Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer (raw, json)
Hash identifier: LNtUEkJNz0JX9hHz30xfHnTk1cWxISJiSqeQiKBFf84=
Subject key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190533F75A108D797399CE44C0B179FB575
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Jun 2024 06:33:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57400
IP: 5.180.177.0/24
IP: 5.181.54.0/24
IP: 31.222.252.0/24
IP: 37.72.134.0/24
IP: 37.77.151.0/24
IP: 37.140.240.0/24
IP: 45.85.244.0/22
IP: 45.90.12.0/22
IP: 45.90.116.0/22
IP: 45.131.192.0/22
IP: 45.134.20.0/22
IP: 45.135.8.0/22
IP: 45.136.216.0/22
IP: 45.136.232.0/22
IP: 45.138.76.0/22
IP: 45.139.32.0/22
IP: 45.145.184.0/22
IP: 45.150.128.0/22
IP: 45.152.148.0/22
IP: 46.18.106.0/24
IP: 62.3.22.0/24
IP: 62.3.53.0/24
IP: 62.68.64.0/24
IP: 62.68.72.0/24
IP: 62.204.33.0/24
IP: 62.204.39.0/24
IP: 77.87.126.0/24
IP: 83.138.49.0/24
IP: 85.8.130.0/24
IP: 89.248.64.0/23
IP: 91.212.122.0/24
IP: 91.228.231.0/24
IP: 91.228.251.0/24
IP: 91.229.5.0/24
IP: 91.229.25.0/24
IP: 91.242.251.0/24
IP: 91.246.35.0/24
IP: 91.247.186.0/24
IP: 92.119.36.0/24
IP: 94.154.115.0/24
IP: 95.130.228.0/24
IP: 109.107.151.0/24
IP: 109.205.63.0/24
IP: 146.19.41.0/24
IP: 146.19.46.0/24
IP: 146.19.66.0/24
IP: 146.19.119.0/24
IP: 146.19.153.0/24
IP: 146.19.158.0/24
IP: 146.19.186.0/24
IP: 146.19.231.0/24
IP: 176.126.125.0 -- 176.126.126.255
IP: 178.212.79.0/24
IP: 185.76.148.0/24
IP: 185.76.150.0/24
IP: 185.94.65.0 -- 185.94.66.255
IP: 185.138.165.0/24
IP: 185.145.232.0/24
IP: 185.149.150.0/24
IP: 185.198.155.0/24
IP: 185.201.253.0/24
IP: 185.213.194.0/24
IP: 188.244.118.0/24
IP: 193.3.163.0/24
IP: 193.3.186.0/24
IP: 193.35.229.0/24
IP: 193.35.231.0/24
IP: 193.38.155.0/24
IP: 193.104.183.0/24
IP: 193.110.134.0/23
IP: 193.110.160.0/23
IP: 193.163.87.0/24
IP: 193.163.124.0/24
IP: 193.201.202.0/23
IP: 193.202.44.0/23
IP: 193.221.208.0/24
IP: 193.228.228.0/24
IP: 194.32.105.0/24
IP: 194.55.128.0/23
IP: 194.55.132.0/23
IP: 194.62.160.0/24
IP: 194.104.133.0/24
IP: 194.156.78.0/24
IP: 195.60.170.0/24
IP: 195.64.107.0/24
IP: 195.64.113.0/24
IP: 195.225.83.0/24
IP: 212.18.123.0/24
IP: 212.23.194.0/24
IP: 212.52.8.0/24
IP: 213.109.158.0/24
IP: 217.8.116.0/24
IP: 217.114.33.0/24
IP: 217.114.36.0/24
IP: 217.119.133.0/24
IP: 2a03:4f80::/32
IP: 2a09:440::/29
IP: 2a09:9b80::/29
IP: 2a0b:3140::/29
IP: 2a0b:a040::/29
IP: 2a0b:b680::/29
IP: 2a0c:f140::/29
IP: 2a0e:d780::/29
IP: 2a11:740::/29
IP: 2a11:1180::/29
IP: 2a11:1b40::/29
IP: 2a11:2d40::/29
IP: 2a11:3000::/29
IP: 2a11:3e80::/29
IP: 2a11:4740::/29
IP: 2a11:5800::/29
IP: 2a11:5d40::/29
IP: 2a11:5d80::/29
IP: 2a11:6200::/29
IP: 2a11:7300::/29
IP: 2a11:8c00::/29
IP: 2a11:8e80::/29
IP: 2a11:9780::/29
IP: 2a11:9a00::/29
IP: 2a11:b340::/29
IP: 2a11:eb80::/29
IP: 2a11:ee00::/29
IP: 2a11:f880::/29
IP: 2a12::/29
IP: 2a12:b80::/29
IP: 2a12:f00::/29
IP: 2a12:2000::/29
IP: 2a12:2a80::/29
IP: 2a12:9280::/29
IP: 2a12:9380::/29
IP: 2a12:9880::/29
IP: 2a12:9980::/29
IP: 2a12:c100::/29
IP: 2a12:de80::/29
IP: 2a12:e080::/29
IP: 2a12:e280::/29
IP: 2a12:e480::/29
IP: 2a12:fc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:3f:75:a1:08:d7:97:39:9c:e4:4c:0b:17:9f:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 06:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:33:fe:84:44:32:71:3a:b0:de:07:fd:0b:
32:8f:92:09:ef:b8:6e:53:0e:f2:cf:15:0c:a6:b0:
16:0c:ab:ee:7a:ba:e6:47:ee:a7:40:c5:3c:0c:cc:
4f:35:e6:04:46:74:95:6c:b0:a1:8a:c6:9a:b7:f6:
d1:7e:a9:59:eb:80:7a:43:88:a3:b8:03:5f:19:c2:
b0:84:7a:c6:e6:ef:fd:c7:2a:f8:c4:b1:ac:99:3f:
83:84:31:60:4c:8c:1f:14:c0:4b:a5:8a:c3:b0:ef:
ab:4e:d5:23:0a:62:94:9c:ac:53:fb:a7:5c:43:cf:
46:bd:0f:c5:ef:cd:45:64:50:88:e2:a5:51:bb:61:
87:e9:bc:a5:7c:73:5e:62:57:10:e1:b0:5d:5c:34:
a9:9b:bd:22:a0:b7:f6:e7:f9:de:db:fe:17:e1:9d:
9a:64:54:c4:f3:89:59:16:ac:b0:e2:b5:f1:55:b6:
46:1d:58:1d:c1:7a:cd:e1:c6:f5:53:7b:77:f0:14:
ff:90:83:b4:36:b3:14:2b:2f:72:b9:5b:29:c6:26:
5b:1b:16:dc:2f:e4:30:fe:ab:ed:03:97:f6:2c:da:
4c:53:a7:cb:f3:22:97:b5:17:5b:93:c9:c8:d5:54:
a9:c6:66:09:01:5d:bc:e8:a1:88:a4:79:b8:90:39:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.177.0/24
5.181.54.0/24
31.222.252.0/24
37.72.134.0/24
37.77.151.0/24
37.140.240.0/24
45.85.244.0/22
45.90.12.0/22
45.90.116.0/22
45.131.192.0/22
45.134.20.0/22
45.135.8.0/22
45.136.216.0/22
45.136.232.0/22
45.138.76.0/22
45.139.32.0/22
45.145.184.0/22
45.150.128.0/22
45.152.148.0/22
46.18.106.0/24
62.3.22.0/24
62.3.53.0/24
62.68.64.0/24
62.68.72.0/24
62.204.33.0/24
62.204.39.0/24
77.87.126.0/24
83.138.49.0/24
85.8.130.0/24
89.248.64.0/23
91.212.122.0/24
91.228.231.0/24
91.228.251.0/24
91.229.5.0/24
91.229.25.0/24
91.242.251.0/24
91.246.35.0/24
91.247.186.0/24
92.119.36.0/24
94.154.115.0/24
95.130.228.0/24
109.107.151.0/24
109.205.63.0/24
146.19.41.0/24
146.19.46.0/24
146.19.66.0/24
146.19.119.0/24
146.19.153.0/24
146.19.158.0/24
146.19.186.0/24
146.19.231.0/24
176.126.125.0-176.126.126.255
178.212.79.0/24
185.76.148.0/24
185.76.150.0/24
185.94.65.0-185.94.66.255
185.138.165.0/24
185.145.232.0/24
185.149.150.0/24
185.198.155.0/24
185.201.253.0/24
185.213.194.0/24
188.244.118.0/24
193.3.163.0/24
193.3.186.0/24
193.35.229.0/24
193.35.231.0/24
193.38.155.0/24
193.104.183.0/24
193.110.134.0/23
193.110.160.0/23
193.163.87.0/24
193.163.124.0/24
193.201.202.0/23
193.202.44.0/23
193.221.208.0/24
193.228.228.0/24
194.32.105.0/24
194.55.128.0/23
194.55.132.0/23
194.62.160.0/24
194.104.133.0/24
194.156.78.0/24
195.60.170.0/24
195.64.107.0/24
195.64.113.0/24
195.225.83.0/24
212.18.123.0/24
212.23.194.0/24
212.52.8.0/24
213.109.158.0/24
217.8.116.0/24
217.114.33.0/24
217.114.36.0/24
217.119.133.0/24
IPv6:
2a03:4f80::/32
2a09:440::/29
2a09:9b80::/29
2a0b:3140::/29
2a0b:a040::/29
2a0b:b680::/29
2a0c:f140::/29
2a0e:d780::/29
2a11:740::/29
2a11:1180::/29
2a11:1b40::/29
2a11:2d40::/29
2a11:3000::/29
2a11:3e80::/29
2a11:4740::/29
2a11:5800::/29
2a11:5d40::/29
2a11:5d80::/29
2a11:6200::/29
2a11:7300::/29
2a11:8c00::/29
2a11:8e80::/29
2a11:9780::/29
2a11:9a00::/29
2a11:b340::/29
2a11:eb80::/29
2a11:ee00::/29
2a11:f880::/29
2a12::/29
2a12:b80::/29
2a12:f00::/29
2a12:2000::/29
2a12:2a80::/29
2a12:9280::/29
2a12:9380::/29
2a12:9880::/29
2a12:9980::/29
2a12:c100::/29
2a12:de80::/29
2a12:e080::/29
2a12:e280::/29
2a12:e480::/29
2a12:fc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57400
Signature Algorithm: sha256WithRSAEncryption
af:b4:0d:70:8c:03:a6:0c:f8:8c:09:7d:1e:b4:aa:f3:0c:f4:
c8:b2:dc:98:9a:76:7c:39:04:9d:78:dc:51:e1:74:01:59:ae:
0c:bc:86:ac:98:09:a7:51:c2:59:14:0e:e9:c3:12:2b:e8:c0:
c8:86:0f:ab:96:2d:01:e1:da:71:11:b4:36:af:b1:47:f7:ba:
0e:54:c0:0c:0c:15:d9:bc:08:ed:b0:c6:1c:2f:a4:ef:3c:d6:
f4:8d:6c:0f:b8:43:0c:e9:54:f8:47:f6:6c:64:27:4a:6d:e8:
04:83:ea:57:7e:62:44:16:76:13:75:91:69:d6:80:34:ea:44:
6f:b6:18:79:dd:09:37:5a:86:a1:c5:c6:43:d0:b2:76:0e:a9:
c7:e6:85:c5:0e:01:11:ee:57:0b:bc:64:0b:74:28:41:fa:1b:
aa:ec:79:61:e1:26:08:b7:a0:87:01:bf:d6:b9:d7:fd:4c:b7:
b2:d5:61:bd:40:3f:3b:e2:10:2c:7e:7e:04:48:40:55:af:10:
81:28:a8:74:c8:68:88:b5:2f:15:ba:7a:65:9b:fb:08:3d:4c:
79:3f:c0:ee:13:d3:d5:b6:24:2a:ac:d1:cc:6b:64:d4:29:ca:
20:ae:31:77:b2:31:b8:c9:1c:29:60:37:e9:e2:b6:8a:bd:46:
17:4c:43:b5
-----BEGIN CERTIFICATE-----
MIIJGzCCCAOgAwIBAgISAZBTP3WhCNeXOZzkTAsXn7V1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjI2MDYzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDI5OTkwNDJjNWUyMDA2YmQ1YWViN2EwNWRlMWU5NmE1ZTczNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst0z/oREMnE6sN4H/Qsyj5IJ77hu
Uw7yzxUMprAWDKvuerrmR+6nQMU8DMxPNeYERnSVbLChisaat/bRfqlZ64B6Q4ij
uANfGcKwhHrG5u/9xyr4xLGsmT+DhDFgTIwfFMBLpYrDsO+rTtUjCmKUnKxT+6dc
Q89GvQ/F781FZFCI4qVRu2GH6bylfHNeYlcQ4bBdXDSpm70ioLf25/ne2/4X4Z2a
ZFTE84lZFqyw4rXxVbZGHVgdwXrN4cb1U3t38BT/kIO0NrMUKy9yuVspxiZbGxbc
L+Qw/qvtA5f2LNpMU6fL8yKXtRdbk8nI1VSpxmYJAV286KGIpHm4kDmQ4wIDAQAB
o4IGJzCCBiMwHQYDVR0OBBYEFA0pmQQsXiAGvVrregXeHpal5zZkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzJjMzMx
Ni1lZmM3LTQ5NTItOWVmZS04YzE1Mzk2NWJhYzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMmMzMzE2
LWVmYzctNDk1Mi05ZWZlLThjMTUzOTY1YmFjOS8xL0RTbVpCQ3hlSUFhOVd1dDZC
ZDRlbHFYbk5tUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDpAYIKwYB
BQUHAQcBAf8EggOTMIIDjzCCAlIEAgABMIICSgMEAAW0sQMEAAW1NgMEAB/e/AME
ACVIhgMEACVNlwMEACWM8AMEAi1V9AMEAi1aDAMEAi1adAMEAi2DwAMEAi2GFAME
Ai2HCAMEAi2I2AMEAi2I6AMEAi2KTAMEAi2LIAMEAi2RuAMEAi2WgAMEAi2YlAME
AC4SagMEAD4DFgMEAD4DNQMEAD5EQAMEAD5ESAMEAD7MIQMEAD7MJwMEAE1XfgME
AFOKMQMEAFUIggMEAVn4QAMEAFvUegMEAFvk5wMEAFvk+wMEAFvlBQMEAFvlGQME
AFvy+wMEAFv2IwMEAFv3ugMEAFx3JAMEAF6acwMEAF+C5AMEAG1rlwMEAG3NPwME
AJITKQMEAJITLgMEAJITQgMEAJITdwMEAJITmQMEAJITngMEAJITugMEAJIT5zAM
AwQAsH59AwQAsH5+AwQAstRPAwQAuUyUAwQAuUyWMAwDBAC5XkEDBAC5XkIDBAC5
iqUDBAC5kegDBAC5lZYDBAC5xpsDBAC5yf0DBAC51cIDBAC89HYDBADBA6MDBADB
A7oDBADBI+UDBADBI+cDBADBJpsDBADBaLcDBAHBboYDBAHBbqADBADBo1cDBADB
o3wDBAHBycoDBAHByiwDBADB3dADBADB5OQDBADCIGkDBAHCN4ADBAHCN4QDBADC
PqADBADCaIUDBADCnE4DBADDPKoDBADDQGsDBADDQHEDBADD4VMDBADUEnsDBADU
F8IDBADUNAgDBADVbZ4DBADZCHQDBADZciEDBADZciQDBADZd4UwggE1BAIAAjCC
AS0DBQAqA0+AAwUDKgkEQAMFAyoJm4ADBQMqCzFAAwUDKgugQAMFAyoLtoADBQMq
DPFAAwUDKg7XgAMFAyoRB0ADBQMqERGAAwUDKhEbQAMFAyoRLUADBQMqETAAAwUD
KhE+gAMFAyoRR0ADBQMqEVgAAwUDKhFdQAMFAyoRXYADBQMqEWIAAwUDKhFzAAMF
AyoRjAADBQMqEY6AAwUDKhGXgAMFAyoRmgADBQMqEbNAAwUDKhHrgAMFAyoR7gAD
BQMqEfiAAwUDKhIAAAMFAyoSC4ADBQMqEg8AAwUDKhIgAAMFAyoSKoADBQMqEpKA
AwUDKhKTgAMFAyoSmIADBQMqEpmAAwUDKhLBAAMFAyoS3oADBQMqEuCAAwUDKhLi
gAMFAyoS5IADBQMqEvwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgODANBgkq
hkiG9w0BAQsFAAOCAQEAr7QNcIwDpgz4jAl9HrSq8wz0yLLcmJp2fDkEnXjcUeF0
AVmuDLyGrJgJp1HCWRQO6cMSK+jAyIYPq5YtAeHacRG0Nq+xR/e6DlTADAwV2bwI
7bDGHC+k7zzW9I1sD7hDDOlU+Ef2bGQnSm3oBIPqV35iRBZ2E3WRadaANOpEb7YY
ed0JN1qGocXGQ9Cydg6px+aFxQ4BEe5XC7xkC3QoQfobqux5YeEmCLeghwG/1rnX
/Uy3stVhvUA/O+IQLH5+BEhAVa8QgSiodMhoiLUvFbp6ZZv7CD1MeT/A7hPT1bYk
KqzRzGtk1CnKIK4xd7IxuMkcKWA36eK2ir1GF0xDtQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:40:09 2024 by rpki-client on console-fra.rpki-client.org