Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
File: 9RNpzL-GsehOGutG5tM20591Kuc.cer (raw, json)
Hash identifier: uAhFi+xkk6J1Xy6cze5+wqvyhpn0Cob0xMPDhxiPB/k=
Subject key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3D3F2A727531D79E74EC6B27C2D2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5524
AS: 20857
AS: 21155
AS: 28878
AS: 29590
AS: 31586
AS: 35470
AS: 39700
AS: 49685
IP: 5.61.248.0/21
IP: 31.3.8.0/21
IP: 31.3.96.0/21
IP: 31.14.96.0/22
IP: 31.223.160.0/20
IP: 37.17.208.0/20
IP: 37.34.48.0/20
IP: 37.97.128.0/17
IP: 37.230.96.0/21
IP: 46.226.56.0/21
IP: 77.72.144.0/21
IP: 78.108.128.0/20
IP: 79.170.88.0/21
IP: 80.69.64.0/19
IP: 80.84.224.0/19
IP: 80.246.192.0/20
IP: 80.255.240.0/20
IP: 81.4.64.0 -- 81.4.99.255
IP: 81.4.112.0/21
IP: 81.21.136.0/21
IP: 81.30.32.0/20
IP: 83.96.128.0/17
IP: 84.247.8.0/21
IP: 85.10.128.0/18
IP: 85.158.248.0/21
IP: 85.222.224.0/21
IP: 86.105.244.0/22
IP: 87.253.128.0/19
IP: 89.31.96.0/21
IP: 89.41.168.0/22
IP: 91.142.240.0/20
IP: 91.189.208.0/22
IP: 91.205.32.0/22
IP: 91.216.162.0/24
IP: 93.119.0.0/20
IP: 93.191.128.0/21
IP: 94.142.208.0/21
IP: 95.170.64.0/19
IP: 141.138.136.0/21
IP: 141.138.192.0/20
IP: 141.255.176.0/21
IP: 149.210.128.0/17
IP: 171.33.128.0/21
IP: 176.74.224.0/19
IP: 178.18.80.0/20
IP: 185.3.208.0/22
IP: 185.10.48.0/22
IP: 185.15.248.0/22
IP: 185.21.188.0/22
IP: 185.65.52.0/22
IP: 185.69.232.0/22
IP: 185.84.72.0/22
IP: 185.89.152.0/22
IP: 185.95.68.0/22
IP: 185.96.4.0/22
IP: 185.105.204.0/22
IP: 185.105.216.0/22
IP: 185.108.112.0/22
IP: 185.110.172.0/22
IP: 185.110.200.0/22
IP: 188.240.52.0/22
IP: 188.241.148.0/22
IP: 193.93.172.0/22
IP: 193.138.204.0/22
IP: 193.242.119.0/24
IP: 194.60.207.0/24
IP: 195.8.195.0/24
IP: 195.135.195.0/24
IP: 213.187.240.0/21
IP: 217.21.240.0/20
IP: 217.149.128.0/20
IP: 2001:828::/32
IP: 2001:4cb8::/29
IP: 2a00:c080::/32
IP: 2a01:7c8::/29
IP: 2a01:7860::/32
IP: 2a02:348::/32
IP: 2a03:4f00::/32
IP: 2a03:5700::/32
IP: 2a05:2500::/29
IP: 2a05:a280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d3:f2:a7:27:53:1d:79:e7:4e:c6:b2:7c:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:83:29:8d:e6:56:f9:91:21:8a:ee:ef:1d:
d3:78:d5:81:e5:83:c5:9f:a4:4c:e5:be:95:42:89:
a9:de:91:d9:57:e5:78:3f:5a:7e:4d:72:86:21:21:
fc:2c:2b:55:8e:60:e9:cc:b0:bb:3f:2b:0c:4d:32:
b6:26:20:f5:62:5f:8b:42:e8:5f:91:e0:c5:1d:f1:
3d:4d:75:35:4a:58:de:58:be:18:1c:c1:18:8c:44:
d7:ff:c7:17:29:0f:2f:60:c0:25:05:47:5b:31:32:
0a:3b:89:b1:2c:8a:10:07:cc:8c:db:10:65:6c:92:
f1:c7:ea:b9:32:8d:50:24:94:44:34:3b:04:cf:ed:
af:38:bd:9d:11:d8:6f:80:8c:72:07:59:6e:c8:1a:
fe:4f:52:3a:b2:d1:79:10:6d:9a:c6:90:51:56:05:
83:a0:6b:52:3c:7e:30:d2:8c:b3:23:5a:2d:2d:8a:
c5:71:56:9c:c6:4e:50:7f:ea:57:c6:5c:80:54:85:
28:e5:3d:80:8a:02:1a:13:20:25:23:97:3c:d4:f8:
d6:15:69:b6:c5:17:25:6a:bd:d4:20:7b:a4:fb:d2:
92:49:01:82:f5:01:86:7c:14:9a:ea:1e:d1:0d:34:
75:db:e3:6a:fd:99:8d:02:de:a0:66:a5:82:df:20:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.3.8.0/21
31.3.96.0/21
31.14.96.0/22
31.223.160.0/20
37.17.208.0/20
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
46.226.56.0/21
77.72.144.0/21
78.108.128.0/20
79.170.88.0/21
80.69.64.0/19
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
84.247.8.0/21
85.10.128.0/18
85.158.248.0/21
85.222.224.0/21
86.105.244.0/22
87.253.128.0/19
89.31.96.0/21
89.41.168.0/22
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.119.0.0/20
93.191.128.0/21
94.142.208.0/21
95.170.64.0/19
141.138.136.0/21
141.138.192.0/20
141.255.176.0/21
149.210.128.0/17
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.10.48.0/22
185.15.248.0/22
185.21.188.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.96.4.0/22
185.105.204.0/22
185.105.216.0/22
185.108.112.0/22
185.110.172.0/22
185.110.200.0/22
188.240.52.0/22
188.241.148.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
195.8.195.0/24
195.135.195.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a01:7c8::/29
2a01:7860::/32
2a02:348::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/29
2a05:a280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5524
20857
21155
28878
29590
31586
35470
39700
49685
Signature Algorithm: sha256WithRSAEncryption
a0:7a:7c:6c:ca:4d:06:1f:1c:8f:15:9e:6f:c9:4a:6a:98:85:
dc:b8:96:4a:96:82:04:15:7a:6b:81:08:62:db:12:01:cc:39:
d9:b9:68:22:f1:76:7d:b2:cc:b8:8c:31:31:c5:9d:e3:1c:ad:
c9:d8:56:1a:6b:51:86:4c:91:19:69:9e:5b:3a:ca:7c:fe:a4:
eb:f4:a2:94:47:04:24:8b:e6:a6:1f:33:ee:fc:21:06:ef:51:
35:16:10:2e:9f:c5:fe:eb:9a:da:54:9a:2c:9c:3c:f1:d8:f1:
b9:54:3a:41:99:7c:37:f7:b7:63:6d:d8:f3:8b:30:17:a4:df:
aa:47:81:b9:7e:9c:26:3a:9c:e7:cd:c0:54:d1:f1:d6:63:ce:
4f:84:84:e8:7c:39:f2:25:58:e5:57:3a:84:63:1f:97:81:9a:
78:c0:97:b1:67:22:da:56:27:08:d2:7d:b7:2b:4e:64:8a:00:
a2:32:05:1d:b3:7e:40:23:7b:f9:a4:51:b7:14:dc:8f:f5:38:
83:ef:be:a0:63:81:8f:41:e6:4c:d8:1e:32:18:11:32:a9:23:
0b:c0:64:55:2e:da:70:26:5f:a0:2f:7c:d6:81:f0:98:29:c8:
d5:de:f1:69:f4:8a:cc:c1:b0:3e:91:56:d2:ea:96:c1:f2:8e:
1b:6c:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:35 2025 by rpki-client