Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
File: 5yaSa26JcM-E1rR1b6nFYhEgBTc.cer (raw, json)
Hash identifier: J0lihVQCpk4HWG3y/V+J7Lneiz7icr2Wxfeffe6hcO0=
Subject key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C895CD3D5739396495B4E840CF1C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47701
IP: 185.144.40.0/22
IP: 2a0b:fc80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:5c:d3:d5:73:93:96:49:5b:4e:84:0c:f1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e726926b6e8970cf84d6b4756fa9c56211200537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:07:63:90:38:b2:19:6a:e1:9b:3c:f3:7c:
0f:d2:73:87:a1:15:9d:28:51:4e:f2:aa:71:cb:05:
e0:98:45:3a:a0:af:41:ff:ca:0f:4c:ea:fa:2f:b2:
68:1a:7a:19:54:a4:21:64:d4:16:91:3a:de:f3:83:
cd:54:92:ad:33:ff:fa:64:47:b8:41:d7:17:b7:64:
aa:a4:94:10:cc:d1:bb:3b:48:10:33:69:c7:a4:77:
6c:af:64:9d:3f:44:de:13:b2:c7:6c:e3:79:6d:ac:
b9:b0:87:04:ec:3b:64:b5:66:6e:69:97:c9:44:1a:
16:77:d9:8c:4d:0e:dc:71:52:15:5a:19:59:50:1a:
39:a2:9b:b9:50:95:63:33:84:86:b9:c3:c5:ef:72:
ee:7d:4d:a6:eb:d7:73:f1:9c:9a:50:e2:82:53:a6:
45:3c:d5:1d:b7:dd:e4:06:94:ac:37:f8:88:34:94:
96:ce:33:23:09:b2:af:2f:31:8b:f8:60:98:04:6a:
43:0e:28:09:7b:75:2c:6b:82:e3:f0:43:71:06:e5:
9a:e2:a5:13:2d:a5:a3:1a:73:58:e3:0b:cd:6d:a5:
b2:e1:3f:00:dd:c4:1a:d8:ae:02:ee:a3:db:59:01:
c3:e6:89:da:09:76:de:3a:46:ea:14:bd:74:1b:c7:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.40.0/22
IPv6:
2a0b:fc80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47701
Signature Algorithm: sha256WithRSAEncryption
5d:df:e4:b7:e1:27:dc:aa:9c:0c:78:0d:f8:2a:56:a2:33:d5:
8a:42:4a:dc:5a:53:07:05:9b:cc:f7:de:91:ec:b1:11:f0:a3:
ef:96:65:3a:d2:ea:f8:89:28:82:eb:45:57:10:8a:22:58:a1:
82:21:0c:bd:4a:2d:92:24:10:29:5f:16:b8:6e:f7:12:3e:67:
99:b7:de:43:bd:ea:9d:ea:39:30:89:dc:3d:ee:0a:e7:06:b6:
c9:8e:d0:53:0d:86:03:30:ec:64:50:ef:ce:d9:7a:22:90:b1:
8f:06:67:a3:5f:e7:33:7e:84:27:53:c1:8a:5d:8a:d0:38:3c:
b6:fe:c2:f6:90:fc:90:b3:22:0a:bc:d5:7c:bd:b5:86:04:0d:
f3:b8:9c:ea:07:91:27:14:b6:82:b9:d6:33:85:86:55:e8:e7:
65:6a:c4:a3:28:a9:4c:84:82:5f:44:02:5f:b3:52:80:8c:fc:
53:68:32:78:b1:89:02:b5:fa:28:6a:88:5d:c7:03:69:5d:f5:
f1:95:a7:ff:3e:25:03:f1:a9:4a:d0:6d:ab:25:72:17:a3:c8:
a2:af:75:8d:a4:fb:aa:39:ff:aa:da:f2:46:48:07:0c:c7:da:
f5:84:9e:5e:52:a8:4c:60:a0:b3:18:cd:38:4d:09:7d:0f:9c:
ab:04:af:10
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQfjIlc09Vzk5ZJW06EDPHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzI2OTI2YjZlODk3MGNmODRkNmI0NzU2ZmE5YzU2MjExMjAwNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLoHY5A4shlq4Zs883wP0nOHoRWd
KFFO8qpxywXgmEU6oK9B/8oPTOr6L7JoGnoZVKQhZNQWkTre84PNVJKtM//6ZEe4
QdcXt2SqpJQQzNG7O0gQM2nHpHdsr2SdP0TeE7LHbON5bay5sIcE7DtktWZuaZfJ
RBoWd9mMTQ7ccVIVWhlZUBo5opu5UJVjM4SGucPF73LufU2m69dz8ZyaUOKCU6ZF
PNUdt93kBpSsN/iINJSWzjMjCbKvLzGL+GCYBGpDDigJe3Usa4Lj8ENxBuWa4qUT
LaWjGnNY4wvNbaWy4T8A3cQa2K4C7qPbWQHD5onaCXbeOkbqFL10G8fRbwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOcmkmtuiXDPhNa0dW+pxWIRIAU3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2Q3MThl
NC04YWJjLTRiMjMtYWMxMC1jMTAyZWU5Njg1OGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZDcxOGU0
LThhYmMtNGIyMy1hYzEwLWMxMDJlZTk2ODU4ZS8xLzV5YVNhMjZKY00tRTFyUjFi
Nm5GWWhFZ0JUYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuZAoMA0EAgACMAcDBQMqC/yAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC6VTANBgkqhkiG9w0BAQsFAAOCAQEAXd/kt+En3Kqc
DHgN+CpWojPVikJK3FpTBwWbzPfekeyxEfCj75ZlOtLq+IkogutFVxCKIlihgiEM
vUotkiQQKV8WuG73Ej5nmbfeQ73qneo5MIncPe4K5wa2yY7QUw2GAzDsZFDvztl6
IpCxjwZno1/nM36EJ1PBil2K0Dg8tv7C9pD8kLMiCrzVfL21hgQN87ic6geRJxS2
grnWM4WGVejnZWrEoyipTISCX0QCX7NSgIz8U2gyeLGJArX6KGqIXccDaV318ZWn
/z4lA/GpStBtqyVyF6PIoq91jaT7qjn/qtryRkgHDMfa9YSeXlKoTGCgsxjNOE0J
fQ+cqwSvEA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:55 2025 by rpki-client