Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
File: 9RNpzL-GsehOGutG5tM20591Kuc.cer (raw, json)
Hash identifier: kxm3HeEWxnqB0O1sWul3chq4UGxATOk4HePbx6L0+V4=
Subject key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BB274122547974374600E6A453926D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:32:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5524
AS: 20857
AS: 21155
AS: 28878
AS: 29590
AS: 31586
AS: 35470
AS: 39700
AS: 49685
IP: 31.3.8.0/21
IP: 31.3.96.0/21
IP: 31.14.96.0/22
IP: 31.223.160.0/20
IP: 37.17.208.0/20
IP: 37.34.48.0/20
IP: 37.97.128.0/17
IP: 37.230.96.0/21
IP: 46.21.224.0/20
IP: 46.226.56.0/21
IP: 77.72.144.0/21
IP: 78.108.128.0/20
IP: 79.170.88.0/21
IP: 80.69.64.0/19
IP: 80.84.224.0/19
IP: 80.246.192.0/20
IP: 80.255.240.0/20
IP: 81.4.64.0 -- 81.4.99.255
IP: 81.4.112.0/21
IP: 81.21.136.0/21
IP: 81.30.32.0/20
IP: 83.96.128.0/17
IP: 84.247.8.0/21
IP: 85.10.128.0/18
IP: 85.158.248.0/21
IP: 85.222.224.0/21
IP: 86.105.244.0/22
IP: 87.253.128.0/19
IP: 89.31.96.0/21
IP: 89.41.168.0/22
IP: 91.142.240.0/20
IP: 91.189.208.0/22
IP: 91.205.32.0/22
IP: 91.216.162.0/24
IP: 93.119.0.0/20
IP: 93.191.128.0/21
IP: 94.142.208.0/21
IP: 95.170.64.0/19
IP: 141.138.136.0/21
IP: 141.138.192.0/20
IP: 141.255.176.0/21
IP: 149.210.128.0/17
IP: 171.33.128.0/21
IP: 176.74.224.0/19
IP: 178.18.80.0/20
IP: 185.3.208.0/22
IP: 185.10.48.0/22
IP: 185.15.248.0/22
IP: 185.21.188.0/22
IP: 185.65.52.0/22
IP: 185.69.232.0/22
IP: 185.76.236.0/22
IP: 185.84.72.0/22
IP: 185.89.152.0/22
IP: 185.95.68.0/22
IP: 185.96.4.0/22
IP: 185.105.204.0/22
IP: 185.105.216.0/22
IP: 185.108.112.0/22
IP: 185.110.172.0/22
IP: 185.110.200.0/22
IP: 188.240.52.0/22
IP: 188.241.148.0/22
IP: 193.93.172.0/22
IP: 193.138.204.0/22
IP: 193.242.119.0/24
IP: 194.60.207.0/24
IP: 195.8.195.0/24
IP: 195.135.195.0/24
IP: 213.187.240.0/21
IP: 217.21.240.0/20
IP: 217.149.128.0/20
IP: 2001:828::/32
IP: 2001:4cb8::/29
IP: 2a00:c080::/32
IP: 2a01:7c8::/29
IP: 2a01:9280::/32
IP: 2a02:348::/32
IP: 2a02:2938::/32
IP: 2a03:4f00::/32
IP: 2a03:5700::/32
IP: 2a05:2500::/29
IP: 2a05:a280::/29
IP: 2a06:3800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:27:41:22:54:79:74:37:46:00:e6:a4:53:92:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:83:29:8d:e6:56:f9:91:21:8a:ee:ef:1d:
d3:78:d5:81:e5:83:c5:9f:a4:4c:e5:be:95:42:89:
a9:de:91:d9:57:e5:78:3f:5a:7e:4d:72:86:21:21:
fc:2c:2b:55:8e:60:e9:cc:b0:bb:3f:2b:0c:4d:32:
b6:26:20:f5:62:5f:8b:42:e8:5f:91:e0:c5:1d:f1:
3d:4d:75:35:4a:58:de:58:be:18:1c:c1:18:8c:44:
d7:ff:c7:17:29:0f:2f:60:c0:25:05:47:5b:31:32:
0a:3b:89:b1:2c:8a:10:07:cc:8c:db:10:65:6c:92:
f1:c7:ea:b9:32:8d:50:24:94:44:34:3b:04:cf:ed:
af:38:bd:9d:11:d8:6f:80:8c:72:07:59:6e:c8:1a:
fe:4f:52:3a:b2:d1:79:10:6d:9a:c6:90:51:56:05:
83:a0:6b:52:3c:7e:30:d2:8c:b3:23:5a:2d:2d:8a:
c5:71:56:9c:c6:4e:50:7f:ea:57:c6:5c:80:54:85:
28:e5:3d:80:8a:02:1a:13:20:25:23:97:3c:d4:f8:
d6:15:69:b6:c5:17:25:6a:bd:d4:20:7b:a4:fb:d2:
92:49:01:82:f5:01:86:7c:14:9a:ea:1e:d1:0d:34:
75:db:e3:6a:fd:99:8d:02:de:a0:66:a5:82:df:20:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.3.96.0/21
31.14.96.0/22
31.223.160.0/20
37.17.208.0/20
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
46.21.224.0/20
46.226.56.0/21
77.72.144.0/21
78.108.128.0/20
79.170.88.0/21
80.69.64.0/19
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
84.247.8.0/21
85.10.128.0/18
85.158.248.0/21
85.222.224.0/21
86.105.244.0/22
87.253.128.0/19
89.31.96.0/21
89.41.168.0/22
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.119.0.0/20
93.191.128.0/21
94.142.208.0/21
95.170.64.0/19
141.138.136.0/21
141.138.192.0/20
141.255.176.0/21
149.210.128.0/17
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.10.48.0/22
185.15.248.0/22
185.21.188.0/22
185.65.52.0/22
185.69.232.0/22
185.76.236.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.96.4.0/22
185.105.204.0/22
185.105.216.0/22
185.108.112.0/22
185.110.172.0/22
185.110.200.0/22
188.240.52.0/22
188.241.148.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
195.8.195.0/24
195.135.195.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a01:7c8::/29
2a01:9280::/32
2a02:348::/32
2a02:2938::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/29
2a05:a280::/29
2a06:3800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5524
20857
21155
28878
29590
31586
35470
39700
49685
Signature Algorithm: sha256WithRSAEncryption
99:c6:b5:fc:a7:4d:3d:8b:8c:28:40:4d:1c:a9:b6:b4:4d:b6:
b8:ac:1f:2f:92:e1:79:81:6d:15:74:b2:c1:f3:a4:68:a7:1f:
55:5e:1f:da:c2:dc:aa:f2:af:67:ee:c3:ff:6c:9f:87:a2:d2:
64:6f:21:8b:4b:0e:44:ed:c6:05:ac:30:d6:bc:e2:85:14:32:
8f:92:5a:30:10:1b:f2:a8:59:2f:96:be:5a:41:0a:67:83:0c:
05:45:8f:96:66:52:07:e0:fe:e9:c7:35:19:95:0e:41:3d:bb:
ef:b5:1e:ec:01:f7:a9:61:58:5b:37:29:8f:23:e4:1d:c3:04:
b8:ec:c3:5a:00:39:d7:88:1c:6d:6f:e1:ee:5b:c4:1f:f7:77:
27:58:a3:ef:c3:bc:70:ff:21:47:d0:87:90:b1:55:10:57:18:
47:e3:c2:a7:59:82:9c:1e:51:2c:5d:03:19:0d:12:f3:27:a7:
37:31:03:91:34:c0:55:c1:20:63:f3:ce:6b:80:22:38:a6:d0:
ab:e7:b8:d3:24:25:1c:1b:72:6b:03:80:97:96:5d:f3:c0:92:
30:c8:f2:0a:54:29:17:3e:47:24:26:9a:c8:39:47:b0:00:92:
4c:59:ca:88:8d:84:97:bc:ff:51:2f:d7:fb:8f:30:aa:8f:23:
8e:35:98:37
-----BEGIN CERTIFICATE-----
MIIHzjCCBragAwIBAgISAYzJuydBIlR5dDdGAOakU5JtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTEzNjljY2JmODZiMWU4NGUxYWViNDZlNmQzMzZkMzlmNzUyYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA112DKY3mVvmRIYru7x3TeNWB5YPF
n6RM5b6VQomp3pHZV+V4P1p+TXKGISH8LCtVjmDpzLC7PysMTTK2JiD1Yl+LQuhf
keDFHfE9TXU1SljeWL4YHMEYjETX/8cXKQ8vYMAlBUdbMTIKO4mxLIoQB8yM2xBl
bJLxx+q5Mo1QJJRENDsEz+2vOL2dEdhvgIxyB1luyBr+T1I6stF5EG2axpBRVgWD
oGtSPH4w0oyzI1otLYrFcVacxk5Qf+pXxlyAVIUo5T2AigIaEyAlI5c81PjWFWm2
xRclar3UIHuk+9KSSQGC9QGGfBSa6h7RDTR12+Nq/ZmNAt6gZqWC3yCGoQIDAQAB
o4IE2jCCBNYwHQYDVR0OBBYEFPUTacy/hrHoThrrRubTNtOfdSrnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzJkNWJk
Zi01MjY1LTQ5YjgtOGFmZS0yYjkyMGJkZTM5OTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMmQ1YmRm
LTUyNjUtNDliOC04YWZlLTJiOTIwYmRlMzk5MC8xLzlSTnB6TC1Hc2VoT0d1dEc1
dE0yMDU5MUt1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICNQYIKwYB
BQUHAQcBAf8EggIkMIICIDCCAcAEAgABMIIBuAMEAx8DCAMEAx8DYAMEAh8OYAME
BB/foAMEBCUR0AMEBCUiMAMEByVhgAMEAyXmYAMEBC4V4AMEAy7iOAMEA01IkAME
BE5sgAMEA0+qWAMEBVBFQAMEBVBU4AMEBFD2wAMEBFD/8DAMAwQGUQRAAwQCUQRg
AwQDUQRwAwQDURWIAwQEUR4gAwQHU2CAAwQDVPcIAwQGVQqAAwQDVZ74AwQDVd7g
AwQCVmn0AwQFV/2AAwQDWR9gAwQCWSmoAwQEW47wAwQCW73QAwQCW80gAwQAW9ii
AwQEXXcAAwQDXb+AAwQDXo7QAwQFX6pAAwQDjYqIAwQEjYrAAwQDjf+wAwQHldKA
AwQDqyGAAwQFsErgAwQEshJQAwQCuQPQAwQCuQowAwQCuQ/4AwQCuRW8AwQCuUE0
AwQCuUXoAwQCuUzsAwQCuVRIAwQCuVmYAwQCuV9EAwQCuWAEAwQCuWnMAwQCuWnY
AwQCuWxwAwQCuW6sAwQCuW7IAwQCvPA0AwQCvPGUAwQCwV2sAwQCwYrMAwQAwfJ3
AwQAwjzPAwQAwwjDAwQAw4fDAwQD1bvwAwQE2RXwAwQE2ZWAMFoEAgACMFQDBQAg
AQgoAwUDIAFMuAMFACoAwIADBQMqAQfIAwUAKgGSgAMFACoCA0gDBQAqAik4AwUA
KgNPAAMFACoDVwADBQMqBSUAAwUDKgWigAMFAyoGOAAwPAYIKwYBBQUHAQgBAf8E
LTAroCkwJwICFZQCAlF5AgJSowICcM4CAnOWAgJ7YgIDAIqOAgMAmxQCAwDCFTAN
BgkqhkiG9w0BAQsFAAOCAQEAmca1/KdNPYuMKEBNHKm2tE22uKwfL5LheYFtFXSy
wfOkaKcfVV4f2sLcqvKvZ+7D/2yfh6LSZG8hi0sORO3GBaww1rzihRQyj5JaMBAb
8qhZL5a+WkEKZ4MMBUWPlmZSB+D+6cc1GZUOQT2777Ue7AH3qWFYWzcpjyPkHcME
uOzDWgA514gcbW/h7lvEH/d3J1ij78O8cP8hR9CHkLFVEFcYR+PCp1mCnB5RLF0D
GQ0S8yenNzEDkTTAVcEgY/POa4AiOKbQq+e40yQlHBtyawOAl5Zd88CSMMjyClQp
Fz5HJCaayDlHsACSTFnKiI2El7z/US/X+48wqo8jjjWYNw==
-----END CERTIFICATE-----
Generated at Sat Jun 29 01:16:03 2024 by rpki-client on console-ams.rpki-client.org