Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
File: 9RNpzL-GsehOGutG5tM20591Kuc.cer (raw, json)
Hash identifier: xi46JZdJIqoCY+xX+MuPwZO+/zKK3AY7k6FjMkkEJ+k=
Subject key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192E2A76F59561A615416CD997324145CA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Oct 2024 12:57:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5524
AS: 20857
AS: 21155
AS: 28878
AS: 29590
AS: 31586
AS: 35470
AS: 39700
AS: 49685
IP: 31.3.8.0/21
IP: 31.3.96.0/21
IP: 31.14.96.0/22
IP: 31.223.160.0/20
IP: 37.17.208.0/20
IP: 37.34.48.0/20
IP: 37.97.128.0/17
IP: 37.230.96.0/21
IP: 46.226.56.0/21
IP: 77.72.144.0/21
IP: 78.108.128.0/20
IP: 79.170.88.0/21
IP: 80.69.64.0/19
IP: 80.84.224.0/19
IP: 80.246.192.0/20
IP: 80.255.240.0/20
IP: 81.4.64.0 -- 81.4.99.255
IP: 81.4.112.0/21
IP: 81.21.136.0/21
IP: 81.30.32.0/20
IP: 83.96.128.0/17
IP: 84.247.8.0/21
IP: 85.10.128.0/18
IP: 85.158.248.0/21
IP: 85.222.224.0/21
IP: 86.105.244.0/22
IP: 87.253.128.0/19
IP: 89.31.96.0/21
IP: 89.41.168.0/22
IP: 91.142.240.0/20
IP: 91.189.208.0/22
IP: 91.205.32.0/22
IP: 91.216.162.0/24
IP: 93.119.0.0/20
IP: 93.191.128.0/21
IP: 94.142.208.0/21
IP: 95.170.64.0/19
IP: 141.138.136.0/21
IP: 141.138.192.0/20
IP: 141.255.176.0/21
IP: 149.210.128.0/17
IP: 171.33.128.0/21
IP: 176.74.224.0/19
IP: 178.18.80.0/20
IP: 185.3.208.0/22
IP: 185.10.48.0/22
IP: 185.15.248.0/22
IP: 185.21.188.0/22
IP: 185.65.52.0/22
IP: 185.69.232.0/22
IP: 185.84.72.0/22
IP: 185.89.152.0/22
IP: 185.95.68.0/22
IP: 185.96.4.0/22
IP: 185.105.204.0/22
IP: 185.105.216.0/22
IP: 185.108.112.0/22
IP: 185.110.172.0/22
IP: 185.110.200.0/22
IP: 188.240.52.0/22
IP: 188.241.148.0/22
IP: 193.93.172.0/22
IP: 193.138.204.0/22
IP: 193.242.119.0/24
IP: 194.60.207.0/24
IP: 195.8.195.0/24
IP: 195.135.195.0/24
IP: 213.187.240.0/21
IP: 217.21.240.0/20
IP: 217.149.128.0/20
IP: 2001:828::/32
IP: 2001:4cb8::/29
IP: 2a00:c080::/32
IP: 2a01:7c8::/29
IP: 2a01:9280::/32
IP: 2a02:348::/32
IP: 2a02:2938::/32
IP: 2a03:4f00::/32
IP: 2a03:5700::/32
IP: 2a05:2500::/29
IP: 2a05:a280::/29
IP: 2a06:3800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:a7:6f:59:56:1a:61:54:16:cd:99:73:24:14:5c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 12:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:83:29:8d:e6:56:f9:91:21:8a:ee:ef:1d:
d3:78:d5:81:e5:83:c5:9f:a4:4c:e5:be:95:42:89:
a9:de:91:d9:57:e5:78:3f:5a:7e:4d:72:86:21:21:
fc:2c:2b:55:8e:60:e9:cc:b0:bb:3f:2b:0c:4d:32:
b6:26:20:f5:62:5f:8b:42:e8:5f:91:e0:c5:1d:f1:
3d:4d:75:35:4a:58:de:58:be:18:1c:c1:18:8c:44:
d7:ff:c7:17:29:0f:2f:60:c0:25:05:47:5b:31:32:
0a:3b:89:b1:2c:8a:10:07:cc:8c:db:10:65:6c:92:
f1:c7:ea:b9:32:8d:50:24:94:44:34:3b:04:cf:ed:
af:38:bd:9d:11:d8:6f:80:8c:72:07:59:6e:c8:1a:
fe:4f:52:3a:b2:d1:79:10:6d:9a:c6:90:51:56:05:
83:a0:6b:52:3c:7e:30:d2:8c:b3:23:5a:2d:2d:8a:
c5:71:56:9c:c6:4e:50:7f:ea:57:c6:5c:80:54:85:
28:e5:3d:80:8a:02:1a:13:20:25:23:97:3c:d4:f8:
d6:15:69:b6:c5:17:25:6a:bd:d4:20:7b:a4:fb:d2:
92:49:01:82:f5:01:86:7c:14:9a:ea:1e:d1:0d:34:
75:db:e3:6a:fd:99:8d:02:de:a0:66:a5:82:df:20:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.3.96.0/21
31.14.96.0/22
31.223.160.0/20
37.17.208.0/20
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
46.226.56.0/21
77.72.144.0/21
78.108.128.0/20
79.170.88.0/21
80.69.64.0/19
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
84.247.8.0/21
85.10.128.0/18
85.158.248.0/21
85.222.224.0/21
86.105.244.0/22
87.253.128.0/19
89.31.96.0/21
89.41.168.0/22
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.119.0.0/20
93.191.128.0/21
94.142.208.0/21
95.170.64.0/19
141.138.136.0/21
141.138.192.0/20
141.255.176.0/21
149.210.128.0/17
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.10.48.0/22
185.15.248.0/22
185.21.188.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.96.4.0/22
185.105.204.0/22
185.105.216.0/22
185.108.112.0/22
185.110.172.0/22
185.110.200.0/22
188.240.52.0/22
188.241.148.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
195.8.195.0/24
195.135.195.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a01:7c8::/29
2a01:9280::/32
2a02:348::/32
2a02:2938::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/29
2a05:a280::/29
2a06:3800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5524
20857
21155
28878
29590
31586
35470
39700
49685
Signature Algorithm: sha256WithRSAEncryption
11:3c:27:86:2d:5f:75:fb:ad:32:97:41:b1:db:c1:0f:97:74:
43:22:bb:ea:a4:0b:ed:55:d4:a8:92:ef:cf:3d:8d:a9:eb:90:
1d:cc:e7:a5:99:56:7f:84:ef:3c:c6:4d:96:ac:d2:82:f4:1a:
35:26:c8:60:58:24:3d:40:62:d8:3d:fc:5b:ac:23:a5:8f:e0:
1c:ae:16:11:2c:ae:ad:dc:65:0b:4e:89:8b:31:7a:2c:28:78:
05:28:87:4d:88:38:10:3c:03:08:3f:96:95:e0:5a:ec:6b:ec:
3e:4b:a2:b5:9a:1d:fc:d6:c2:2f:f0:2c:75:01:49:2d:9b:34:
8a:48:64:53:b5:f9:6e:c1:88:0c:95:57:32:3e:f2:4c:b0:34:
89:7c:95:4b:88:91:33:c1:de:a4:19:3e:99:9b:08:f0:c8:d7:
b3:1f:ee:4c:7b:8c:5f:ce:e3:28:59:f4:eb:41:79:21:29:bd:
89:95:68:68:f9:ae:4f:3c:c3:d2:b7:98:13:6e:d1:02:14:d3:
6a:8a:cd:3c:d2:e3:f6:68:a9:c5:10:de:61:40:bf:ba:af:19:
56:d2:98:b4:09:3d:cc:b5:14:0e:68:34:61:51:c1:28:d7:9e:
15:23:89:5f:c9:5a:9e:99:df:63:61:08:d1:00:5b:5e:77:aa:
1e:56:7c:1b
-----BEGIN CERTIFICATE-----
MIIHwjCCBqqgAwIBAgISAZLip29ZVhphVBbNmXMkFFylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDMxMTI1NzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTEzNjljY2JmODZiMWU4NGUxYWViNDZlNmQzMzZkMzlmNzUyYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA112DKY3mVvmRIYru7x3TeNWB5YPF
n6RM5b6VQomp3pHZV+V4P1p+TXKGISH8LCtVjmDpzLC7PysMTTK2JiD1Yl+LQuhf
keDFHfE9TXU1SljeWL4YHMEYjETX/8cXKQ8vYMAlBUdbMTIKO4mxLIoQB8yM2xBl
bJLxx+q5Mo1QJJRENDsEz+2vOL2dEdhvgIxyB1luyBr+T1I6stF5EG2axpBRVgWD
oGtSPH4w0oyzI1otLYrFcVacxk5Qf+pXxlyAVIUo5T2AigIaEyAlI5c81PjWFWm2
xRclar3UIHuk+9KSSQGC9QGGfBSa6h7RDTR12+Nq/ZmNAt6gZqWC3yCGoQIDAQAB
o4IEzjCCBMowHQYDVR0OBBYEFPUTacy/hrHoThrrRubTNtOfdSrnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzJkNWJk
Zi01MjY1LTQ5YjgtOGFmZS0yYjkyMGJkZTM5OTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMmQ1YmRm
LTUyNjUtNDliOC04YWZlLTJiOTIwYmRlMzk5MC8xLzlSTnB6TC1Hc2VoT0d1dEc1
dE0yMDU5MUt1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICKQYIKwYB
BQUHAQcBAf8EggIYMIICFDCCAbQEAgABMIIBrAMEAx8DCAMEAx8DYAMEAh8OYAME
BB/foAMEBCUR0AMEBCUiMAMEByVhgAMEAyXmYAMEAy7iOAMEA01IkAMEBE5sgAME
A0+qWAMEBVBFQAMEBVBU4AMEBFD2wAMEBFD/8DAMAwQGUQRAAwQCUQRgAwQDUQRw
AwQDURWIAwQEUR4gAwQHU2CAAwQDVPcIAwQGVQqAAwQDVZ74AwQDVd7gAwQCVmn0
AwQFV/2AAwQDWR9gAwQCWSmoAwQEW47wAwQCW73QAwQCW80gAwQAW9iiAwQEXXcA
AwQDXb+AAwQDXo7QAwQFX6pAAwQDjYqIAwQEjYrAAwQDjf+wAwQHldKAAwQDqyGA
AwQFsErgAwQEshJQAwQCuQPQAwQCuQowAwQCuQ/4AwQCuRW8AwQCuUE0AwQCuUXo
AwQCuVRIAwQCuVmYAwQCuV9EAwQCuWAEAwQCuWnMAwQCuWnYAwQCuWxwAwQCuW6s
AwQCuW7IAwQCvPA0AwQCvPGUAwQCwV2sAwQCwYrMAwQAwfJ3AwQAwjzPAwQAwwjD
AwQAw4fDAwQD1bvwAwQE2RXwAwQE2ZWAMFoEAgACMFQDBQAgAQgoAwUDIAFMuAMF
ACoAwIADBQMqAQfIAwUAKgGSgAMFACoCA0gDBQAqAik4AwUAKgNPAAMFACoDVwAD
BQMqBSUAAwUDKgWigAMFAyoGOAAwPAYIKwYBBQUHAQgBAf8ELTAroCkwJwICFZQC
AlF5AgJSowICcM4CAnOWAgJ7YgIDAIqOAgMAmxQCAwDCFTANBgkqhkiG9w0BAQsF
AAOCAQEAETwnhi1fdfutMpdBsdvBD5d0QyK76qQL7VXUqJLvzz2NqeuQHcznpZlW
f4TvPMZNlqzSgvQaNSbIYFgkPUBi2D38W6wjpY/gHK4WESyurdxlC06JizF6LCh4
BSiHTYg4EDwDCD+WleBa7GvsPkuitZod/NbCL/AsdQFJLZs0ikhkU7X5bsGIDJVX
Mj7yTLA0iXyVS4iRM8HepBk+mZsI8MjXsx/uTHuMX87jKFn060F5ISm9iZVoaPmu
TzzD0reYE27RAhTTaorNPNLj9mipxRDeYUC/uq8ZVtKYtAk9zLUUDmg0YVHBKNee
FSOJX8lanpnfY2EI0QBbXneqHlZ8Gw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:01 2024 by rpki-client on console-fra.rpki-client.org