Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
File: 5_7U53ggnDyuk9S3bTUHBEYsOqs.cer (raw, json)
Hash identifier: i6c4kpbMT51iDA6dPORY4p0+YBEIwa1EGT1dZWgZJE8=
Subject key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC6F28FC53EC1366B03A311469A49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39501
AS: 59703
IP: 45.140.28.0/22
IP: 85.204.30.0/23
IP: 85.204.76.0/23
IP: 85.204.104.0/23
IP: 86.104.232.0/21
IP: 89.32.196.0/23
IP: 89.33.18.0/23
IP: 89.33.129.0/24
IP: 89.33.204.0/23
IP: 89.33.234.0/23
IP: 89.33.240.0/23
IP: 89.34.20.0/23
IP: 89.34.88.0/23
IP: 89.34.94.0/23
IP: 89.34.168.0/23
IP: 89.34.176.0/23
IP: 89.34.200.0/23
IP: 89.35.58.0/23
IP: 89.35.132.0/23
IP: 89.35.156.0/23
IP: 89.35.176.0/23
IP: 89.35.194.0/23
IP: 89.36.16.0/23
IP: 89.36.194.0/23
IP: 89.36.226.0/23
IP: 89.36.252.0/23
IP: 89.37.30.0/23
IP: 89.37.42.0/23
IP: 89.37.102.0/23
IP: 89.37.198.0/23
IP: 89.37.218.0/23
IP: 89.38.24.0/23
IP: 89.38.102.0/23
IP: 89.38.242.0/23
IP: 89.39.186.0/23
IP: 89.40.38.0/23
IP: 89.40.78.0/23
IP: 89.40.90.0/23
IP: 89.40.106.0/23
IP: 89.40.110.0/23
IP: 89.40.128.0/23
IP: 89.41.8.0 -- 89.41.23.255
IP: 89.41.32.0/23
IP: 89.41.58.0/23
IP: 89.41.240.0/21
IP: 89.42.32.0/23
IP: 89.42.56.0/23
IP: 89.42.68.0/23
IP: 89.42.150.0/23
IP: 89.42.228.0/23
IP: 89.43.36.0/23
IP: 89.43.70.0/23
IP: 89.43.88.0 -- 89.43.103.255
IP: 89.43.182.0/23
IP: 89.43.188.0/23
IP: 89.43.204.0/23
IP: 89.44.112.0/23
IP: 89.44.118.0/23
IP: 89.44.146.0/23
IP: 89.44.190.0/23
IP: 89.44.202.0/23
IP: 89.45.68.0/23
IP: 89.45.80.0/23
IP: 89.45.126.0/23
IP: 89.45.230.0/23
IP: 89.46.44.0/23
IP: 89.46.60.0/23
IP: 89.46.94.0/23
IP: 89.165.0.0/17
IP: 94.176.32.0/21
IP: 94.177.72.0/21
IP: 185.46.0.0/22
IP: 188.158.0.0 -- 188.159.223.255
IP: 188.214.120.0/23
IP: 2a00:1fe0::/32
IP: 2a0e:d540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c6:f2:8f:c5:3e:c1:36:6b:03:a3:11:46:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:21:91:4b:f9:62:a0:57:b3:77:e0:d8:b6:
35:8b:12:d5:25:0b:f7:85:27:e0:b8:d4:b1:31:1b:
7f:b6:95:5f:57:b8:06:fb:f3:13:23:1e:c5:7d:3f:
85:db:b5:4b:a7:37:5b:98:0f:69:2f:1f:6f:db:af:
38:ae:10:d8:ba:1a:60:5b:db:44:32:27:d5:51:cb:
71:96:e5:94:e7:5d:5e:8c:18:a7:54:73:66:a8:b1:
e0:e9:fb:61:01:22:fc:bb:0b:a6:64:1c:37:ef:f1:
89:00:c3:c9:01:93:b8:4a:f8:d9:db:df:3b:fa:58:
e0:2d:41:d4:be:d9:20:c5:2e:cb:f3:08:3b:2c:ca:
d1:ba:57:ef:a3:a1:00:75:cf:2b:9e:3c:33:56:f4:
b7:5e:1b:77:6b:1d:2c:af:02:d8:ac:7a:e6:ae:52:
a9:e1:64:7f:ed:c0:08:33:9f:25:d5:3e:af:d7:1c:
86:46:fb:60:82:e4:ff:7a:4a:77:ba:35:a7:f0:b9:
93:2f:f7:14:2e:1d:8b:2f:ea:e3:cb:20:ff:a7:86:
c7:1d:fd:b0:21:cc:e4:ea:ba:86:06:f1:6d:4f:a0:
f2:06:cf:4f:25:51:ad:b8:88:f1:a0:e0:f9:d6:ab:
c4:a7:ee:20:f1:a0:c8:0a:b4:50:8c:3e:86:4d:5e:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.129.0/24
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.68.0/23
89.45.80.0/23
89.45.126.0/23
89.45.230.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
188.214.120.0/23
IPv6:
2a00:1fe0::/32
2a0e:d540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39501
59703
Signature Algorithm: sha256WithRSAEncryption
55:85:f3:93:be:a9:8d:51:97:cf:fa:8b:23:2e:9f:e7:5e:a5:
0b:c9:d9:a3:93:ee:16:40:92:7c:c2:85:88:2c:f2:5c:f1:14:
31:12:11:2c:f3:e9:c4:f8:95:ad:8a:8b:c8:4d:1b:9e:b0:c5:
4d:f3:a5:e0:e0:46:9c:f2:78:8d:b4:87:ee:ab:32:a9:49:67:
a6:96:25:01:e6:41:35:ac:2c:cb:64:fc:90:a4:19:ee:e7:7d:
c9:68:63:1d:82:c9:b2:49:4c:dc:c2:b8:f6:d4:a6:18:a7:dd:
5b:8b:75:5a:42:fa:c8:e0:82:b7:1c:61:1c:7d:1d:4c:5a:48:
60:09:04:42:a2:94:bf:ad:80:77:13:e0:bb:66:5b:20:02:f5:
bd:2d:9b:35:de:3d:25:9c:70:47:b2:71:35:c4:4c:11:d6:e3:
1c:3e:30:de:4e:9d:1a:c4:f3:d8:92:5e:a8:0c:ea:6e:35:6c:
8a:e9:11:fa:29:e2:8b:28:c6:c9:a5:81:2a:82:a6:3d:4b:f9:
a7:0a:bf:d0:ce:2a:9d:2c:3d:9c:79:96:7c:85:b8:0d:21:52:
ce:28:50:0a:24:55:15:a1:16:5d:12:9a:31:5c:9b:ca:54:5d:
6a:a8:99:4d:8f:f1:a6:a5:85:a8:35:93:71:b3:ab:d7:3a:07:
d8:cb:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:48 2025 by rpki-client