Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
File: 9O9duhAKkrJETz5RLQGlksAZUcI.cer (raw, json)
Hash identifier: ht0xOiHaM4Zxhjk/XfSkvrE9sqSnK3dxhtq1l6mp7Wk=
Subject key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194E0FF8CDDC0E40575FCF5B09BC08976F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Feb 2025 15:20:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57558
IP: 45.148.212.0/22
IP: 185.15.168.0/22
IP: 185.197.8.0/22
IP: 2a03:b140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:ff:8c:dd:c0:e4:05:75:fc:f5:b0:9b:c0:89:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 15:20:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:f8:f0:86:11:fd:41:5c:d1:d4:78:37:69:
35:f8:72:e1:97:12:e4:ea:a9:17:6c:3b:01:39:32:
bd:82:92:7f:23:c9:4e:d4:3f:b6:16:df:81:3b:6d:
d3:f2:6a:62:3f:cb:51:e1:63:be:ec:33:65:33:02:
eb:dc:e5:df:6e:ea:25:8d:df:96:12:ba:ce:b1:d1:
18:66:6e:6a:8e:f3:08:c0:62:89:3a:5f:fd:91:84:
5c:7c:63:bf:d5:f3:b0:1b:41:22:c4:39:d3:85:f9:
1e:30:b3:14:44:59:41:f3:8a:9a:95:cd:e8:e6:07:
07:3f:e9:7e:85:5a:32:2d:99:63:6e:08:ca:80:82:
b8:42:c8:cf:05:62:f9:a0:14:ba:09:fc:f2:96:8f:
76:75:e8:fc:8b:6b:85:a9:91:73:f6:de:74:28:32:
3b:96:d8:83:52:70:64:ef:d8:e7:81:b3:38:14:31:
6b:d9:60:cf:32:9f:e9:ce:18:67:d5:85:6d:01:22:
1e:31:76:72:9e:dd:8a:24:7f:90:0c:8d:6e:99:25:
50:64:74:c6:0a:9a:4e:53:18:35:ed:9c:ea:65:3b:
36:99:1d:df:e5:e7:a3:92:72:c8:19:5f:ee:bb:4d:
cb:15:ae:49:56:fd:c2:97:47:5e:99:e1:3d:98:e1:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.212.0/22
185.15.168.0/22
185.197.8.0/22
IPv6:
2a03:b140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57558
Signature Algorithm: sha256WithRSAEncryption
53:21:5c:20:a1:f2:a5:be:3f:18:51:9d:8a:f8:41:76:da:00:
5c:09:d2:0a:a8:32:60:37:9b:52:55:e5:14:17:81:aa:35:4b:
60:22:7a:76:1c:82:ad:e6:5a:3d:bf:bc:70:56:44:46:ff:62:
7a:71:e4:eb:64:a0:a6:e3:37:e9:e2:ab:11:7a:b5:b2:17:d8:
7d:b1:1d:77:89:33:ea:f7:b3:23:8d:14:96:4b:7b:1c:e0:e3:
7e:ef:08:2b:5c:42:4e:6d:03:00:63:6c:9e:a4:fb:6d:2d:41:
1f:d9:b4:f8:00:fa:6d:eb:3d:d6:26:7b:70:69:bf:c3:7d:66:
76:7e:50:c7:22:a4:ab:f8:b8:e2:dc:ea:67:24:14:c8:b2:13:
9b:3c:59:f9:68:18:5f:a0:6e:1b:12:9f:07:ae:be:d3:ab:bd:
59:af:ee:4d:8e:20:9a:46:5f:20:96:7d:f7:27:ba:fb:9a:b7:
2d:92:48:02:ad:fc:e0:bd:86:d8:30:84:82:df:e1:85:4b:4c:
1b:c2:32:ee:b5:65:9f:f6:dc:99:4b:99:ca:b6:04:c3:70:41:
0a:60:32:24:c7:7c:b6:85:a1:66:54:74:b8:01:a3:2d:49:98:
b1:e6:be:74:45:07:3e:5a:fc:e1:75:b3:7e:56:68:85:99:c7:
21:8b:fe:63
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZTg/4zdwOQFdfz1sJvAiXbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjA3MTUyMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGVmNWRiYTEwMGE5MmIyNDQ0ZjNlNTEyZDAxYTU5MmMwMTk1MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwb48IYR/UFc0dR4N2k1+HLhlxLk
6qkXbDsBOTK9gpJ/I8lO1D+2Ft+BO23T8mpiP8tR4WO+7DNlMwLr3OXfbuoljd+W
ErrOsdEYZm5qjvMIwGKJOl/9kYRcfGO/1fOwG0EixDnThfkeMLMURFlB84qalc3o
5gcHP+l+hVoyLZljbgjKgIK4QsjPBWL5oBS6Cfzylo92dej8i2uFqZFz9t50KDI7
ltiDUnBk79jngbM4FDFr2WDPMp/pzhhn1YVtASIeMXZynt2KJH+QDI1umSVQZHTG
CppOUxg17ZzqZTs2mR3f5eejknLIGV/uu03LFa5JVv3Cl0demeE9mOHLCQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFPTvXboQCpKyRE8+US0BpZLAGVHCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2IzNWJl
MS02NjczLTQ4MTEtYTcwNy1hZDAyN2U5NWM1YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYjM1YmUx
LTY2NzMtNDgxMS1hNzA3LWFkMDI3ZTk1YzVjNy8xLzlPOWR1aEFLa3JKRVR6NVJM
UUdsa3NBWlVjSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCLZTUAwQCuQ+oAwQCucUIMA0EAgACMAcDBQAq
A7FAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDg1jANBgkqhkiG9w0BAQsFAAOC
AQEAUyFcIKHypb4/GFGdivhBdtoAXAnSCqgyYDebUlXlFBeBqjVLYCJ6dhyCreZa
Pb+8cFZERv9ienHk62SgpuM36eKrEXq1shfYfbEdd4kz6vezI40Ulkt7HODjfu8I
K1xCTm0DAGNsnqT7bS1BH9m0+AD6bes91iZ7cGm/w31mdn5QxyKkq/i44tzqZyQU
yLITmzxZ+WgYX6BuGxKfB66+06u9Wa/uTY4gmkZfIJZ99ye6+5q3LZJIAq384L2G
2DCEgt/hhUtMG8Iy7rVln/bcmUuZyrYEw3BBCmAyJMd8toWhZlR0uAGjLUmYsea+
dEUHPlr84XWzflZohZnHIYv+Yw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:35:29 2025 by rpki-client