c7:b5:7b:16:75:68:0a:4c:de:d6:29:1b:f3:
d2:80:49:c7:65:5f:72:28:f2:8c:b9:d4:0a:01:0b:54:f6:2f:
eb:ba:24:b1:60:2a:e5:ce:32:4c:3f:3b:4f:70:bf:4b:5c:7c:
65:f9:54:6f:e6:c0:75:b3:0e:21:53:33:23:60:67:04:00:d8:
b0:d2:f5:32:55:6a:a7:ed:25:28:d6:97:09:be:f6:cf:1f:60:
2d:f0:0b:06:ed:5d:78:c8:d7:a3:bd:d4:dd:23:72:32:aa:dc:
4c:bb:ee:c5:c9:91:23:c8:13:0a:12:6d:27:5e:d0:dc:b3:d2:
25:bf:70:03:c0:18:bf:57:c4:79:37:46:6a:20:40:32:71:5b:
13:9d:41:64:1c:00:79:b6:a7:5e:00:8f:47:62:05:af:28:b9:
a8:aa:0e:2d:f8:10:fd:e7:53:c3:1d:e1:d2:b4:46:83:14:a0:
a1:8e:0e:f2:ae:e8:64:e6:43:2f:d9:b9:c1:02:15:9d:be:90:
bf:16:12:08:9c:79:af:6f:34:50:37:85:b7:e1:1c:f7:3a:58:
00:20:30:ce
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgISAYzIAYklL9L9Rywk921IBXZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTA4MjkxY2ZjNzI4ZDAxNzYwZWM0Mjc4MTA5NmFjNmI0Yzc0YTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPsUUhsPAztJ2BNnfM08j3RaWhYM
uDl9rynox0Z81J0Qv1It8kx59/L14Njxe3siDe3jRdBkiP7HhRoCKuXbdoKleZ+O
3jzTfxaRl9cmBqWUKFYq+Xb7dfdPBDoeVzPQnzkyQIYwoct3/VPx8num1Q16F6F8
z1cHdfdAKRL3OiZ6c71vxFEoS4Cm9T+Gmir+IIqmcmCMcgG8TtppRfRvMbwWD2xj
zHN4dFbuclaly+zBd2WELY08M26TqtiNrT5eusoaUff88HWyTCNxO5/Ivok8rHud
yisLjwMWhH5upnMj1d6RjLtOEeXqNzci3RC8DtndjRX7x7DRDoWCR9FNBQIDAQAB
o4IDGjCCAxYwHQYDVR0OBBYEFNoIKRz8co0Bdg7EJ4EJasa0x0pdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzQ0ZGFj
MC0xNjdhLTQ5OTMtYjlhOC1iMDVjZmZiMTg3ZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNDRkYWMw
LTE2N2EtNDk5My1iOWE4LWIwNWNmZmIxODdmYS8xLzJnZ3BIUHh5alFGMkRzUW5n
UWxxeHJUSFNsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGZBggrBgEF
BQcBBwEB/wSBiTCBhjB1BAIAATBvAwQEwQWAAwQAwSRLAwQAwSRXMAwDBAPBJJgD
BAHBJKAwDAMEAsEuXAMEAsEuYAMEA8GxmAMFBsG8hgADBAXCDSAwDAMEBMIhkAME
AMIhlDAMAwQEwiIQAwQDwiIwAwQCwiVEAwQDwjVgAwQBwmiWMA0EAgACMAcDBQAq
AJzAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmHZMA0GCSqGSIb3DQEBCwUAA4IB
AQCXgBo73LMjr47SQBat5rmtQ5Mxbh9724gVGrA7xu+xfFcVfZH2EPWv58e1exZ1
aApM3tYpG/PSgEnHZV9yKPKMudQKAQtU9i/ruiSxYCrlzjJMPztPcL9LXHxl+VRv
5sB1sw4hUzMjYGcEANiw0vUyVWqn7SUo1pcJvvbPH2At8AsG7V14yNejvdTdI3Iy
qtxMu+7FyZEjyBMKEm0nXtDcs9Ilv3ADwBi/V8R5N0ZqIEAycVsTnUFkHAB5tqde
AI9HYgWvKLmoqg4t+BD951PDHeHStEaDFKChjg7yruhk5kMv2bnBAhWdvpC/FhII
nHmvbzRQN4W34Rz3OlgAIDDO
-----END CERTIFICATE-----
Generated at Fri Apr 26 06:31:43 2024 by rpki-client on console-ams.rpki-client.org