Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.cer (raw, json)
Hash identifier: DaSLPjRwJq6ERNliryG0gU05rf23JNIOK+gCt47jCQw=
Subject key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214456FCEDA62949014E39C7A52C3C3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34941
IP: 85.118.200.0/21
IP: 185.112.136.0/22
IP: 2a06:6180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:56:fc:ed:a6:29:49:01:4e:39:c7:a5:2c:3c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:43:84:06:63:8a:a8:db:1d:1e:93:32:98:
ef:6b:a9:b1:76:9a:a4:38:fc:17:db:0e:6a:8b:a6:
1c:b7:bf:3f:6b:41:79:6b:e6:12:06:17:69:59:de:
b5:21:5f:db:11:5c:df:27:9d:23:93:83:1c:8c:81:
e1:c7:ad:bb:98:d8:4b:aa:2d:63:b2:80:dc:ed:5c:
34:43:dc:c4:fd:31:a5:a3:f9:5a:ca:c5:d0:85:8a:
b9:93:83:1d:08:ba:44:70:1c:93:09:0d:c8:af:05:
84:de:ac:8a:ec:9f:91:62:96:76:7e:f1:96:45:77:
c9:df:98:66:68:31:5c:70:c7:68:3a:b8:de:e3:41:
76:f2:c4:b8:e8:44:ed:dd:f0:c0:7b:58:c9:5f:f9:
11:6f:41:8f:9b:b0:86:42:4a:c5:cf:fe:53:af:58:
a3:f7:a8:1b:3c:70:23:e3:1e:0d:0e:3a:a1:77:e9:
69:21:02:2b:ab:cc:5a:19:7e:ca:0d:8a:79:13:61:
b4:3d:31:9e:68:49:35:2d:1b:ff:b8:62:00:a7:7f:
96:78:d0:30:fb:31:f9:13:64:34:c8:f0:99:c2:f3:
09:8e:60:1f:12:95:35:f7:d7:e2:c1:35:f2:20:ac:
37:e1:6d:3d:2d:7a:20:84:a0:85:49:e5:45:4f:e3:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.200.0/21
185.112.136.0/22
IPv6:
2a06:6180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34941
Signature Algorithm: sha256WithRSAEncryption
19:56:10:ed:37:7c:9c:77:89:bb:61:6f:02:61:93:27:c2:e2:
33:85:0d:c7:92:01:7f:f5:07:98:60:b1:28:c4:9c:8c:c3:4d:
ab:63:ba:42:46:8b:86:9a:9d:86:57:cd:91:07:26:08:c2:86:
5b:4e:c1:0f:52:a1:d5:e2:c6:05:34:0c:47:da:21:01:f7:d3:
d4:05:9f:31:05:c5:c4:00:89:ea:5d:6e:e5:3e:70:73:40:66:
dc:8b:7c:82:53:3e:e8:e5:ac:02:1e:33:fd:77:ca:a1:d6:8d:
7e:88:ca:49:dc:61:02:ef:7a:d6:38:5a:5d:b3:e3:29:56:17:
9c:99:e0:39:f9:c9:cf:2b:fe:41:6c:4b:74:16:fe:6b:17:72:
27:f9:01:92:bf:29:dd:aa:86:b5:e5:76:72:b3:83:7a:42:1f:
e6:70:4e:21:c1:51:6c:74:12:c0:b3:d0:c2:9a:a4:96:61:f2:
4b:47:42:ba:51:2f:72:01:67:5d:8b:1c:45:0b:70:d4:c8:4c:
dd:dd:e4:6d:f4:bb:7d:d4:bf:9e:39:f0:28:34:6e:d7:e9:09:
27:9d:f6:04:35:3e:e8:5d:36:3a:1f:7a:73:75:71:de:e5:37:
ef:09:b3:91:18:f3:8a:35:1d:80:f9:d3:fb:77:8e:82:f2:b5:
ee:61:c3:2e
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQhRFb87aYpSQFOOcelLDw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjc3NTM4ZGVjMmVmY2QyZjExY2M2MzcxOTdkMWQ5YTZmZGFlOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw5DhAZjiqjbHR6TMpjva6mxdpqk
OPwX2w5qi6Yct78/a0F5a+YSBhdpWd61IV/bEVzfJ50jk4McjIHhx627mNhLqi1j
soDc7Vw0Q9zE/TGlo/laysXQhYq5k4MdCLpEcByTCQ3IrwWE3qyK7J+RYpZ2fvGW
RXfJ35hmaDFccMdoOrje40F28sS46ETt3fDAe1jJX/kRb0GPm7CGQkrFz/5Tr1ij
96gbPHAj4x4NDjqhd+lpIQIrq8xaGX7KDYp5E2G0PTGeaEk1LRv/uGIAp3+WeNAw
+zH5E2Q0yPCZwvMJjmAfEpU199fiwTXyIKw34W09LXoghKCFSeVFT+PBkwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFOJ3U43sLvzS8RzGNxl9HZpv2unZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2EzMWRk
Yi0xZmQyLTQ2MWMtYmZlYi04MmVlMmQyYjQyODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYTMxZGRi
LTFmZDItNDYxYy1iZmViLTgyZWUyZDJiNDI4OS8xLzRuZFRqZXd1X05MeEhNWTNH
WDBkbW1fYTZkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDVXbIAwQCuXCIMA0EAgACMAcDBQMqBmGAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCIfTANBgkqhkiG9w0BAQsFAAOCAQEAGVYQ
7Td8nHeJu2FvAmGTJ8LiM4UNx5IBf/UHmGCxKMScjMNNq2O6QkaLhpqdhlfNkQcm
CMKGW07BD1Kh1eLGBTQMR9ohAffT1AWfMQXFxACJ6l1u5T5wc0Bm3It8glM+6OWs
Ah4z/XfKodaNfojKSdxhAu961jhaXbPjKVYXnJngOfnJzyv+QWxLdBb+axdyJ/kB
kr8p3aqGteV2crODekIf5nBOIcFRbHQSwLPQwpqklmHyS0dCulEvcgFnXYscRQtw
1MhM3d3kbfS7fdS/njnwKDRu1+kJJ532BDU+6F02Oh96c3Vx3uU37wmzkRjzijUd
gPnT+3eOgvK17mHDLg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:21:38 2025 by rpki-client