Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
File: 5_iBQBq6zIjJQf33QPGrFTbwXbo.cer (raw, json)
Hash identifier: fBYjKKbLZnq/1xVXTFk2wIuBWa32MZqnQdGQwCtoCDE=
Subject key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01927B6618DAACC7D77DD252D2702661A464
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Oct 2024 11:45:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5578
AS: 6726
AS: 6803
AS: 8288
AS: 16160
AS: 16295
AS: 20579
AS: 48133
IP: 45.146.244.0/22
IP: 62.65.160.0/19
IP: 62.152.224.0/19
IP: 62.168.64.0/18
IP: 62.197.192.0/18
IP: 80.250.240.0/20
IP: 81.88.128.0/20
IP: 82.119.224.0/20
IP: 83.168.128.0/18
IP: 84.245.64.0/18
IP: 85.248.0.0/16
IP: 92.60.56.0/21
IP: 94.124.144.0/21
IP: 94.228.80.0/20
IP: 185.121.64.0/22
IP: 185.130.220.0/22
IP: 185.220.120.0/22
IP: 188.123.96.0/20
IP: 188.123.116.0/22
IP: 193.58.192.0 -- 193.58.197.255
IP: 193.110.186.0/23
IP: 194.1.172.0/22
IP: 194.1.224.0/21
IP: 195.12.128.0/19
IP: 195.46.64.0/19
IP: 195.72.0.0/19
IP: 195.98.0.0/19
IP: 195.168.0.0/16
IP: 212.26.160.0/19
IP: 212.81.0.0/19
IP: 213.215.64.0/18
IP: 217.67.16.0/20
IP: 217.75.64.0/19
IP: 217.118.96.0/20
IP: 217.172.144.0/20
IP: 2001:1ba0::/32
IP: 2a00:1298::/32
IP: 2a02:770::/32
IP: 2a03:f040::/32
IP: 2a06:dbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:66:18:da:ac:c7:d7:7d:d2:52:d2:70:26:61:a4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 11:45:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:b4:75:97:ec:e0:da:c7:8e:38:ad:49:db:
e0:a7:ff:5d:ed:17:71:be:94:a7:4e:04:dc:14:31:
a0:0b:47:f0:fe:cd:f8:b3:d9:32:46:21:92:d1:8d:
e5:c4:74:0e:ea:dd:b6:b5:16:01:85:56:ef:82:dd:
e9:18:7d:9c:4d:9f:1b:80:e1:05:24:1e:d3:dd:89:
f9:33:fe:bc:53:ae:95:26:4a:20:3a:d9:4e:f0:9c:
0f:aa:a3:91:0c:60:11:0d:a3:e8:c7:3c:5a:2a:68:
99:c7:79:48:94:45:72:68:8f:09:39:b8:4b:1f:82:
90:1c:af:dc:da:cd:5f:d8:4f:f6:93:fe:01:e2:40:
cf:03:e6:af:73:9c:49:1e:e1:5b:d5:a4:69:33:30:
3e:32:f4:0a:fb:af:e7:07:2e:1e:b4:7e:9b:18:50:
5c:af:37:64:4b:ec:61:8e:cf:21:bc:18:13:b2:e5:
d8:26:a0:87:2a:63:0b:88:06:7d:22:eb:54:e7:02:
97:61:7d:d6:e7:d5:5f:d3:a0:0d:e4:bc:6e:5b:15:
92:7d:f8:f8:17:a3:38:2e:4f:d5:43:68:51:29:86:
cd:4b:96:35:a6:a5:e8:0a:93:98:8b:a2:6f:38:07:
3c:de:62:1e:c9:d8:aa:e1:8f:02:af:44:68:1d:01:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.244.0/22
62.65.160.0/19
62.152.224.0/19
62.168.64.0/18
62.197.192.0/18
80.250.240.0/20
81.88.128.0/20
82.119.224.0/20
83.168.128.0/18
84.245.64.0/18
85.248.0.0/16
92.60.56.0/21
94.124.144.0/21
94.228.80.0/20
185.121.64.0/22
185.130.220.0/22
185.220.120.0/22
188.123.96.0/20
188.123.116.0/22
193.58.192.0-193.58.197.255
193.110.186.0/23
194.1.172.0/22
194.1.224.0/21
195.12.128.0/19
195.46.64.0/19
195.72.0.0/19
195.98.0.0/19
195.168.0.0/16
212.26.160.0/19
212.81.0.0/19
213.215.64.0/18
217.67.16.0/20
217.75.64.0/19
217.118.96.0/20
217.172.144.0/20
IPv6:
2001:1ba0::/32
2a00:1298::/32
2a02:770::/32
2a03:f040::/32
2a06:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5578
6726
6803
8288
16160
16295
20579
48133
Signature Algorithm: sha256WithRSAEncryption
6c:3e:d9:47:85:05:28:2a:06:eb:1a:1e:8e:bb:f6:48:78:2f:
65:4e:34:d8:31:7d:69:71:50:0a:be:13:da:e4:dd:b1:c8:92:
22:48:59:19:2e:e9:2b:07:b5:07:3e:f6:80:6b:fe:7b:85:6d:
72:ab:42:14:87:85:7a:59:b3:2c:f5:64:9e:9d:59:a8:ca:de:
9c:aa:2c:71:24:6d:4b:8c:6b:19:47:45:32:2a:9e:ad:1a:ba:
c1:f1:7d:bc:58:ff:75:47:22:ba:2f:b8:69:8d:80:41:d2:33:
44:18:16:69:d5:9d:53:48:10:71:f7:a7:16:82:f5:43:c2:26:
9a:42:57:6c:a6:92:a8:6f:a7:ec:de:f5:0f:32:38:bb:bf:3c:
61:f2:5d:47:e7:a1:7d:d8:51:9e:e1:17:88:ef:51:5d:4a:c3:
10:0d:aa:10:bd:09:32:0b:b6:d2:34:d8:60:7b:ec:b5:f6:8f:
53:26:e1:90:0c:5a:f5:53:0a:50:df:55:f4:46:e3:f6:b9:b2:
24:9b:7a:49:72:0a:a6:b7:ae:a6:41:2a:bc:f2:fd:89:f0:38:
c0:8e:ca:d9:69:cc:6d:b3:f0:f1:56:f9:ec:7e:f5:3a:c2:40:
75:2f:9e:e1:64:ed:23:b3:0b:23:a3:7b:1e:3b:b5:17:64:24:
62:02:06:84
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgISAZJ7ZhjarMfXfdJS0nAmYaRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDExMTE0NTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Y4ODE0MDFhYmFjYzg4Yzk0MWZkZjc0MGYxYWIxNTM2ZjA1ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYO0dZfs4NrHjjitSdvgp/9d7Rdx
vpSnTgTcFDGgC0fw/s34s9kyRiGS0Y3lxHQO6t22tRYBhVbvgt3pGH2cTZ8bgOEF
JB7T3Yn5M/68U66VJkogOtlO8JwPqqORDGARDaPoxzxaKmiZx3lIlEVyaI8JObhL
H4KQHK/c2s1f2E/2k/4B4kDPA+avc5xJHuFb1aRpMzA+MvQK+6/nBy4etH6bGFBc
rzdkS+xhjs8hvBgTsuXYJqCHKmMLiAZ9IutU5wKXYX3W59Vf06AN5LxuWxWSffj4
F6M4Lk/VQ2hRKYbNS5Y1pqXoCpOYi6JvOAc83mIeydiq4Y8Cr0RoHQGk7wIDAQAB
o4IDwTCCA70wHQYDVR0OBBYEFOf4gUAausyIyUH990DxqxU28F26MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2Y1NTM0
YS1hNjEzLTQ3YmUtYjQyYi1lMmZiYzNhNjg4MDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvZjU1MzRh
LWE2MTMtNDdiZS1iNDJiLWUyZmJjM2E2ODgwMC8xLzVfaUJRQnE2eklqSlFmMzNR
UEdyRlRid1hiby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBIgYIKwYB
BQUHAQcBAf8EggERMIIBDTCB3wQCAAEwgdgDBAItkvQDBAU+QaADBAU+mOADBAY+
qEADBAY+xcADBARQ+vADBARRWIADBARSd+ADBAZTqIADBAZU9UADAwBV+AMEA1w8
OAMEA158kAMEBF7kUAMEArl5QAMEArmC3AMEArnceAMEBLx7YAMEArx7dDAMAwQG
wTrAAwQBwTrEAwQBwW66AwQCwgGsAwQDwgHgAwQFwwyAAwQFwy5AAwQFw0gAAwQF
w2IAAwMAw6gDBAXUGqADBAXUUQADBAbV10ADBATZQxADBAXZS0ADBATZdmADBATZ
rJAwKQQCAAIwIwMFACABG6ADBQAqABKYAwUAKgIHcAMFACoD8EADBQMqBtvAMDYG
CCsGAQUFBwEIAQH/BCcwJaAjMCECAhXKAgIaRgICGpMCAiBgAgI/IAICP6cCAlBj
AgMAvAUwDQYJKoZIhvcNAQELBQADggEBAGw+2UeFBSgqBusaHo679kh4L2VONNgx
fWlxUAq+E9rk3bHIkiJIWRku6SsHtQc+9oBr/nuFbXKrQhSHhXpZsyz1ZJ6dWajK
3pyqLHEkbUuMaxlHRTIqnq0ausHxfbxY/3VHIrovuGmNgEHSM0QYFmnVnVNIEHH3
pxaC9UPCJppCV2ymkqhvp+ze9Q8yOLu/PGHyXUfnoX3YUZ7hF4jvUV1KwxANqhC9
CTILttI02GB77LX2j1Mm4ZAMWvVTClDfVfRG4/a5siSbeklyCqa3rqZBKrzy/Ynw
OMCOytlpzG2z8PFW+ex+9TrCQHUvnuFk7SOzCyOjex47tRdkJGICBoQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:38 2024 by rpki-client on console-ams.rpki-client.org