Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
File: 4GU20rF8RcF1c58zExGb4hnTMaw.cer (raw, json)
Hash identifier: +kDrHGt27PHLjQpqLRbLohV2+wNa7paPi+J5OIF+q3s=
Subject key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6B037058FC6C1C7DF9CF57F739EAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49237
IP: 185.254.76.0/22
IP: 188.92.224.0/21
IP: 2a02:de0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b0:37:05:8f:c6:c1:c7:df:9c:f5:7f:73:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e06536d2b17c45c175739f3313119be219d331ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:2b:0f:ba:db:68:f5:6a:ef:c0:3d:03:99:
32:a8:fe:4b:30:78:8a:59:e4:d1:03:34:46:6c:50:
32:57:7d:1f:d3:f9:4f:20:fd:8e:5f:22:24:b4:64:
d9:de:ee:99:2d:80:52:79:b7:18:88:20:0e:07:b2:
63:93:65:24:04:59:98:38:17:b1:56:5a:13:6a:91:
dc:4a:a6:37:68:1d:f1:dc:5d:4f:33:44:61:5c:03:
9e:35:e4:fc:0d:fa:45:f2:bb:57:5c:1a:eb:ca:9c:
55:65:f9:f9:6f:3c:eb:e3:c1:95:d5:1a:b7:a0:1d:
e8:fb:c3:aa:d7:ef:e4:53:a0:8d:59:5f:dc:1d:2d:
f8:47:b9:fa:b6:2d:e5:38:ef:d7:fd:8b:87:d4:73:
6e:29:3e:9b:d7:5a:eb:d4:a3:19:88:d2:35:8f:6e:
8a:2a:49:ba:4d:3f:d4:69:97:8a:82:42:4e:44:05:
32:47:ae:d1:83:47:ee:26:c6:8d:3a:47:c9:97:61:
b1:47:85:fa:0a:00:11:df:5d:b1:e5:29:7c:59:5c:
47:61:05:64:0f:5f:8a:f0:46:af:7d:8f:bf:7a:16:
de:f1:58:6c:39:84:e0:92:a1:88:60:2f:37:f1:59:
08:31:1f:c3:1a:6a:bf:9b:7c:73:8b:4a:31:1f:67:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.76.0/22
188.92.224.0/21
IPv6:
2a02:de0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49237
Signature Algorithm: sha256WithRSAEncryption
21:83:68:6c:89:8a:a3:59:bd:2e:cb:b7:a0:32:e9:22:2e:7f:
5d:b8:5b:7c:9d:8f:19:72:c9:76:b9:c8:77:d2:cc:b5:df:4e:
fa:ad:1e:47:b3:91:a1:16:6e:3d:91:53:c1:7f:4d:1b:f1:c6:
e8:2d:92:9b:82:09:50:0c:27:04:fb:f9:33:34:a6:23:9e:df:
5d:fc:84:03:d9:92:d1:a7:99:41:10:7d:9c:89:8f:33:1e:5f:
03:49:19:5c:bf:81:45:d0:48:8d:db:58:a8:7a:25:d9:d2:da:
42:8c:4c:5e:35:ab:b2:66:ab:67:d4:01:99:ec:55:86:b2:c8:
b1:ec:0e:34:64:2d:47:c3:b7:3f:4a:35:21:83:fd:93:ec:8e:
43:49:c2:ad:50:1d:71:8a:c3:78:4a:6f:b2:73:a6:3c:31:62:
c2:ee:a2:23:c9:6a:ea:8d:dd:e1:bf:24:82:1d:34:b5:4b:ec:
b3:6a:85:22:c0:44:98:82:78:82:07:c3:f3:b8:b7:33:6b:24:
0e:03:62:7f:74:c1:fb:ff:ad:b7:32:8d:28:bf:82:4f:2a:3a:
f8:5f:c9:c7:a3:65:44:fe:a2:80:73:af:22:98:21:9a:d9:7b:
37:5c:96:a7:53:f8:4a:56:35:2f:fd:be:ca:5d:79:c8:76:53:
c8:63:0f:bb
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQj1rA3BY/GwcffnPV/c56vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDY1MzZkMmIxN2M0NWMxNzU3MzlmMzMxMzExOWJlMjE5ZDMzMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRYrD7rbaPVq78A9A5kyqP5LMHiK
WeTRAzRGbFAyV30f0/lPIP2OXyIktGTZ3u6ZLYBSebcYiCAOB7Jjk2UkBFmYOBex
VloTapHcSqY3aB3x3F1PM0RhXAOeNeT8DfpF8rtXXBrrypxVZfn5bzzr48GV1Rq3
oB3o+8Oq1+/kU6CNWV/cHS34R7n6ti3lOO/X/YuH1HNuKT6b11rr1KMZiNI1j26K
Kkm6TT/UaZeKgkJORAUyR67Rg0fuJsaNOkfJl2GxR4X6CgAR312x5Sl8WVxHYQVk
D1+K8EavfY+/ehbe8VhsOYTgkqGIYC838VkIMR/DGmq/m3xzi0oxH2d5QQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzZlNDNi
OS1jNmE3LTRkNTEtODA2MS0wNmM4YmIzNzRhNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNmU0M2I5
LWM2YTctNGQ1MS04MDYxLTA2YzhiYjM3NGE1OC8xLzRHVTIwckY4UmNGMWM1OHpF
eEdiNGhuVE1hdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuf5MAwQDvFzgMA0EAgACMAcDBQAqAg3gMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDAVTANBgkqhkiG9w0BAQsFAAOCAQEAIYNo
bImKo1m9Lsu3oDLpIi5/XbhbfJ2PGXLJdrnId9LMtd9O+q0eR7ORoRZuPZFTwX9N
G/HG6C2Sm4IJUAwnBPv5MzSmI57fXfyEA9mS0aeZQRB9nImPMx5fA0kZXL+BRdBI
jdtYqHol2dLaQoxMXjWrsmarZ9QBmexVhrLIsewONGQtR8O3P0o1IYP9k+yOQ0nC
rVAdcYrDeEpvsnOmPDFiwu6iI8lq6o3d4b8kgh00tUvss2qFIsBEmIJ4ggfD87i3
M2skDgNif3TB+/+ttzKNKL+CTyo6+F/Jx6NlRP6igHOvIpghmtl7N1yWp1P4SlY1
L/2+yl15yHZTyGMPuw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:16 2025 by rpki-client