Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
File: 92_VaGdIVkFeseITQqrzI7N7ei4.cer (raw, json)
Hash identifier: xVS/xhb+IDzRDgdNIwmgff6lZXQ310Qn5GzjCdkL44o=
Subject key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946A10D6143CEE2574A66FE281BAD7CA66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 13:04:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216376
IP: 185.77.98.0/23
IP: 185.241.205.0/24
IP: 2a13:ab40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:10:d6:14:3c:ee:25:74:a6:6f:e2:81:ba:d7:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 13:04:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:8c:fd:18:18:e9:3f:a8:23:31:6c:84:b8:
b5:3a:9a:5d:0f:9e:32:d8:6e:78:4b:da:27:a8:10:
f4:40:c5:ce:af:d1:65:b1:9a:3c:e2:d7:77:2b:68:
0d:b0:d8:e1:ed:eb:cc:df:36:d8:76:5d:0a:9c:55:
54:08:7e:59:8a:39:b2:c1:07:fd:63:da:d0:ed:d2:
be:f7:56:f9:72:ac:d6:b0:a8:0f:5e:6f:77:af:47:
aa:34:06:08:59:9f:0e:bc:0e:e7:e9:a0:1d:85:bc:
6d:4c:e6:0e:57:7a:35:41:f7:b9:f6:88:3a:1b:68:
98:0b:62:35:c9:7c:62:bd:4f:a6:0c:5b:16:70:e8:
08:87:b1:3b:cc:12:a6:85:d2:2d:9e:84:01:e4:c2:
89:c1:e2:5c:99:e2:3f:56:ee:7d:33:b1:0e:54:ab:
63:b8:63:fe:c2:bd:80:fc:93:a2:9c:de:81:b5:ee:
40:d5:83:b4:50:11:78:0d:34:5e:fa:62:3c:d3:b2:
27:49:48:46:c9:56:05:6a:a0:05:f8:9c:8e:84:f1:
fd:31:19:e9:eb:db:99:2c:25:94:9b:a4:ab:1d:52:
50:7d:6f:a9:d7:35:8d:00:84:41:f9:56:82:d9:5e:
32:2f:bd:78:8b:ea:d4:c8:3f:e5:2a:a3:41:ea:dc:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.98.0/23
185.241.205.0/24
IPv6:
2a13:ab40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216376
Signature Algorithm: sha256WithRSAEncryption
af:c3:24:ec:e0:40:90:49:fc:ef:ca:1a:9b:3c:15:8a:3f:e5:
d5:78:7c:0b:a2:b1:62:51:02:3d:c6:c5:5f:1b:64:1d:92:0f:
3d:4e:e1:9b:77:41:21:01:09:7c:13:9d:a4:2f:4b:72:81:22:
ff:72:3a:b4:fb:d5:dd:c6:e3:b9:d9:2e:1b:8c:2f:b4:08:45:
82:48:f5:ed:72:d7:84:92:13:23:ab:4f:e5:c8:1b:54:a4:66:
64:fe:71:ec:5c:74:41:19:0a:c2:e8:7c:b8:0a:9e:c5:d6:3d:
54:1d:fe:e3:e9:6f:51:12:56:be:ac:57:61:d4:51:4f:aa:4a:
69:d9:ec:6f:3e:f1:e4:be:25:0c:d0:23:40:02:e3:f5:14:cf:
1d:9c:5b:54:43:7c:8d:86:57:be:5a:b9:d5:b4:bc:92:67:45:
05:97:39:04:82:02:79:e2:8c:74:e3:2f:1b:17:bf:0c:53:f7:
bb:07:9f:fb:8e:38:a8:f2:9f:d4:ff:a2:2f:71:48:af:b0:45:
3e:5c:da:fb:c7:14:f9:5e:bc:94:7a:06:8a:5e:2f:d4:ab:54:
cf:bc:ae:4f:26:ea:3a:a7:7b:af:9b:c9:75:4b:29:93:49:a2:
42:c6:43:93:84:f2:24:51:a1:50:27:d6:77:07:1f:6b:85:fd:
c5:4c:90:a3
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZRqENYUPO4ldKZv4oG618pmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE1MTMwNDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzZmZDU2ODY3NDg1NjQxNWViMWUyMTM0MmFhZjMyM2IzN2I3YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6eM/RgY6T+oIzFshLi1OppdD54y
2G54S9onqBD0QMXOr9FlsZo84td3K2gNsNjh7evM3zbYdl0KnFVUCH5ZijmywQf9
Y9rQ7dK+91b5cqzWsKgPXm93r0eqNAYIWZ8OvA7n6aAdhbxtTOYOV3o1Qfe59og6
G2iYC2I1yXxivU+mDFsWcOgIh7E7zBKmhdItnoQB5MKJweJcmeI/Vu59M7EOVKtj
uGP+wr2A/JOinN6Bte5A1YO0UBF4DTRe+mI807InSUhGyVYFaqAF+JyOhPH9MRnp
69uZLCWUm6SrHVJQfW+p1zWNAIRB+VaC2V4yL714i+rUyD/lKqNB6twaawIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFPdv1WhnSFZBXrHiE0Kq8yOze3ouMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzU0MGRh
NS0yN2ZiLTQ2ZTYtYTEzMi1iNTRkODJkOGJlN2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNTQwZGE1
LTI3ZmItNDZlNi1hMTMyLWI1NGQ4MmQ4YmU3Yi8xLzkyX1ZhR2RJVmtGZXNlSVRR
cXJ6STdON2VpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBuU1iAwQAufHNMA0EAgACMAcDBQAqE6tAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNODANBgkqhkiG9w0BAQsFAAOCAQEAr8Mk
7OBAkEn878oamzwVij/l1Xh8C6KxYlECPcbFXxtkHZIPPU7hm3dBIQEJfBOdpC9L
coEi/3I6tPvV3cbjudkuG4wvtAhFgkj17XLXhJITI6tP5cgbVKRmZP5x7Fx0QRkK
wuh8uAqexdY9VB3+4+lvURJWvqxXYdRRT6pKadnsbz7x5L4lDNAjQALj9RTPHZxb
VEN8jYZXvlq51bS8kmdFBZc5BIICeeKMdOMvGxe/DFP3uwef+444qPKf1P+iL3FI
r7BFPlza+8cU+V68lHoGil4v1KtUz7yuTybqOqd7r5vJdUspk0miQsZDk4TyJFGh
UCfWdwcfa4X9xUyQow==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:21:39 2025 by rpki-client