Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer (raw, json)
Hash identifier: LWZQFi5J2BkUIAC5LCEF+Qs4v9yh8/21sjf2dU+5UOM=
Subject key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49312B68F629728E38A583637B98F3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15943
IP: 2.57.116.0/22
IP: 31.29.32.0/19
IP: 31.172.104.0/21
IP: 37.122.136.0/21
IP: 45.82.192.0/22
IP: 45.131.16.0/22
IP: 45.157.100.0/22
IP: 45.159.176.0/22
IP: 46.22.0.0/20
IP: 46.59.128.0/17
IP: 77.223.8.0 -- 77.223.31.255
IP: 80.245.104.0/22
IP: 81.25.160.0/20
IP: 84.46.0.0/17
IP: 84.242.16.0/20
IP: 94.72.128.0/21
IP: 94.72.168.0/21
IP: 94.72.184.0/21
IP: 95.81.0.0/19
IP: 95.129.0.0/21
IP: 95.163.160.0/20
IP: 109.230.96.0/20
IP: 134.101.128.0/17
IP: 149.224.0.0/16
IP: 149.233.128.0/17
IP: 149.249.16.0/20
IP: 149.249.248.0/22
IP: 176.109.192.0/19
IP: 185.23.224.0/22
IP: 185.29.240.0/22
IP: 185.82.16.0/22
IP: 185.207.4.0/22
IP: 185.215.236.0/22
IP: 185.220.216.0/22
IP: 185.232.32.0/22
IP: 188.136.224.0/19
IP: 192.119.48.0/20
IP: 192.196.192.0/20
IP: 193.178.56.0/22
IP: 193.218.16.0/20
IP: 195.123.96.0/20
IP: 195.250.0.0/20
IP: 212.127.32.0/19
IP: 212.146.136.0 -- 212.146.159.255
IP: 213.21.32.0/20
IP: 213.195.24.0/21
IP: 213.209.64.0/18
IP: 216.83.208.0/20
IP: 2a02:2028::/32
IP: 2a04:4540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:12:b6:8f:62:97:28:e3:8a:58:36:37:b9:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5503498ff185d0c607353f43f55e911f62a6802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:c3:e1:0a:80:73:76:c4:f0:3b:1c:00:f8:
b7:66:f8:d7:70:61:a1:57:20:a8:63:8d:34:c9:56:
7f:2c:b6:d8:99:5f:24:9b:0c:c1:d6:97:62:f9:7a:
af:ff:81:6c:51:e8:3b:32:3c:e0:f9:8d:c0:52:b3:
c5:00:a9:f7:3f:f2:d4:db:fc:6c:c9:d1:e8:f5:32:
92:86:58:a9:c9:86:a0:62:91:e7:e7:c9:71:14:2f:
72:5d:f8:35:b3:ce:65:ac:66:89:3f:d6:b1:df:af:
9c:1d:43:a3:b6:a6:b4:9d:d9:5f:07:7d:64:49:40:
87:02:20:e8:21:86:e0:b2:d1:d0:c1:db:52:49:9b:
f9:68:30:6c:90:f9:9a:b3:3f:7a:29:27:68:9c:04:
75:a0:0c:e3:f7:49:18:c3:14:81:6f:5c:19:ff:88:
f2:d9:40:97:52:fa:c6:d5:bb:fd:9b:53:42:70:97:
22:6f:ca:66:18:9e:29:44:98:56:56:83:be:bb:73:
a1:90:ab:54:01:28:28:c5:10:08:bb:9e:64:fa:f3:
32:f6:81:0e:34:2e:e3:06:9e:6e:34:5a:c4:84:00:
ca:02:f3:85:c9:eb:d3:73:41:94:ee:43:bc:fe:7c:
ce:2f:17:7e:df:41:f8:77:0c:90:64:68:0c:db:39:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.116.0/22
31.29.32.0/19
31.172.104.0/21
37.122.136.0/21
45.82.192.0/22
45.131.16.0/22
45.157.100.0/22
45.159.176.0/22
46.22.0.0/20
46.59.128.0/17
77.223.8.0-77.223.31.255
80.245.104.0/22
81.25.160.0/20
84.46.0.0/17
84.242.16.0/20
94.72.128.0/21
94.72.168.0/21
94.72.184.0/21
95.81.0.0/19
95.129.0.0/21
95.163.160.0/20
109.230.96.0/20
134.101.128.0/17
149.224.0.0/16
149.233.128.0/17
149.249.16.0/20
149.249.248.0/22
176.109.192.0/19
185.23.224.0/22
185.29.240.0/22
185.82.16.0/22
185.207.4.0/22
185.215.236.0/22
185.220.216.0/22
185.232.32.0/22
188.136.224.0/19
192.119.48.0/20
192.196.192.0/20
193.178.56.0/22
193.218.16.0/20
195.123.96.0/20
195.250.0.0/20
212.127.32.0/19
212.146.136.0-212.146.159.255
213.21.32.0/20
213.195.24.0/21
213.209.64.0/18
216.83.208.0/20
IPv6:
2a02:2028::/32
2a04:4540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15943
Signature Algorithm: sha256WithRSAEncryption
51:12:39:32:d0:78:d9:f0:1f:94:a6:61:45:4e:00:5c:09:ea:
c0:ca:5f:b3:d7:cb:2a:ca:16:41:59:fe:42:5a:43:d7:6a:9e:
f5:37:d5:df:16:56:f9:4e:98:00:94:df:be:30:ba:a5:69:96:
30:f6:74:d2:a2:6b:5b:aa:d3:f7:b1:f3:1d:6e:7a:62:ea:65:
14:58:5f:68:38:bb:34:65:11:97:09:c3:6d:83:1a:bb:e8:eb:
19:44:8f:7c:bb:d6:dc:3c:25:a9:dc:c9:43:2d:7a:1b:4a:b3:
a3:9a:34:5c:5e:f0:0f:36:f0:ac:e8:11:1b:91:1b:8e:35:e1:
a9:0d:83:6e:1f:c6:51:4c:92:3d:66:43:67:c9:c2:99:de:5d:
a4:0b:ae:b6:e2:13:c8:81:66:ce:94:d1:91:27:32:46:e4:d1:
d0:7e:24:af:ad:2f:5c:db:28:ac:6b:16:d8:c0:4f:94:a4:81:
85:f8:5a:3b:ea:85:6d:cf:26:4b:21:22:b0:14:f2:a5:ac:9a:
ba:be:f9:85:57:ce:98:8b:ec:78:0f:a6:fb:7c:b1:00:24:47:
6a:7e:dc:ae:ee:09:0c:0e:c8:e0:8d:3e:9c:4d:c8:10:26:27:
0b:bb:70:e5:6f:6d:15:03:70:a8:ba:dc:c8:8a:2e:b3:95:ef:
1d:19:54:d7
-----BEGIN CERTIFICATE-----
MIIG3DCCBcSgAwIBAgISAYzEkxK2j2KXKOOKWDY3uY8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTUwMzQ5OGZmMTg1ZDBjNjA3MzUzZjQzZjU1ZTkxMWY2MmE2ODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmrD4QqAc3bE8DscAPi3ZvjXcGGh
VyCoY400yVZ/LLbYmV8kmwzB1pdi+Xqv/4FsUeg7Mjzg+Y3AUrPFAKn3P/LU2/xs
ydHo9TKShlipyYagYpHn58lxFC9yXfg1s85lrGaJP9ax36+cHUOjtqa0ndlfB31k
SUCHAiDoIYbgstHQwdtSSZv5aDBskPmasz96KSdonAR1oAzj90kYwxSBb1wZ/4jy
2UCXUvrG1bv9m1NCcJcib8pmGJ4pRJhWVoO+u3OhkKtUASgoxRAIu55k+vMy9oEO
NC7jBp5uNFrEhADKAvOFyevTc0GU7kO8/nzOLxd+30H4dwyQZGgM2zlggwIDAQAB
o4ID6DCCA+QwHQYDVR0OBBYEFOVQNJj/GF0MYHNT9D9V6RH2KmgCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzk3YjBi
Yy1mNGY4LTRmOTAtODU1NC0xZTI3OWY3YjYwMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvOTdiMGJj
LWY0ZjgtNGY5MC04NTU0LTFlMjc5ZjdiNjAyMy8xLzVWQTBtUDhZWFF4Z2MxUDBQ
MVhwRWZZcWFBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBZgYIKwYB
BQUHAQcBAf8EggFVMIIBUTCCATcEAgABMIIBLwMEAgI5dAMEBR8dIAMEAx+saAME
AyV6iAMEAi1SwAMEAi2DEAMEAi2dZAMEAi2fsAMEBC4WAAMEBy47gDAMAwQDTd8I
AwQFTd8AAwQCUPVoAwQEURmgAwQHVC4AAwQEVPIQAwQDXkiAAwQDXkioAwQDXki4
AwQFX1EAAwQDX4EAAwQEX6OgAwQEbeZgAwQHhmWAAwMAleADBAeV6YADBASV+RAD
BAKV+fgDBAWwbcADBAK5F+ADBAK5HfADBAK5UhADBAK5zwQDBAK51+wDBAK53NgD
BAK56CADBAW8iOADBATAdzADBATAxMADBALBsjgDBATB2hADBATDe2ADBATD+gAD
BAXUfyAwDAMEA9SSiAMEBdSSgAMEBNUVIAMEA9XDGAMEBtXRQAMEBNhT0DAUBAIA
AjAOAwUAKgIgKAMFAyoERUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPkcwDQYJ
KoZIhvcNAQELBQADggEBAFESOTLQeNnwH5SmYUVOAFwJ6sDKX7PXyyrKFkFZ/kJa
Q9dqnvU31d8WVvlOmACU374wuqVpljD2dNKia1uq0/ex8x1uemLqZRRYX2g4uzRl
EZcJw22DGrvo6xlEj3y71tw8JancyUMtehtKs6OaNFxe8A828KzoERuRG4414akN
g24fxlFMkj1mQ2fJwpneXaQLrrbiE8iBZs6U0ZEnMkbk0dB+JK+tL1zbKKxrFtjA
T5SkgYX4WjvqhW3PJkshIrAU8qWsmrq++YVXzpiL7HgPpvt8sQAkR2p+3K7uCQwO
yOCNPpxNyBAmJwu7cOVvbRUDcKi63MiKLrOV7x0ZVNc=
-----END CERTIFICATE-----
Generated at Tue Apr 23 19:24:49 2024 by rpki-client on console-ams.rpki-client.org