Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
File: 3KonREWCbj15XD7RjCdwDurBymI.cer (raw, json)
Hash identifier: bTFELtwjsCxvcrg7VWCOx0OsGGYmQJuvL1Epacoda20=
Subject key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C38502BA56789D2A1C0A7178C4C4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207040
IP: 185.163.132.0/22
IP: 2a0b:e800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:50:2b:a5:67:89:d2:a1:c0:a7:17:8c:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:c2:21:92:e4:d2:b0:d0:b2:64:ac:de:3e:
26:de:33:10:48:d1:de:08:65:94:ad:1d:3c:51:e9:
42:53:21:16:13:ba:de:a3:4d:c5:11:0e:e8:b7:4c:
9f:51:09:a7:01:c3:82:7d:73:e5:7f:b1:04:08:f3:
87:f9:c6:c2:f4:ef:a1:24:83:d7:ed:fe:7a:5e:b3:
12:76:2d:7f:4b:d1:d1:9d:d9:0e:9d:45:d8:08:ca:
b5:0d:3b:3a:92:fd:c6:32:6d:65:2d:24:e8:03:49:
dd:bc:31:a0:9c:bc:bc:a6:0c:46:e1:89:79:72:c1:
48:2d:34:36:f8:12:f0:3a:72:ad:e6:86:a8:04:03:
17:fb:b1:62:f0:f7:dc:8d:3d:e9:eb:b2:f8:58:14:
64:7e:46:33:ee:2d:e6:ba:34:7f:79:44:eb:f1:2d:
49:80:fa:65:37:8a:b1:f6:0e:6f:3b:8c:16:ce:c1:
d4:90:8e:2d:a4:71:a3:36:84:85:bb:ba:f9:aa:cf:
5f:38:f6:1a:bf:3a:75:26:89:64:28:f5:5b:7d:db:
6c:8d:c8:ad:0d:68:61:d2:86:0f:c2:dc:8e:a5:ce:
2c:12:06:47:6b:d4:55:d3:86:d1:04:51:df:a7:88:
8e:59:89:e9:3f:20:9d:88:a4:be:b3:32:c5:bc:e3:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
IPv6:
2a0b:e800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207040
Signature Algorithm: sha256WithRSAEncryption
9c:31:5b:dd:b0:d9:b2:9e:ad:63:e0:40:c6:fb:87:38:0a:e5:
3e:9e:cf:be:09:9c:6c:9a:c9:aa:01:27:3c:64:b4:2d:70:f5:
cb:42:4e:4e:1d:12:de:15:35:62:01:a4:e1:05:03:fb:40:88:
ba:96:77:6e:77:b7:da:0c:e8:f0:32:8d:ec:81:e2:b9:24:da:
93:69:15:67:14:5c:ab:8d:37:a7:44:28:23:79:90:4d:25:53:
ea:a3:af:e2:1b:f5:8e:77:46:ee:f5:ad:fa:50:ec:d4:d8:30:
1e:19:0d:b3:81:cb:e6:58:e3:a3:be:83:43:bc:25:88:9b:1d:
bc:bf:6a:e2:36:50:3f:d1:47:3f:d8:d3:4c:66:bd:df:1d:08:
eb:f6:0c:5f:53:6a:60:c9:81:80:0c:85:84:af:af:16:df:cc:
87:90:ac:5b:05:80:6a:50:fc:b6:4c:6d:cf:0a:f4:39:f1:ef:
55:3b:e5:fe:4c:e8:f5:9b:38:be:20:7f:58:0d:6c:21:69:e7:
f3:37:15:b5:ad:e2:b3:74:3b:c3:78:0f:e1:c3:6f:22:de:0d:
60:07:6b:60:23:7f:de:13:8c:43:41:e0:ad:b5:73:04:48:16:
80:70:34:ac:14:72:34:93:e1:3a:37:b0:30:9b:a8:c8:d8:a0:
72:1f:80:46
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjDhQK6VnidKhwKcXjExLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2FhMjc0NDQ1ODI2ZTNkNzk1YzNlZDE4YzI3NzAwZWVhYzFjYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ODCIZLk0rDQsmSs3j4m3jMQSNHe
CGWUrR08UelCUyEWE7reo03FEQ7ot0yfUQmnAcOCfXPlf7EECPOH+cbC9O+hJIPX
7f56XrMSdi1/S9HRndkOnUXYCMq1DTs6kv3GMm1lLSToA0ndvDGgnLy8pgxG4Yl5
csFILTQ2+BLwOnKt5oaoBAMX+7Fi8PfcjT3p67L4WBRkfkYz7i3mujR/eUTr8S1J
gPplN4qx9g5vO4wWzsHUkI4tpHGjNoSFu7r5qs9fOPYavzp1JolkKPVbfdtsjcit
DWhh0oYPwtyOpc4sEgZHa9RV04bRBFHfp4iOWYnpPyCdiKS+szLFvOP3fwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNyqJ0RFgm49eVw+0YwncA7qwcpiMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzE4ODIx
OC05ZWU3LTQwY2MtOGQxMi05YTgyNDNlODRlNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMTg4MjE4
LTllZTctNDBjYy04ZDEyLTlhODI0M2U4NGU1NC8xLzNLb25SRVdDYmoxNVhEN1Jq
Q2R3RHVyQnltSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuaOEMA0EAgACMAcDBQMqC+gAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMowDANBgkqhkiG9w0BAQsFAAOCAQEAnDFb3bDZsp6t
Y+BAxvuHOArlPp7PvgmcbJrJqgEnPGS0LXD1y0JOTh0S3hU1YgGk4QUD+0CIupZ3
bne32gzo8DKN7IHiuSTak2kVZxRcq403p0QoI3mQTSVT6qOv4hv1jndG7vWt+lDs
1NgwHhkNs4HL5ljjo76DQ7wliJsdvL9q4jZQP9FHP9jTTGa93x0I6/YMX1NqYMmB
gAyFhK+vFt/Mh5CsWwWAalD8tkxtzwr0OfHvVTvl/kzo9Zs4viB/WA1sIWnn8zcV
ta3is3Q7w3gP4cNvIt4NYAdrYCN/3hOMQ0HgrbVzBEgWgHA0rBRyNJPhOjewMJuo
yNigch+ARg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:14:51 2025 by rpki-client