Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer (raw, json)
Hash identifier: aYswZtWQFVL0uqAPVUXCgL+3irFd00SRvZ3m2dTU18g=
Subject key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195416DDEEF6170F78E73D5EBBF8AE1C5B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Feb 2025 08:44:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8529
AS: 45053
AS: 59605
IP: 82.178.32.0/23
IP: 82.178.158.0/23
IP: 134.0.216.0/21
IP: 151.248.96.0/20
IP: 185.200.124.0/22
IP: 185.201.100.0/22
IP: 185.201.192.0/22
IP: 188.95.192.0/24
IP: 213.202.0.0/21
IP: 2a02:f040::/29
IP: 2a14:1000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:6d:de:ef:61:70:f7:8e:73:d5:eb:bf:8a:e1:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 08:44:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:96:15:ec:26:e2:27:ad:fa:3d:0c:d3:b3:
da:05:4c:07:cf:d3:f0:ac:c4:3d:fd:8b:ea:a4:65:
cc:72:cc:3f:65:a6:b6:4e:58:d8:76:01:fd:01:8b:
04:15:e7:cd:21:a2:5f:17:ca:74:1a:de:a6:f9:0a:
0a:8f:6b:b8:e9:52:f2:99:f6:e5:77:b2:fa:cf:aa:
1e:1d:c1:dc:4c:06:d6:fc:f1:ee:b1:d0:4e:80:53:
65:bd:87:88:da:7e:10:36:e4:8c:e5:25:8e:a7:c6:
67:85:b4:4a:1b:ea:1e:c1:92:3e:5a:66:9a:a7:a0:
fe:1f:42:4a:fe:fa:bf:ec:59:0e:ad:72:58:fd:37:
21:0b:e1:0f:97:62:b2:e5:18:83:37:22:ed:5c:40:
e6:8b:c9:ac:ee:bb:b3:12:5e:64:0a:fc:ee:7f:8f:
ae:d3:2e:58:21:2d:88:99:8d:d2:98:02:58:f7:b3:
29:e0:f9:dd:4c:52:1f:d3:49:47:4c:2f:6d:05:e3:
32:70:1a:36:d0:29:92:8f:07:6e:df:6b:d5:cd:f2:
d7:d6:b3:dd:ea:14:16:20:6f:5c:5b:a6:bb:83:a7:
66:95:9c:95:6b:a1:b6:40:77:a0:24:0c:08:8f:91:
43:e6:e1:94:6c:3e:3d:0c:ba:04:07:99:28:b3:76:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
151.248.96.0/20
185.200.124.0/22
185.201.100.0/22
185.201.192.0/22
188.95.192.0/24
213.202.0.0/21
IPv6:
2a02:f040::/29
2a14:1000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8529
45053
59605
Signature Algorithm: sha256WithRSAEncryption
1d:63:53:92:ca:c2:4f:e3:22:82:0c:ee:c2:7a:56:82:dc:a5:
e0:54:be:21:25:63:e6:f0:a4:8f:4d:a4:d0:1e:6c:b5:55:f3:
5e:4f:35:ce:87:89:fa:4e:12:a9:66:37:86:28:1e:00:d3:04:
e2:9b:af:16:a2:bb:38:d9:dd:4b:f7:e1:76:e4:b3:e1:54:92:
42:71:1d:5b:8d:04:b6:10:e6:cd:34:3a:bf:de:58:9d:5e:ec:
bc:db:fb:2c:4d:34:f9:41:c6:08:e9:e9:3d:0f:09:35:9c:c6:
b2:ba:e9:5c:98:ff:2e:0e:01:ac:28:39:ac:45:66:22:b3:97:
04:8f:8e:ea:0a:19:7f:cc:35:b0:55:21:34:40:4f:cc:03:ae:
23:2e:f3:51:0a:86:25:f1:cd:1a:d4:61:64:7b:64:ff:e0:48:
15:12:1d:5a:e1:3b:7b:10:8e:4e:ab:4f:2f:b7:b5:1e:0f:a2:
1b:71:5e:8d:a7:76:b6:2e:00:b8:56:b3:2d:ef:43:4f:63:81:
b3:d1:03:ab:1b:44:96:35:5e:e0:7c:b3:27:06:84:da:74:ad:
87:59:76:fd:f7:e8:08:55:1e:b1:ae:55:ef:87:78:de:5a:01:
56:88:6c:a1:ce:3b:8e:dd:68:67:b1:19:f6:06:39:48:20:1a:
49:52:0b:1f
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAZVBbd7vYXD3jnPV67+K4cWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI2MDg0NDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDJkOWY0ZDZhZmYzODNjNTllOWRlNzgwMmRiZWUwMjRlZTg4N2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4+WFewm4iet+j0M07PaBUwHz9Pw
rMQ9/YvqpGXMcsw/Zaa2TljYdgH9AYsEFefNIaJfF8p0Gt6m+QoKj2u46VLymfbl
d7L6z6oeHcHcTAbW/PHusdBOgFNlvYeI2n4QNuSM5SWOp8ZnhbRKG+oewZI+Wmaa
p6D+H0JK/vq/7FkOrXJY/TchC+EPl2Ky5RiDNyLtXEDmi8ms7ruzEl5kCvzuf4+u
0y5YIS2ImY3SmAJY97Mp4PndTFIf00lHTC9tBeMycBo20CmSjwdu32vVzfLX1rPd
6hQWIG9cW6a7g6dmlZyVa6G2QHegJAwIj5FD5uGUbD49DLoEB5kos3ZNKwIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFAQtn01q/zg8WeneeALb7gJO6IfcMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2MxMzY0
YS0wNTAxLTRmYWYtYmNmYS1hYWUxNDQ3NjAzYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYzEzNjRh
LTA1MDEtNGZhZi1iY2ZhLWFhZTE0NDc2MDNjMC8xL0JDMmZUV3JfT0R4WjZkNTRB
dHZ1QWs3b2g5dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF
BwEHAQH/BFYwVDA8BAIAATA2AwQBUrIgAwQBUrKeAwQDhgDYAwQEl/hgAwQCuch8
AwQCuclkAwQCucnAAwQAvF/AAwQD1coAMBQEAgACMA4DBQMqAvBAAwUDKhQQADAj
BggrBgEFBQcBCAEB/wQUMBKgEDAOAgIhUQIDAK/9AgMA6NUwDQYJKoZIhvcNAQEL
BQADggEBAB1jU5LKwk/jIoIM7sJ6VoLcpeBUviElY+bwpI9NpNAebLVV815PNc6H
ifpOEqlmN4YoHgDTBOKbrxaiuzjZ3Uv34Xbks+FUkkJxHVuNBLYQ5s00Or/eWJ1e
7Lzb+yxNNPlBxgjp6T0PCTWcxrK66VyY/y4OAawoOaxFZiKzlwSPjuoKGX/MNbBV
ITRAT8wDriMu81EKhiXxzRrUYWR7ZP/gSBUSHVrhO3sQjk6rTy+3tR4PohtxXo2n
drYuALhWsy3vQ09jgbPRA6sbRJY1XuB8sycGhNp0rYdZdv336AhVHrGuVe+HeN5a
AVaIbKHOO47daGexGfYGOUggGklSCx8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:32:28 2025 by rpki-client