Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer (raw, json)
Hash identifier: LvvoM1PCGR2mFuPOVeko2My+AVGQzQOOGCpGzOWLCjk=
Subject key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948294BB95349DD878070FFA22F85697E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 07:19:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50769
AS: 201978
AS: 208425
IP: 185.1.132.0/24
IP: 185.50.68.0/22
IP: 185.114.20.0/22
IP: 185.146.88.0/22
IP: 185.169.52.0/22
IP: 194.61.116.0/22
IP: 217.28.139.0/24
IP: 2a01:a420::/29
IP: 2a0a:3900::/29
IP: 2a0f:d500::/29
IP: 2a12:3c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:94:bb:95:34:9d:d8:78:07:0f:fa:22:f8:56:97:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 07:19:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c2:ef:56:48:bc:45:26:d3:ca:9f:2b:15:
95:af:53:ab:5c:dc:66:9e:c7:62:89:0f:73:5c:f2:
2b:85:ed:79:45:01:66:2e:59:14:f6:43:73:80:54:
2a:26:06:d1:fa:ab:43:cb:9f:d4:6a:cc:80:2f:00:
c0:ae:38:bd:88:ed:7e:dc:66:cd:bc:fd:47:76:00:
fc:f6:18:3e:43:d5:9f:13:05:59:01:de:0e:68:8c:
69:34:46:a4:79:c7:8b:a0:ef:52:4d:84:6b:16:5c:
bd:4f:85:89:c8:80:2d:6a:43:25:4d:a9:12:39:39:
a3:da:70:ed:ea:2e:3b:9b:6c:5e:15:02:39:c6:f5:
c5:e1:1a:d6:a2:6a:40:8e:65:0e:c1:b0:61:f4:af:
82:f1:b1:8f:15:f3:43:ac:78:df:d0:c8:a5:bb:e7:
e9:71:c3:48:22:fe:70:a8:61:73:5e:3d:2b:bd:d1:
ed:c3:8c:4b:a4:73:55:e1:a7:0e:3b:f2:62:b3:55:
bb:f5:5a:c0:58:13:9b:47:1f:a6:ab:e3:d3:29:6a:
a2:49:a8:d4:18:b9:fd:2e:72:9d:72:0d:ed:ac:37:
11:91:8d:36:8d:39:d9:f7:6f:3b:4e:76:74:1b:cf:
af:0c:f7:0d:23:9c:3d:75:32:f1:dd:86:05:ba:02:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
217.28.139.0/24
IPv6:
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
2a12:3c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50769
201978
208425
Signature Algorithm: sha256WithRSAEncryption
53:27:79:f0:ad:59:35:f6:4c:7b:42:31:b8:f8:ba:83:52:ae:
e8:41:2a:6e:6b:94:2b:9d:29:cb:25:fc:e7:12:97:85:58:ac:
c0:9c:b2:a3:49:12:4c:36:d7:b1:96:d0:7d:a2:41:13:d5:1c:
14:c4:cf:bf:cc:48:6d:df:ce:4b:93:45:91:ce:3e:d2:45:82:
43:59:6e:44:a1:09:3b:df:c4:2f:39:9d:31:3b:72:fb:87:4a:
e4:97:ef:63:6c:ed:dc:cd:6f:4d:64:9a:78:66:3b:10:b2:8e:
95:d0:04:3f:c4:b9:42:34:fd:bc:51:3f:66:da:24:b1:d3:82:
7a:28:34:45:6c:a4:a4:aa:f5:55:17:9a:2b:8e:89:18:60:d2:
d3:5d:01:82:a9:bf:2a:d6:6e:67:9d:c7:a2:12:99:dd:02:f2:
0f:91:17:34:5f:0b:51:79:87:d3:0e:f7:77:94:58:df:f0:11:
27:1a:6c:f0:33:80:8c:c1:30:be:3d:1a:b0:b5:2f:6f:8d:0a:
1c:fe:29:15:45:a1:10:e0:c4:96:c8:8e:dd:40:9c:5d:8e:6c:
d4:f0:d3:4c:c7:22:41:f5:1a:3e:da:e8:50:3a:b1:84:03:3f:
f7:8b:3b:1f:46:c4:be:5d:23:17:af:00:20:bd:55:36:a9:51:
1d:51:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:31:35 2025 by rpki-client