Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
File: 4gXr8GX8SSnxgCZirmLX-XYmAOY.cer (raw, json)
Hash identifier: ITspUVN/02Ur5lwwSlsVb99Ut5rqRo96ILbqWXpI7+g=
Subject key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01956FF394784E40E59275D7D50EF90D8CAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 07 Mar 2025 09:33:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39673
AS: 205036
IP: 91.209.40.0/24
IP: 91.209.48.0/24
IP: 91.209.50.0/24
IP: 91.209.58.0/24
IP: 2a0f:5fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6f:f3:94:78:4e:40:e5:92:75:d7:d5:0e:f9:0d:8c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 7 09:33:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:f1:2f:ae:76:9d:f3:c4:9e:2c:cd:62:d5:
da:08:81:45:69:43:cd:2d:d2:3c:87:48:5f:47:67:
6b:43:20:29:e3:45:e7:57:5b:7d:ab:62:50:63:18:
c7:ce:2a:f2:18:72:ba:cc:a3:29:0d:11:99:b9:7c:
79:71:7a:bb:a5:d2:b0:4e:2d:93:9a:a2:8c:cf:dc:
1f:b9:0c:89:4a:52:1a:6b:fe:0f:02:7c:07:cf:61:
06:15:c1:2f:c8:f0:11:73:5d:55:d6:78:a0:a9:9a:
ca:63:ca:77:75:51:aa:76:06:45:c0:4e:d3:c7:32:
bb:80:8b:9d:05:26:50:c9:da:6e:57:92:5f:02:fb:
0f:87:59:f7:50:54:d0:2c:21:65:c1:cf:86:18:a9:
1a:83:a5:27:ac:2b:60:52:e1:6e:65:51:8f:4a:92:
9d:c2:41:84:78:6b:df:9f:67:86:01:f2:c0:f9:1a:
30:87:33:41:f6:3b:e1:ba:53:e7:17:ec:90:3a:43:
f5:17:23:62:79:fb:28:ae:2e:ef:53:a3:40:95:ab:
c9:21:db:ae:d6:7b:d9:04:ef:63:da:7b:b0:0a:12:
c5:54:56:e2:b0:50:80:33:8e:ab:8e:99:05:8f:bc:
78:92:55:19:43:f6:4e:25:47:0e:8a:90:bd:43:e4:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
91.209.48.0/24
91.209.50.0/24
91.209.58.0/24
IPv6:
2a0f:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39673
205036
Signature Algorithm: sha256WithRSAEncryption
59:12:96:1a:f9:05:dd:d0:61:de:c5:7d:77:7c:b1:11:6c:65:
61:57:a7:4c:54:b7:40:3b:de:e0:35:39:92:4d:31:9d:a5:ea:
d9:47:ec:25:d5:78:0a:81:7a:fe:c9:fc:35:46:3f:82:ad:13:
33:92:d3:fd:d0:42:dc:b2:5f:0e:da:93:92:5c:93:d3:4b:42:
6b:6c:2b:63:61:4f:f6:0d:fc:ff:e5:39:69:47:7c:07:91:7e:
a1:2a:02:62:49:59:18:31:78:e6:93:54:c0:62:90:20:25:12:
4c:a7:69:93:54:e3:a4:d7:99:6d:3b:46:38:cf:6d:16:1b:94:
29:35:4f:f8:b1:2a:9e:d4:65:38:29:54:f8:de:5a:f5:cf:d9:
8a:09:34:05:4f:ff:ad:42:06:09:60:88:a0:ae:cf:20:72:48:
8f:fb:e0:a1:a7:c5:a9:35:3c:b9:eb:65:ec:e7:c7:de:93:4e:
63:92:f6:73:41:2d:72:9a:71:52:2d:f4:5a:29:db:9c:86:9b:
a3:70:64:89:99:1f:69:55:bb:c5:99:aa:e5:4b:c8:e7:ef:af:
29:13:e5:c4:85:9f:fe:b2:64:6c:74:1a:8c:4f:8c:7c:8c:76:
1a:08:1a:be:41:68:79:b2:17:f2:b4:e3:72:e3:c2:79:c6:0a:
ab:97:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:37 2025 by rpki-client