Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
File: B6alie6EioBSI4GRuYA153USJyU.cer (raw, json)
Hash identifier: pFM4es7Ymw2J3FenHWWXYlnUXWUvDoPoAITdJw83gxQ=
Subject key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195D1BA41F2E46F0ECBF12BC08DAE2569F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Mar 2025 09:13:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210218
IP: 2.58.93.0 -- 2.58.94.255
IP: 2.58.136.0/22
IP: 2.59.248.0/22
IP: 31.13.194.0/24
IP: 31.13.249.0 -- 31.13.255.255
IP: 37.139.129.0/24
IP: 37.221.120.0/22
IP: 45.8.74.0/23
IP: 45.12.248.0/22
IP: 45.66.229.0/24
IP: 45.81.241.0 -- 45.81.242.255
IP: 45.139.100.0/22
IP: 45.143.100.0/22
IP: 45.144.152.0/23
IP: 45.149.232.0/23
IP: 45.151.88.0/24
IP: 77.75.56.0/22
IP: 78.40.160.0/21
IP: 80.249.124.0/22
IP: 82.115.208.0/24
IP: 87.120.32.0/24
IP: 87.120.34.0/23
IP: 87.120.46.0/23
IP: 87.120.63.0 -- 87.120.66.255
IP: 87.120.85.0 -- 87.120.86.255
IP: 87.120.96.0/23
IP: 87.120.111.0/24
IP: 87.120.177.0/24
IP: 87.120.218.0/24
IP: 87.120.220.0/23
IP: 87.120.224.0/24
IP: 87.120.226.0/24
IP: 87.120.232.0/22
IP: 87.121.19.0/24
IP: 87.121.36.0/23
IP: 87.121.56.0/23
IP: 87.121.59.0/24
IP: 87.121.66.0 -- 87.121.68.255
IP: 87.121.100.0/23
IP: 87.121.116.0/24
IP: 87.121.148.0/23
IP: 91.92.3.0/24
IP: 91.92.24.0/23
IP: 91.197.196.0/22
IP: 91.243.184.0/22
IP: 92.249.51.0/24
IP: 93.123.68.0/22
IP: 93.123.86.0/23
IP: 93.123.108.0/24
IP: 94.33.0.0/16
IP: 94.103.126.0/24
IP: 94.154.174.0/23
IP: 94.156.16.0/22
IP: 94.156.32.0/24
IP: 94.156.48.0/21
IP: 94.156.95.0/24
IP: 94.156.108.0/22
IP: 94.156.124.0/22
IP: 94.156.168.0/23
IP: 94.156.182.0 -- 94.156.184.255
IP: 94.156.187.0/24
IP: 94.156.192.0/23
IP: 94.156.234.0/23
IP: 94.156.240.0/22
IP: 94.156.246.0/23
IP: 94.240.56.0/22
IP: 95.214.124.0/22
IP: 109.206.238.0/24
IP: 141.98.0.0/24
IP: 164.40.184.0/24
IP: 164.40.186.0/23
IP: 171.22.17.0/24
IP: 171.22.29.0/24
IP: 176.125.252.0/23
IP: 178.175.184.0/21
IP: 178.215.225.0 -- 178.215.226.255
IP: 185.171.148.0/22
IP: 185.219.125.0 -- 185.219.126.255
IP: 185.221.66.0/24
IP: 185.225.72.0/23
IP: 185.252.178.0/24
IP: 185.254.38.0/23
IP: 193.19.200.0/22
IP: 193.36.232.0/22
IP: 193.37.43.0/24
IP: 193.37.46.0/24
IP: 193.43.3.0/24
IP: 193.46.172.0/22
IP: 193.56.16.0/22
IP: 193.56.248.0/22
IP: 193.58.184.0/22
IP: 193.149.2.0/23
IP: 193.207.0.0 -- 193.207.23.255
IP: 194.48.249.0/24
IP: 194.76.204.0/22
IP: 194.147.8.0/22
IP: 194.169.174.0/24
IP: 194.180.50.0/24
IP: 195.178.120.0/24
IP: 195.225.120.0/22
IP: 212.22.128.0/19
IP: 212.24.0.0/19
IP: 212.73.135.0/24
IP: 217.133.0.0/16
IP: 2a09:e6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:ba:41:f2:e4:6f:0e:cb:f1:2b:c0:8d:ae:25:69:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 09:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a6a589ee848a8052238191b98035e775122725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:82:a8:d2:1d:2e:a3:b1:a3:4f:aa:5d:2a:
e7:08:9b:2b:eb:9d:03:37:0f:ec:72:20:73:25:98:
1c:2b:79:8b:6f:f5:cb:ab:2e:0e:ae:0c:24:29:d6:
26:fa:23:23:89:7c:fb:5c:9b:ea:ec:a3:1a:d4:6f:
74:0b:cf:d2:0f:52:30:d8:e5:9e:79:c3:c4:47:85:
04:e5:f0:25:dc:55:29:a0:1b:b2:df:d3:d6:e7:89:
be:65:4a:48:5c:15:72:4a:95:f1:6c:6d:67:4c:cc:
ec:e3:f3:07:16:c1:25:f0:0b:3d:a1:1b:c6:b1:fa:
ca:73:83:a0:de:f5:de:8d:ab:1a:9c:30:c7:7d:af:
86:0a:0e:d8:23:fd:15:71:8d:a8:a4:1c:4d:01:94:
16:f1:65:36:9b:10:a5:23:a7:e5:eb:da:0a:cd:a1:
22:58:7a:9b:14:3e:8f:8c:35:35:f3:75:59:3f:2e:
b2:4a:0f:ac:43:2d:da:42:61:e6:7a:fc:e1:bb:18:
52:29:09:85:36:40:6f:53:cb:e9:bf:68:8b:75:f3:
d5:94:93:80:e1:81:4c:c7:fe:ff:a7:c3:73:cc:c8:
23:05:b4:f0:c9:db:ca:ef:7b:07:3b:42:aa:ec:22:
c3:9e:ce:b5:b2:52:42:64:a7:dd:ff:ee:d2:bb:ba:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
37.139.129.0/24
37.221.120.0/22
45.8.74.0/23
45.12.248.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.139.100.0/22
45.143.100.0/22
45.144.152.0/23
45.149.232.0/23
45.151.88.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
82.115.208.0/24
87.120.32.0/24
87.120.34.0/23
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.220.0/23
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.56.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.100.0/23
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.33.0.0/16
94.103.126.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.124.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.17.0/24
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
178.215.225.0-178.215.226.255
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
185.254.38.0/23
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.43.3.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.149.2.0/23
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.169.174.0/24
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
217.133.0.0/16
IPv6:
2a09:e6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210218
Signature Algorithm: sha256WithRSAEncryption
49:bd:0f:d3:9d:f7:df:04:12:8e:11:be:19:7b:77:70:50:3f:
16:50:7d:3d:48:dd:b8:a3:0f:eb:e1:c0:36:b7:a4:21:ec:0a:
51:8b:73:03:46:a1:fc:df:d4:c6:fa:df:8e:5e:b1:b3:14:38:
f9:16:1c:d9:a8:0d:42:77:d4:e9:88:63:1c:1b:52:3e:63:2b:
77:a2:27:40:45:51:b0:6c:fd:7c:06:dd:dc:9e:aa:8f:79:5a:
2c:35:0d:3a:a9:c0:75:41:41:07:5f:82:8a:4e:43:8e:79:3c:
96:2a:31:f2:37:7a:41:94:b0:af:d9:44:39:44:72:97:eb:9f:
93:6c:4b:43:97:0f:c0:6d:d5:a2:22:8e:35:ec:1b:6c:d9:d4:
21:0c:db:ea:c7:d5:b8:de:f5:0d:ce:93:2f:f5:70:4b:0f:2f:
ef:42:da:09:3b:22:e3:89:f5:e1:14:ab:8b:f1:87:d2:14:7c:
ac:78:84:83:08:6a:11:72:eb:86:f8:78:c1:bb:c8:6d:56:c9:
32:d5:ab:81:94:d5:7a:4a:c2:89:80:6c:b2:d6:15:c0:40:d8:
ad:5c:ba:46:3e:10:64:43:5d:ff:28:8e:ce:2a:c3:5b:40:2b:
a6:2e:e7:9d:35:49:4b:fa:8a:4a:d3:81:70:17:63:73:e0:35:
19:4e:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:27 2025 by rpki-client