Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer (raw, json)
Hash identifier: C+s2NucHAQAUBzRJK8NP5QUGoKd9JzOsJSH4hWzpKZA=
Subject key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E18E69530EF8A08A74797B7047DF362B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 Mar 2024 12:32:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57400
IP: 5.180.177.0/24
IP: 5.181.54.0/24
IP: 31.222.252.0/24
IP: 37.72.134.0/24
IP: 37.77.151.0/24
IP: 37.140.240.0/24
IP: 45.85.244.0/22
IP: 45.90.12.0/22
IP: 45.90.116.0/22
IP: 45.131.192.0/22
IP: 45.134.20.0/22
IP: 45.135.8.0/22
IP: 45.136.216.0/22
IP: 45.136.232.0/22
IP: 45.138.76.0/22
IP: 45.139.32.0/22
IP: 45.145.184.0/22
IP: 45.150.128.0/22
IP: 45.152.148.0/22
IP: 46.18.106.0/24
IP: 62.3.22.0/24
IP: 62.3.53.0/24
IP: 62.68.64.0/24
IP: 62.204.33.0/24
IP: 62.204.39.0/24
IP: 77.87.126.0/24
IP: 83.138.49.0/24
IP: 85.8.130.0/24
IP: 89.248.64.0/23
IP: 91.228.231.0/24
IP: 91.228.251.0/24
IP: 91.229.5.0/24
IP: 91.229.25.0/24
IP: 91.242.251.0/24
IP: 91.246.35.0/24
IP: 91.247.186.0/24
IP: 92.119.36.0/24
IP: 94.154.115.0/24
IP: 95.130.228.0/24
IP: 109.107.151.0/24
IP: 109.205.63.0/24
IP: 146.19.41.0/24
IP: 146.19.46.0/24
IP: 146.19.66.0/24
IP: 146.19.119.0/24
IP: 146.19.153.0/24
IP: 146.19.158.0/24
IP: 146.19.186.0/24
IP: 146.19.231.0/24
IP: 176.126.125.0 -- 176.126.126.255
IP: 178.212.79.0/24
IP: 185.76.148.0/24
IP: 185.76.150.0/24
IP: 185.138.165.0/24
IP: 185.145.232.0/24
IP: 185.149.150.0/24
IP: 185.198.155.0/24
IP: 185.201.253.0/24
IP: 185.213.194.0/24
IP: 188.244.118.0/24
IP: 193.3.163.0/24
IP: 193.3.186.0/24
IP: 193.35.229.0/24
IP: 193.35.231.0/24
IP: 193.38.155.0/24
IP: 193.104.183.0/24
IP: 193.110.134.0/23
IP: 193.110.160.0/23
IP: 193.163.87.0/24
IP: 193.163.124.0/24
IP: 193.201.202.0/23
IP: 193.202.44.0/23
IP: 193.221.208.0/24
IP: 193.228.228.0/24
IP: 194.32.105.0/24
IP: 194.55.128.0/23
IP: 194.55.132.0/23
IP: 194.62.160.0/24
IP: 194.104.133.0/24
IP: 194.156.78.0/24
IP: 195.60.170.0/24
IP: 195.64.107.0/24
IP: 195.64.113.0/24
IP: 195.225.83.0/24
IP: 212.18.123.0/24
IP: 212.23.194.0/24
IP: 212.52.8.0/24
IP: 213.109.158.0/24
IP: 217.8.116.0/24
IP: 217.114.33.0/24
IP: 217.114.36.0/24
IP: 217.119.133.0/24
IP: 2a03:4f80::/32
IP: 2a09:440::/29
IP: 2a09:9b80::/29
IP: 2a0b:3140::/29
IP: 2a0b:a040::/29
IP: 2a0b:b680::/29
IP: 2a0c:f140::/29
IP: 2a0e:d780::/29
IP: 2a11:740::/29
IP: 2a11:1180::/29
IP: 2a11:1b40::/29
IP: 2a11:2d40::/29
IP: 2a11:3000::/29
IP: 2a11:3e80::/29
IP: 2a11:4740::/29
IP: 2a11:5800::/29
IP: 2a11:5d40::/29
IP: 2a11:5d80::/29
IP: 2a11:6200::/29
IP: 2a11:7300::/29
IP: 2a11:8c00::/29
IP: 2a11:8e80::/29
IP: 2a11:9780::/29
IP: 2a11:9a00::/29
IP: 2a11:b340::/29
IP: 2a11:eb80::/29
IP: 2a11:ee00::/29
IP: 2a11:f880::/29
IP: 2a12::/29
IP: 2a12:b80::/29
IP: 2a12:f00::/29
IP: 2a12:2000::/29
IP: 2a12:2a80::/29
IP: 2a12:9280::/29
IP: 2a12:9380::/29
IP: 2a12:c100::/29
IP: 2a12:e280::/29
IP: 2a12:e480::/29
IP: 2a12:fc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 Mar 2024 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:e6:95:30:ef:8a:08:a7:47:97:b7:04:7d:f3:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 7 12:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:33:fe:84:44:32:71:3a:b0:de:07:fd:0b:
32:8f:92:09:ef:b8:6e:53:0e:f2:cf:15:0c:a6:b0:
16:0c:ab:ee:7a:ba:e6:47:ee:a7:40:c5:3c:0c:cc:
4f:35:e6:04:46:74:95:6c:b0:a1:8a:c6:9a:b7:f6:
d1:7e:a9:59:eb:80:7a:43:88:a3:b8:03:5f:19:c2:
b0:84:7a:c6:e6:ef:fd:c7:2a:f8:c4:b1:ac:99:3f:
83:84:31:60:4c:8c:1f:14:c0:4b:a5:8a:c3:b0:ef:
ab:4e:d5:23:0a:62:94:9c:ac:53:fb:a7:5c:43:cf:
46:bd:0f:c5:ef:cd:45:64:50:88:e2:a5:51:bb:61:
87:e9:bc:a5:7c:73:5e:62:57:10:e1:b0:5d:5c:34:
a9:9b:bd:22:a0:b7:f6:e7:f9:de:db:fe:17:e1:9d:
9a:64:54:c4:f3:89:59:16:ac:b0:e2:b5:f1:55:b6:
46:1d:58:1d:c1:7a:cd:e1:c6:f5:53:7b:77:f0:14:
ff:90:83:b4:36:b3:14:2b:2f:72:b9:5b:29:c6:26:
5b:1b:16:dc:2f:e4:30:fe:ab:ed:03:97:f6:2c:da:
4c:53:a7:cb:f3:22:97:b5:17:5b:93:c9:c8:d5:54:
a9:c6:66:09:01:5d:bc:e8:a1:88:a4:79:b8:90:39:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.177.0/24
5.181.54.0/24
31.222.252.0/24
37.72.134.0/24
37.77.151.0/24
37.140.240.0/24
45.85.244.0/22
45.90.12.0/22
45.90.116.0/22
45.131.192.0/22
45.134.20.0/22
45.135.8.0/22
45.136.216.0/22
45.136.232.0/22
45.138.76.0/22
45.139.32.0/22
45.145.184.0/22
45.150.128.0/22
45.152.148.0/22
46.18.106.0/24
62.3.22.0/24
62.3.53.0/24
62.68.64.0/24
62.204.33.0/24
62.204.39.0/24
77.87.126.0/24
83.138.49.0/24
85.8.130.0/24
89.248.64.0/23
91.228.231.0/24
91.228.251.0/24
91.229.5.0/24
91.229.25.0/24
91.242.251.0/24
91.246.35.0/24
91.247.186.0/24
92.119.36.0/24
94.154.115.0/24
95.130.228.0/24
109.107.151.0/24
109.205.63.0/24
146.19.41.0/24
146.19.46.0/24
146.19.66.0/24
146.19.119.0/24
146.19.153.0/24
146.19.158.0/24
146.19.186.0/24
146.19.231.0/24
176.126.125.0-176.126.126.255
178.212.79.0/24
185.76.148.0/24
185.76.150.0/24
185.138.165.0/24
185.145.232.0/24
185.149.150.0/24
185.198.155.0/24
185.201.253.0/24
185.213.194.0/24
188.244.118.0/24
193.3.163.0/24
193.3.186.0/24
193.35.229.0/24
193.35.231.0/24
193.38.155.0/24
193.104.183.0/24
193.110.134.0/23
193.110.160.0/23
193.163.87.0/24
193.163.124.0/24
193.201.202.0/23
193.202.44.0/23
193.221.208.0/24
193.228.228.0/24
194.32.105.0/24
194.55.128.0/23
194.55.132.0/23
194.62.160.0/24
194.104.133.0/24
194.156.78.0/24
195.60.170.0/24
195.64.107.0/24
195.64.113.0/24
195.225.83.0/24
212.18.123.0/24
212.23.194.0/24
212.52.8.0/24
213.109.158.0/24
217.8.116.0/24
217.114.33.0/24
217.114.36.0/24
217.119.133.0/24
IPv6:
2a03:4f80::/32
2a09:440::/29
2a09:9b80::/29
2a0b:3140::/29
2a0b:a040::/29
2a0b:b680::/29
2a0c:f140::/29
2a0e:d780::/29
2a11:740::/29
2a11:1180::/29
2a11:1b40::/29
2a11:2d40::/29
2a11:3000::/29
2a11:3e80::/29
2a11:4740::/29
2a11:5800::/29
2a11:5d40::/29
2a11:5d80::/29
2a11:6200::/29
2a11:7300::/29
2a11:8c00::/29
2a11:8e80::/29
2a11:9780::/29
2a11:9a00::/29
2a11:b340::/29
2a11:eb80::/29
2a11:ee00::/29
2a11:f880::/29
2a12::/29
2a12:b80::/29
2a12:f00::/29
2a12:2000::/29
2a12:2a80::/29
2a12:9280::/29
2a12:9380::/29
2a12:c100::/29
2a12:e280::/29
2a12:e480::/29
2a12:fc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57400
Signature Algorithm: sha256WithRSAEncryption
35:e8:58:4d:7e:a3:ab:1f:95:17:4e:2b:27:41:7c:0a:73:8c:
a0:10:f5:81:4a:13:40:d8:70:71:db:df:db:bb:92:b7:9a:53:
8e:44:73:aa:26:63:d8:3d:46:b5:37:75:64:e2:8f:8a:06:fe:
36:18:2a:2b:a0:f0:00:2e:23:45:dd:1a:4d:2b:43:71:ae:b4:
68:53:48:71:52:1b:e4:39:a4:22:09:a2:c1:90:e3:c7:4e:d4:
74:17:c0:86:08:4f:f6:6b:06:4f:eb:c7:f7:5f:5d:f3:0d:b1:
f1:73:a3:53:ea:67:a7:99:23:a4:0a:4e:04:e3:4c:6a:4e:28:
9b:4f:64:b2:66:e0:fd:f2:9b:8d:75:1e:14:f0:e3:40:d4:e3:
59:42:d0:99:f9:cd:76:cf:d1:a0:e7:51:b3:69:fb:42:40:4b:
5e:b2:03:02:96:aa:70:38:73:f9:e3:d4:a8:ee:78:af:2f:c5:
00:2c:e5:c4:7f:f6:32:12:e4:68:c1:50:48:10:9c:a9:15:95:
0c:a3:f9:79:78:6b:88:bd:dd:a5:4e:22:71:80:e0:b4:31:c3:
98:e6:b9:87:2d:cc:56:44:13:9b:b5:29:24:2f:8a:bf:00:4b:
78:76:00:b6:9d:6b:df:da:02:37:98:95:aa:ab:24:69:2c:a6:
dc:f3:1f:62
-----BEGIN CERTIFICATE-----
MIII5TCCB82gAwIBAgISAY4Y5pUw74oIp0eXtwR982K4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzA3MTIzMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDI5OTkwNDJjNWUyMDA2YmQ1YWViN2EwNWRlMWU5NmE1ZTczNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst0z/oREMnE6sN4H/Qsyj5IJ77hu
Uw7yzxUMprAWDKvuerrmR+6nQMU8DMxPNeYERnSVbLChisaat/bRfqlZ64B6Q4ij
uANfGcKwhHrG5u/9xyr4xLGsmT+DhDFgTIwfFMBLpYrDsO+rTtUjCmKUnKxT+6dc
Q89GvQ/F781FZFCI4qVRu2GH6bylfHNeYlcQ4bBdXDSpm70ioLf25/ne2/4X4Z2a
ZFTE84lZFqyw4rXxVbZGHVgdwXrN4cb1U3t38BT/kIO0NrMUKy9yuVspxiZbGxbc
L+Qw/qvtA5f2LNpMU6fL8yKXtRdbk8nI1VSpxmYJAV286KGIpHm4kDmQ4wIDAQAB
o4IF8TCCBe0wHQYDVR0OBBYEFA0pmQQsXiAGvVrregXeHpal5zZkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzJjMzMx
Ni1lZmM3LTQ5NTItOWVmZS04YzE1Mzk2NWJhYzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMmMzMzE2
LWVmYzctNDk1Mi05ZWZlLThjMTUzOTY1YmFjOS8xL0RTbVpCQ3hlSUFhOVd1dDZC
ZDRlbHFYbk5tUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDbgYIKwYB
BQUHAQcBAf8EggNdMIIDWTCCAjgEAgABMIICMAMEAAW0sQMEAAW1NgMEAB/e/AME
ACVIhgMEACVNlwMEACWM8AMEAi1V9AMEAi1aDAMEAi1adAMEAi2DwAMEAi2GFAME
Ai2HCAMEAi2I2AMEAi2I6AMEAi2KTAMEAi2LIAMEAi2RuAMEAi2WgAMEAi2YlAME
AC4SagMEAD4DFgMEAD4DNQMEAD5EQAMEAD7MIQMEAD7MJwMEAE1XfgMEAFOKMQME
AFUIggMEAVn4QAMEAFvk5wMEAFvk+wMEAFvlBQMEAFvlGQMEAFvy+wMEAFv2IwME
AFv3ugMEAFx3JAMEAF6acwMEAF+C5AMEAG1rlwMEAG3NPwMEAJITKQMEAJITLgME
AJITQgMEAJITdwMEAJITmQMEAJITngMEAJITugMEAJIT5zAMAwQAsH59AwQAsH5+
AwQAstRPAwQAuUyUAwQAuUyWAwQAuYqlAwQAuZHoAwQAuZWWAwQAucabAwQAucn9
AwQAudXCAwQAvPR2AwQAwQOjAwQAwQO6AwQAwSPlAwQAwSPnAwQAwSabAwQAwWi3
AwQBwW6GAwQBwW6gAwQAwaNXAwQAwaN8AwQBwcnKAwQBwcosAwQAwd3QAwQAweTk
AwQAwiBpAwQBwjeAAwQBwjeEAwQAwj6gAwQAwmiFAwQAwpxOAwQAwzyqAwQAw0Br
AwQAw0BxAwQAw+FTAwQA1BJ7AwQA1BfCAwQA1DQIAwQA1W2eAwQA2Qh0AwQA2XIh
AwQA2XIkAwQA2XeFMIIBGQQCAAIwggERAwUAKgNPgAMFAyoJBEADBQMqCZuAAwUD
KgsxQAMFAyoLoEADBQMqC7aAAwUDKgzxQAMFAyoO14ADBQMqEQdAAwUDKhERgAMF
AyoRG0ADBQMqES1AAwUDKhEwAAMFAyoRPoADBQMqEUdAAwUDKhFYAAMFAyoRXUAD
BQMqEV2AAwUDKhFiAAMFAyoRcwADBQMqEYwAAwUDKhGOgAMFAyoRl4ADBQMqEZoA
AwUDKhGzQAMFAyoR64ADBQMqEe4AAwUDKhH4gAMFAyoSAAADBQMqEguAAwUDKhIP
AAMFAyoSIAADBQMqEiqAAwUDKhKSgAMFAyoSk4ADBQMqEsEAAwUDKhLigAMFAyoS
5IADBQMqEvwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgODANBgkqhkiG9w0B
AQsFAAOCAQEANehYTX6jqx+VF04rJ0F8CnOMoBD1gUoTQNhwcdvf27uSt5pTjkRz
qiZj2D1GtTd1ZOKPigb+NhgqK6DwAC4jRd0aTStDca60aFNIcVIb5DmkIgmiwZDj
x07UdBfAhghP9msGT+vH919d8w2x8XOjU+pnp5kjpApOBONMak4om09ksmbg/fKb
jXUeFPDjQNTjWULQmfnNds/RoOdRs2n7QkBLXrIDApaqcDhz+ePUqO54ry/FACzl
xH/2MhLkaMFQSBCcqRWVDKP5eXhriL3dpU4icYDgtDHDmOa5hy3MVkQTm7UpJC+K
vwBLeHYAtp1r39oCN5iVqqskaSym3PMfYg==
-----END CERTIFICATE-----
Generated at Thu Mar 28 17:55:44 2024 by rpki-client on console-fra.rpki-client.org