Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.cer (raw, json)
Hash identifier: KMsD6X1XVHhnU63O8hoJkIO9R8hTlfnFGbRwlJrJUwE=
Subject key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019594A078B5949AA6E26CB54ED3602BEDA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Mar 2025 12:28:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62068
IP: 5.182.208.0/22
IP: 45.14.224.0/22
IP: 45.87.41.0 -- 45.87.43.255
IP: 45.148.120.0 -- 45.148.122.255
IP: 62.68.71.0/24
IP: 91.217.200.0/24
IP: 91.226.227.0/24
IP: 91.230.49.0/24
IP: 146.19.248.0/24
IP: 185.46.70.0/24
IP: 185.224.128.0/22
IP: 185.244.36.0/22
IP: 2a0d:2400::/29
IP: 2a0d:2780::/29
IP: 2a0e:16c0::/29
IP: 2a0e:1740::/29
IP: 2a0e:2000::/29
IP: 2a11:b240::/29
IP: 2a12:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:a0:78:b5:94:9a:a6:e2:6c:b5:4e:d3:60:2b:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 12:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:4b:0b:ac:dd:1b:97:aa:95:c8:4f:e9:49:
72:e7:92:ce:ba:d5:5a:f3:2b:28:3e:d4:68:d8:7a:
b7:42:97:f2:d4:7c:ba:a9:78:dd:5e:30:d2:13:81:
4c:6a:e8:3e:70:6b:7d:8a:52:24:30:f8:f1:22:0c:
ab:a1:bc:50:61:be:4a:2d:a2:8b:1e:65:cf:07:57:
6f:7b:c1:c8:31:2a:0d:fa:27:5f:dc:9f:33:97:aa:
59:e9:d3:4f:59:95:6d:35:a4:68:74:1d:e8:76:85:
6c:ee:40:e0:1e:42:f3:0b:75:80:68:f7:0a:ca:fb:
e1:96:88:99:cd:cf:50:d6:a0:96:30:82:53:06:14:
b8:3c:97:f3:10:4b:ad:4c:81:d8:e8:86:e2:62:57:
5e:ff:e7:fc:b7:c2:d4:06:23:67:58:a2:10:7e:ae:
5d:ba:49:79:91:01:a0:a0:1d:1c:f0:67:ad:3c:31:
ba:33:e6:de:50:d7:44:31:18:ba:fc:87:54:16:94:
a2:45:63:30:5c:51:ef:e0:2f:6a:88:60:50:5f:b8:
89:0c:44:21:13:d9:f7:6e:6e:cf:ed:00:27:a2:8d:
66:23:41:4a:f7:a1:4a:df:92:01:a4:e7:22:cb:e2:
8f:5b:ad:d1:34:91:88:55:3a:94:37:cb:4b:c3:06:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.41.0-45.87.43.255
45.148.120.0-45.148.122.255
62.68.71.0/24
91.217.200.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.46.70.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62068
Signature Algorithm: sha256WithRSAEncryption
38:0d:40:f6:96:ca:eb:27:d8:90:67:c1:ab:ca:d8:ff:e5:7d:
6c:45:42:51:f5:46:ed:ed:02:61:db:9c:37:f4:68:d3:aa:17:
c0:d7:98:0a:38:91:26:58:0a:11:d1:97:9b:98:13:26:f6:a9:
a6:86:c5:d1:96:87:53:24:72:4a:21:13:36:7f:9e:06:e0:ae:
15:33:f9:32:70:9a:13:84:d9:3a:09:eb:9a:af:b4:68:92:40:
fb:fd:71:e1:89:d8:57:1e:75:4b:c9:00:5f:21:4e:94:5d:b5:
8f:03:c1:5b:49:8a:e6:1d:64:92:d8:19:47:78:2f:d4:a8:f3:
75:25:cf:74:5b:23:b2:aa:3b:f6:0d:19:66:4b:73:2e:53:ed:
3f:59:b0:84:31:e6:e5:cf:1a:0e:bf:f7:16:20:0d:c1:21:06:
f3:71:60:47:ba:0b:60:29:a9:94:f9:91:8c:be:ac:ac:20:55:
71:f4:05:1c:26:22:4b:fb:26:6e:bc:6b:e6:a8:3b:f3:29:81:
c3:25:0c:37:3c:f7:0d:ce:08:02:0f:f4:94:19:e3:02:6c:f7:
df:a9:cf:26:9e:09:3a:89:be:09:bf:6e:5e:64:c7:19:a7:d9:
65:55:71:4c:a5:1a:74:99:ce:55:75:ae:98:2d:39:bd:9a:61:
82:f8:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:52 2025 by rpki-client