Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
File: 7xxmWwOGkrk7310djzzqPphpegM.cer (raw, json)
Hash identifier: 6JA11XaPCX7RZsTx4DWlz8tDbvDODNdpy0oVsXUh8uA=
Subject key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1830B3B4C1AD5C314BD11493221A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3315 -- 3316
AS: 5568
AS: 8631
AS: 8985
AS: 15835
AS: 31649
AS: 41740
AS: 42139
AS: 42385
AS: 42403
AS: 42728
AS: 43213
AS: 43690
AS: 43832
AS: 43921
AS: 44522
AS: 44597
AS: 45018
AS: 45029
AS: 47445
AS: 47882
AS: 48216
AS: 48531
AS: 50706
AS: 57056
AS: 62135
AS: 62261
AS: 205022
IP: 62.76.62.0/23
IP: 62.76.76.0/23
IP: 62.76.151.0/24
IP: 62.76.248.0/21
IP: 86.62.48.0/22
IP: 193.232.64.0/24
IP: 193.232.66.0/23
IP: 193.232.72.0 -- 193.232.74.255
IP: 193.232.76.0/24
IP: 193.232.78.0/24
IP: 193.232.80.0 -- 193.232.85.255
IP: 193.232.87.0/24
IP: 193.232.93.0/24
IP: 193.232.124.0 -- 193.232.129.255
IP: 193.232.131.0 -- 193.232.137.255
IP: 193.232.139.0 -- 193.232.143.255
IP: 193.232.156.0/23
IP: 193.232.175.0/24
IP: 193.232.188.0/23
IP: 193.232.226.0/23
IP: 193.232.230.0 -- 193.232.233.255
IP: 193.232.237.0/24
IP: 193.232.243.0 -- 193.232.244.255
IP: 194.85.0.0/24
IP: 194.85.3.0/24
IP: 194.85.16.0/24
IP: 194.85.25.0/24
IP: 194.85.28.0/23
IP: 194.85.31.0/24
IP: 194.85.76.0/22
IP: 194.85.84.0/23
IP: 194.85.104.0 -- 194.85.109.255
IP: 194.85.117.0 -- 194.85.119.255
IP: 194.85.177.0/24
IP: 194.85.186.0/23
IP: 194.85.252.0/23
IP: 194.190.119.0 -- 194.190.129.255
IP: 194.190.132.0 -- 194.190.136.255
IP: 194.190.138.0/24
IP: 194.190.141.0 -- 194.190.142.255
IP: 194.190.145.0 -- 194.190.146.255
IP: 194.190.148.0/24
IP: 194.190.156.0/24
IP: 194.190.168.0/24
IP: 194.226.16.0 -- 194.226.18.255
IP: 194.226.24.0/23
IP: 194.226.28.0/23
IP: 194.226.36.0/24
IP: 194.226.38.0/23
IP: 194.226.41.0/24
IP: 194.226.44.0/24
IP: 194.226.46.0 -- 194.226.48.255
IP: 194.226.56.0/22
IP: 194.226.64.0/20
IP: 194.226.100.0/22
IP: 194.226.134.0/23
IP: 195.19.8.0/24
IP: 195.19.14.0/23
IP: 195.19.26.0/24
IP: 195.208.22.0 -- 195.208.31.255
IP: 195.208.208.0/21
IP: 195.208.222.0/23
IP: 195.209.0.0/19
IP: 195.209.146.0 -- 195.209.148.255
IP: 212.192.230.0 -- 212.192.237.255
IP: 212.193.104.0 -- 212.193.127.255
IP: 212.193.144.0/20
IP: 212.193.192.0/19
IP: 2001:67c:1008::/47
IP: 2001:67c:1210::/46
IP: 2001:67c:1440::/45
IP: 2001:6d0::/32
IP: 2001:7f8:20::/48
IP: 2a09:bd00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:30:b3:b4:c1:ad:5c:31:4b:d1:14:93:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:63:c2:5d:e0:ce:ff:18:25:a4:03:9d:ae:
d0:42:f7:d1:73:8b:af:40:d0:55:df:90:65:ca:aa:
20:34:21:30:a7:46:6c:d6:42:a7:ba:63:dc:d0:19:
aa:2b:26:87:c4:43:9a:60:0e:1c:3c:e3:ba:5d:22:
9d:96:c7:7d:d0:8d:ff:e5:15:05:86:d2:c9:c3:55:
ab:09:6b:47:88:e2:a8:51:d2:a1:82:bf:be:0f:be:
79:eb:7e:43:2c:28:82:d7:61:fc:84:05:fe:7d:69:
00:1a:36:f5:ce:b9:c9:13:a2:d3:de:4d:97:be:77:
e7:df:0f:d6:a3:90:77:7e:63:c5:3b:be:92:66:e1:
0b:c0:24:40:3f:c9:a3:b5:00:ef:ed:0f:ed:d0:b4:
d3:6c:71:4c:47:42:40:96:37:05:56:e6:90:12:90:
a7:2a:e1:74:4d:a0:ef:d2:6d:97:2a:f5:e6:2f:07:
1c:4f:5f:6b:03:7b:ee:e7:96:f7:48:1c:ab:03:40:
8c:a3:d8:d6:0c:2c:40:ee:59:19:72:81:ed:d6:f3:
fe:b4:a0:81:46:3c:9a:96:1f:54:62:c1:26:d8:02:
b1:23:7e:3b:e5:97:b3:4e:d0:66:52:37:f8:ed:ce:
f2:88:c2:b8:43:cd:56:63:cf:fe:e5:ae:48:46:64:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.62.0/23
62.76.76.0/23
62.76.151.0/24
62.76.248.0/21
86.62.48.0/22
193.232.64.0/24
193.232.66.0/23
193.232.72.0-193.232.74.255
193.232.76.0/24
193.232.78.0/24
193.232.80.0-193.232.85.255
193.232.87.0/24
193.232.93.0/24
193.232.124.0-193.232.129.255
193.232.131.0-193.232.137.255
193.232.139.0-193.232.143.255
193.232.156.0/23
193.232.175.0/24
193.232.188.0/23
193.232.226.0/23
193.232.230.0-193.232.233.255
193.232.237.0/24
193.232.243.0-193.232.244.255
194.85.0.0/24
194.85.3.0/24
194.85.16.0/24
194.85.25.0/24
194.85.28.0/23
194.85.31.0/24
194.85.76.0/22
194.85.84.0/23
194.85.104.0-194.85.109.255
194.85.117.0-194.85.119.255
194.85.177.0/24
194.85.186.0/23
194.85.252.0/23
194.190.119.0-194.190.129.255
194.190.132.0-194.190.136.255
194.190.138.0/24
194.190.141.0-194.190.142.255
194.190.145.0-194.190.146.255
194.190.148.0/24
194.190.156.0/24
194.190.168.0/24
194.226.16.0-194.226.18.255
194.226.24.0/23
194.226.28.0/23
194.226.36.0/24
194.226.38.0/23
194.226.41.0/24
194.226.44.0/24
194.226.46.0-194.226.48.255
194.226.56.0/22
194.226.64.0/20
194.226.100.0/22
194.226.134.0/23
195.19.8.0/24
195.19.14.0/23
195.19.26.0/24
195.208.22.0-195.208.31.255
195.208.208.0/21
195.208.222.0/23
195.209.0.0/19
195.209.146.0-195.209.148.255
212.192.230.0-212.192.237.255
212.193.104.0-212.193.127.255
212.193.144.0/20
212.193.192.0/19
IPv6:
2001:67c:1008::/47
2001:67c:1210::/46
2001:67c:1440::/45
2001:6d0::/32
2001:7f8:20::/48
2a09:bd00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3315-3316
5568
8631
8985
15835
31649
41740
42139
42385
42403
42728
43213
43690
43832
43921
44522
44597
45018
45029
47445
47882
48216
48531
50706
57056
62135
62261
205022
Signature Algorithm: sha256WithRSAEncryption
9c:6e:98:46:0f:4c:1d:4c:a4:67:65:4a:7d:82:60:2e:f3:22:
75:39:35:f6:a8:69:d8:81:3d:23:00:90:b8:af:ee:c9:61:10:
01:46:fe:0a:d1:4e:67:cd:e8:13:c7:5f:d0:25:cd:3e:9d:10:
a5:fd:af:e1:e1:bc:cc:8a:dc:d8:97:1a:a7:9d:6b:16:bc:85:
09:a6:ad:fc:f8:b3:2c:7d:5f:61:de:bb:d1:7c:c0:46:ca:dc:
53:35:0f:d1:8a:5a:9a:ae:d2:c8:32:aa:5e:5d:d8:51:2f:70:
bf:11:77:ce:7b:ae:12:cf:bc:83:1d:e4:c8:fb:41:0d:be:a9:
09:1b:9d:34:60:16:ad:52:bb:a4:15:74:d5:35:a5:d0:df:90:
b9:d7:0f:9b:e5:44:91:42:0c:ee:61:92:e3:67:7f:e9:aa:b6:
ce:c7:d7:c6:62:40:d5:cf:7c:e0:f5:bd:99:93:5d:df:99:c8:
73:a4:f9:91:99:b4:82:3b:56:ea:cc:c4:77:2d:0e:86:da:7e:
33:2a:5e:bd:f3:8b:f9:3e:ab:29:23:dc:6d:0c:70:13:83:69:
53:9b:f3:58:4e:0e:ae:43:56:25:46:1a:89:78:72:cb:e1:ba:
29:6c:84:61:35:4e:d3:a0:1b:cd:93:13:24:cc:19:eb:10:45:
aa:c2:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 04:33:05 2024 by rpki-client on console-ams.rpki-client.org