Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer (raw, json)
Hash identifier: aYY6vdGrXFVWH/crsifLInNvOM94vUHDYq7vD9aEh5M=
Subject key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA606BF8B4951B8C9EC14AD81EC371
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57400
IP: 5.180.177.0/24
IP: 5.181.54.0/24
IP: 31.222.252.0/24
IP: 37.72.134.0/24
IP: 37.77.151.0/24
IP: 37.140.240.0/24
IP: 45.85.244.0/22
IP: 45.90.12.0/22
IP: 45.90.116.0/22
IP: 45.131.192.0/22
IP: 45.134.20.0/22
IP: 45.135.8.0/22
IP: 45.136.216.0/22
IP: 45.136.232.0/22
IP: 45.138.76.0/22
IP: 45.139.32.0/22
IP: 45.145.184.0/22
IP: 45.150.128.0/22
IP: 45.152.148.0/22
IP: 46.18.106.0/24
IP: 62.3.22.0/24
IP: 62.3.53.0/24
IP: 62.68.64.0/24
IP: 62.68.72.0/24
IP: 62.204.33.0/24
IP: 62.204.39.0/24
IP: 77.87.126.0/24
IP: 83.138.49.0/24
IP: 85.8.130.0/24
IP: 89.248.64.0/23
IP: 91.212.122.0/24
IP: 91.228.231.0/24
IP: 91.228.251.0/24
IP: 91.229.5.0/24
IP: 91.229.25.0/24
IP: 91.242.251.0/24
IP: 91.246.35.0/24
IP: 91.247.186.0/24
IP: 92.119.36.0/24
IP: 94.154.115.0/24
IP: 95.130.228.0/24
IP: 109.107.151.0/24
IP: 109.205.63.0/24
IP: 146.19.41.0/24
IP: 146.19.46.0/24
IP: 146.19.66.0/24
IP: 146.19.119.0/24
IP: 146.19.153.0/24
IP: 146.19.158.0/24
IP: 146.19.186.0/24
IP: 146.19.231.0/24
IP: 176.126.125.0 -- 176.126.126.255
IP: 178.212.79.0/24
IP: 185.76.148.0/24
IP: 185.76.150.0/24
IP: 185.94.65.0 -- 185.94.66.255
IP: 185.138.165.0/24
IP: 185.145.232.0/24
IP: 185.149.150.0/24
IP: 185.198.155.0/24
IP: 185.201.253.0/24
IP: 185.213.194.0/24
IP: 188.244.118.0/24
IP: 193.3.163.0/24
IP: 193.3.186.0/24
IP: 193.35.229.0/24
IP: 193.35.231.0/24
IP: 193.38.155.0/24
IP: 193.104.183.0/24
IP: 193.110.134.0/23
IP: 193.110.160.0/23
IP: 193.163.87.0/24
IP: 193.163.124.0/24
IP: 193.201.202.0/23
IP: 193.202.44.0/23
IP: 193.221.208.0/24
IP: 193.228.228.0/24
IP: 194.32.105.0/24
IP: 194.55.128.0/23
IP: 194.55.132.0/23
IP: 194.62.160.0/24
IP: 194.104.133.0/24
IP: 194.156.78.0/24
IP: 195.60.170.0/24
IP: 195.64.107.0/24
IP: 195.64.113.0/24
IP: 195.225.83.0/24
IP: 212.18.123.0/24
IP: 212.23.194.0/24
IP: 212.52.8.0/24
IP: 213.109.158.0/24
IP: 217.8.116.0/24
IP: 217.114.33.0/24
IP: 217.114.36.0/24
IP: 217.119.133.0/24
IP: 2a03:4f80::/32
IP: 2a09:440::/29
IP: 2a09:9b80::/29
IP: 2a0b:3140::/29
IP: 2a0b:a040::/29
IP: 2a0b:b680::/29
IP: 2a0c:f140::/29
IP: 2a0e:d780::/29
IP: 2a11:740::/29
IP: 2a11:1180::/29
IP: 2a11:1b40::/29
IP: 2a11:2d40::/29
IP: 2a11:3000::/29
IP: 2a11:3e80::/29
IP: 2a11:4740::/29
IP: 2a11:5800::/29
IP: 2a11:5d40::/29
IP: 2a11:5d80::/29
IP: 2a11:6200::/29
IP: 2a11:7300::/29
IP: 2a11:8c00::/29
IP: 2a11:8e80::/29
IP: 2a11:9780::/29
IP: 2a11:9a00::/29
IP: 2a11:b340::/29
IP: 2a11:eb80::/29
IP: 2a11:ee00::/29
IP: 2a11:f880::/29
IP: 2a12::/29
IP: 2a12:b80::/29
IP: 2a12:f00::/29
IP: 2a12:2000::/29
IP: 2a12:2a80::/29
IP: 2a12:9280::/29
IP: 2a12:9380::/29
IP: 2a12:9880::/29
IP: 2a12:9980::/29
IP: 2a12:c100::/29
IP: 2a12:de80::/29
IP: 2a12:e080::/29
IP: 2a12:e280::/29
IP: 2a12:e480::/29
IP: 2a12:fc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:60:6b:f8:b4:95:1b:8c:9e:c1:4a:d8:1e:c3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:33:fe:84:44:32:71:3a:b0:de:07:fd:0b:
32:8f:92:09:ef:b8:6e:53:0e:f2:cf:15:0c:a6:b0:
16:0c:ab:ee:7a:ba:e6:47:ee:a7:40:c5:3c:0c:cc:
4f:35:e6:04:46:74:95:6c:b0:a1:8a:c6:9a:b7:f6:
d1:7e:a9:59:eb:80:7a:43:88:a3:b8:03:5f:19:c2:
b0:84:7a:c6:e6:ef:fd:c7:2a:f8:c4:b1:ac:99:3f:
83:84:31:60:4c:8c:1f:14:c0:4b:a5:8a:c3:b0:ef:
ab:4e:d5:23:0a:62:94:9c:ac:53:fb:a7:5c:43:cf:
46:bd:0f:c5:ef:cd:45:64:50:88:e2:a5:51:bb:61:
87:e9:bc:a5:7c:73:5e:62:57:10:e1:b0:5d:5c:34:
a9:9b:bd:22:a0:b7:f6:e7:f9:de:db:fe:17:e1:9d:
9a:64:54:c4:f3:89:59:16:ac:b0:e2:b5:f1:55:b6:
46:1d:58:1d:c1:7a:cd:e1:c6:f5:53:7b:77:f0:14:
ff:90:83:b4:36:b3:14:2b:2f:72:b9:5b:29:c6:26:
5b:1b:16:dc:2f:e4:30:fe:ab:ed:03:97:f6:2c:da:
4c:53:a7:cb:f3:22:97:b5:17:5b:93:c9:c8:d5:54:
a9:c6:66:09:01:5d:bc:e8:a1:88:a4:79:b8:90:39:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.177.0/24
5.181.54.0/24
31.222.252.0/24
37.72.134.0/24
37.77.151.0/24
37.140.240.0/24
45.85.244.0/22
45.90.12.0/22
45.90.116.0/22
45.131.192.0/22
45.134.20.0/22
45.135.8.0/22
45.136.216.0/22
45.136.232.0/22
45.138.76.0/22
45.139.32.0/22
45.145.184.0/22
45.150.128.0/22
45.152.148.0/22
46.18.106.0/24
62.3.22.0/24
62.3.53.0/24
62.68.64.0/24
62.68.72.0/24
62.204.33.0/24
62.204.39.0/24
77.87.126.0/24
83.138.49.0/24
85.8.130.0/24
89.248.64.0/23
91.212.122.0/24
91.228.231.0/24
91.228.251.0/24
91.229.5.0/24
91.229.25.0/24
91.242.251.0/24
91.246.35.0/24
91.247.186.0/24
92.119.36.0/24
94.154.115.0/24
95.130.228.0/24
109.107.151.0/24
109.205.63.0/24
146.19.41.0/24
146.19.46.0/24
146.19.66.0/24
146.19.119.0/24
146.19.153.0/24
146.19.158.0/24
146.19.186.0/24
146.19.231.0/24
176.126.125.0-176.126.126.255
178.212.79.0/24
185.76.148.0/24
185.76.150.0/24
185.94.65.0-185.94.66.255
185.138.165.0/24
185.145.232.0/24
185.149.150.0/24
185.198.155.0/24
185.201.253.0/24
185.213.194.0/24
188.244.118.0/24
193.3.163.0/24
193.3.186.0/24
193.35.229.0/24
193.35.231.0/24
193.38.155.0/24
193.104.183.0/24
193.110.134.0/23
193.110.160.0/23
193.163.87.0/24
193.163.124.0/24
193.201.202.0/23
193.202.44.0/23
193.221.208.0/24
193.228.228.0/24
194.32.105.0/24
194.55.128.0/23
194.55.132.0/23
194.62.160.0/24
194.104.133.0/24
194.156.78.0/24
195.60.170.0/24
195.64.107.0/24
195.64.113.0/24
195.225.83.0/24
212.18.123.0/24
212.23.194.0/24
212.52.8.0/24
213.109.158.0/24
217.8.116.0/24
217.114.33.0/24
217.114.36.0/24
217.119.133.0/24
IPv6:
2a03:4f80::/32
2a09:440::/29
2a09:9b80::/29
2a0b:3140::/29
2a0b:a040::/29
2a0b:b680::/29
2a0c:f140::/29
2a0e:d780::/29
2a11:740::/29
2a11:1180::/29
2a11:1b40::/29
2a11:2d40::/29
2a11:3000::/29
2a11:3e80::/29
2a11:4740::/29
2a11:5800::/29
2a11:5d40::/29
2a11:5d80::/29
2a11:6200::/29
2a11:7300::/29
2a11:8c00::/29
2a11:8e80::/29
2a11:9780::/29
2a11:9a00::/29
2a11:b340::/29
2a11:eb80::/29
2a11:ee00::/29
2a11:f880::/29
2a12::/29
2a12:b80::/29
2a12:f00::/29
2a12:2000::/29
2a12:2a80::/29
2a12:9280::/29
2a12:9380::/29
2a12:9880::/29
2a12:9980::/29
2a12:c100::/29
2a12:de80::/29
2a12:e080::/29
2a12:e280::/29
2a12:e480::/29
2a12:fc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57400
Signature Algorithm: sha256WithRSAEncryption
ac:f3:a7:4d:8a:45:b7:3e:a1:10:7e:61:cc:a9:16:83:f8:a2:
ce:fa:50:56:8b:d6:81:1f:5f:38:61:4b:bb:74:57:cc:b4:97:
28:6a:a5:b0:3e:37:49:3a:23:ab:71:89:5f:d3:ae:d1:83:28:
1e:5f:af:f6:bc:70:d7:e7:5d:6f:be:d0:1c:0b:be:06:83:71:
0b:f8:f2:d5:a4:ac:bc:0c:26:c9:46:ba:e5:af:19:05:cc:7a:
87:11:0e:2a:7a:72:bc:c8:9c:4c:02:7e:3d:d9:93:55:28:aa:
41:fa:18:f7:f8:43:8b:19:cc:f7:5b:70:0e:a5:82:79:c1:2d:
6a:ea:fb:13:29:ff:a4:4a:24:8c:91:c3:c6:1e:46:22:63:5c:
4f:ef:53:02:86:57:5b:e6:85:c4:66:a0:6c:e9:84:a5:b4:06:
3f:6f:15:9f:10:1e:60:cf:cb:e9:48:3e:60:ac:5c:66:e0:58:
9c:65:76:1f:82:1b:0a:91:34:23:e9:70:e6:df:d0:1c:9a:04:
63:20:33:71:e0:cf:0a:49:e6:c1:88:eb:db:39:e7:e4:b0:05:
0c:7e:78:de:51:3c:0f:99:d2:a5:87:c3:2a:98:0c:47:79:a6:
79:00:35:95:f8:04:f4:d4:47:c7:15:11:89:8a:25:2b:e0:30:
a3:b6:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:37 2025 by rpki-client