Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.cer (raw, json)
Hash identifier: xhF2wa9ba1qmtmus5N8YOO32gCFJIsPz8DEFTlXYe24=
Subject key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252086E0F0812827B2B14FD162A0228F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50951
IP: 91.216.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:86:e0:f0:81:28:27:b2:b1:4f:d1:62:a0:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daafe90f9d081334cc928edee9bc731540708dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:d3:08:85:67:28:ca:37:9e:6b:10:28:4b:
5a:d5:e8:2d:70:b3:17:73:0f:78:65:94:9f:ae:12:
9b:33:4e:ba:28:53:d3:7f:2e:d6:c7:4f:ae:05:e3:
17:68:b2:1a:9e:fa:95:74:ec:01:76:88:c2:7c:72:
3b:03:48:f1:ea:59:0f:c6:ac:c4:de:e1:9c:17:44:
41:d1:5a:9d:87:71:0b:e4:25:47:fa:a6:78:61:10:
6d:4c:30:e6:fe:74:2f:16:09:dc:41:20:ea:f9:a0:
eb:fd:f2:2e:65:f8:ef:20:fb:9f:3d:fb:6a:a5:ad:
03:6d:95:4f:fb:2c:f4:8a:28:a7:4c:d6:d0:b1:86:
89:ed:1e:a1:78:f3:79:81:77:87:76:fc:7c:4b:3f:
5c:9c:e3:1e:33:d9:ac:f1:30:58:9b:0d:92:ba:3a:
fe:cd:7d:2a:11:88:10:c0:1c:6c:5c:a0:47:6a:53:
fa:cf:54:4f:32:a5:6b:fa:a3:aa:c8:ae:8e:4d:32:
d0:b5:fd:ab:cc:30:32:4b:c9:21:f2:32:d8:68:80:
51:79:ef:fa:8e:bf:4b:fb:a1:e2:8c:d1:de:a1:4a:
3f:81:65:68:89:55:74:35:ac:7f:77:3b:9c:d8:11:
77:7a:fd:1c:5f:71:0f:c8:4d:da:06:c5:5a:22:53:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.50.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50951
Signature Algorithm: sha256WithRSAEncryption
02:5d:5b:a9:b2:67:58:be:df:89:20:b9:bd:97:52:c0:e9:0b:
99:86:65:6e:61:00:ba:45:a2:e2:30:91:98:2d:f4:12:a8:06:
ea:d0:e4:ce:91:19:17:9a:3e:75:32:98:ad:c9:2e:76:f4:fb:
5d:f3:fd:48:e2:d7:d2:ef:90:c6:76:18:6f:72:8e:65:1b:48:
b5:b6:e2:65:66:8b:ca:81:a3:e6:9b:e2:f9:21:d1:ae:b8:ac:
2a:57:db:ab:a6:38:9e:7b:77:cd:7a:b1:47:4f:9b:83:80:8e:
ae:67:cd:b6:72:ca:19:2f:33:96:e9:67:3c:6b:a5:d4:95:9d:
46:15:8f:7c:5f:6d:f7:dc:44:20:20:04:80:f7:7a:41:8f:31:
40:0a:4d:2f:47:e3:e3:d4:be:bf:be:e7:d1:39:7f:ef:a3:e4:
73:1e:d8:08:f4:51:e7:41:d2:89:54:52:78:ec:a1:9a:80:37:
f5:cb:d6:5f:f7:bb:73:df:c0:f2:aa:61:2d:ea:e2:af:86:4a:
a4:67:71:d9:73:a0:7a:d6:24:17:b5:38:47:3b:74:28:ed:44:
8a:67:9a:ac:72:82:29:57:61:34:39:12:7f:e1:13:12:46:39:
79:51:14:f9:03:e6:0d:d2:9e:8a:c8:c3:29:2b:e7:0f:36:a6:
10:24:d9:0e
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQlIIbg8IEoJ7KxT9FioCKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWFmZTkwZjlkMDgxMzM0Y2M5MjhlZGVlOWJjNzMxNTQwNzA4ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifjTCIVnKMo3nmsQKEta1egtcLMX
cw94ZZSfrhKbM066KFPTfy7Wx0+uBeMXaLIanvqVdOwBdojCfHI7A0jx6lkPxqzE
3uGcF0RB0Vqdh3EL5CVH+qZ4YRBtTDDm/nQvFgncQSDq+aDr/fIuZfjvIPufPftq
pa0DbZVP+yz0iiinTNbQsYaJ7R6hePN5gXeHdvx8Sz9cnOMeM9ms8TBYmw2Sujr+
zX0qEYgQwBxsXKBHalP6z1RPMqVr+qOqyK6OTTLQtf2rzDAyS8kh8jLYaIBRee/6
jr9L+6HijNHeoUo/gWVoiVV0Nax/dzuc2BF3ev0cX3EPyE3aBsVaIlNJBQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFNqv6Q+dCBM0zJKO3um8cxVAcI39MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzhiYjNj
MS0xOTlkLTQ0OWItYWM0Ni1iYmQ5MmNjYWZhODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvOGJiM2Mx
LTE5OWQtNDQ5Yi1hYzQ2LWJiZDkyY2NhZmE4OC8xLzJxX3BENTBJRXpUTWtvN2U2
Ynh6RlVCd2pmMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9gyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDHBzANBgkqhkiG9w0BAQsFAAOCAQEAAl1bqbJnWL7fiSC5vZdSwOkLmYZlbmEA
ukWi4jCRmC30EqgG6tDkzpEZF5o+dTKYrckudvT7XfP9SOLX0u+QxnYYb3KOZRtI
tbbiZWaLyoGj5pvi+SHRrrisKlfbq6Y4nnt3zXqxR0+bg4COrmfNtnLKGS8zluln
PGul1JWdRhWPfF9t99xEICAEgPd6QY8xQApNL0fj49S+v77n0Tl/76Pkcx7YCPRR
50HSiVRSeOyhmoA39cvWX/e7c9/A8qphLerir4ZKpGdx2XOgetYkF7U4Rzt0KO1E
imearHKCKVdhNDkSf+ETEkY5eVEU+QPmDdKeisjDKSvnDzamECTZDg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:06 2025 by rpki-client