Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
File: DUTaXBkECVhg6GgYBXPuPIlae0U.cer (raw, json)
Hash identifier: XUnrzVlISQ7Ei4RBABdV4CuCESzP/PnLQtoMsLe6vcc=
Subject key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC0DE0BAB5E4034019A6D2155C3498
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.71.48.0/21
IP: 185.168.48.0/22
IP: 2a03:3b00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0d:e0:ba:b5:e4:03:40:19:a6:d2:15:5c:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d44da5c1904095860e868180573ee3c895a7b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:56:92:54:53:19:77:83:3d:5c:de:a0:78:
89:3c:a4:f0:22:3a:e7:7a:66:b6:f5:38:61:a5:23:
37:7d:14:ed:af:0e:d7:88:8f:6f:99:41:57:bb:0e:
3f:6a:91:6a:4f:61:9f:ba:74:21:3e:e1:50:b0:1e:
6f:2b:3a:39:fe:25:63:71:aa:1b:a2:f0:58:70:02:
e9:31:bd:f0:0c:7f:7a:cc:37:44:43:46:13:38:39:
01:2a:9e:a4:42:d9:d7:94:23:49:3c:73:45:a1:c3:
70:24:7f:8c:71:96:8e:dd:f0:3f:82:2e:83:54:5c:
2b:c8:32:3e:e4:fd:7e:9c:22:17:44:18:97:bd:40:
40:72:46:cf:3b:13:ec:e1:d7:aa:0d:24:5b:01:11:
98:e6:22:b4:66:11:e7:29:01:b7:12:5f:1b:b0:f2:
6e:4e:19:77:7c:7e:79:c4:39:65:4d:0b:a4:6b:14:
0f:79:67:1c:06:00:33:cb:55:6b:f0:29:32:16:c3:
d9:e4:3f:ea:c1:3e:2b:3f:53:17:f5:3a:1b:9a:9d:
a3:aa:ed:2e:bb:35:02:aa:12:38:52:b7:80:38:e1:
6b:ea:e8:ab:c1:0e:18:5a:46:36:07:b7:26:ab:0e:
2c:06:fd:bd:c1:e9:9f:69:39:b8:24:4c:50:53:a0:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.48.0/21
185.168.48.0/22
IPv6:
2a03:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
8c:11:db:84:dc:fa:a3:5f:2a:0b:3d:f4:8f:65:65:1f:22:27:
bc:80:85:64:69:39:02:18:aa:b7:e4:d8:0a:f7:6f:a8:88:36:
0a:25:c1:17:3c:2d:f9:00:f5:8d:b9:97:e9:24:14:81:9c:06:
56:7c:3b:bb:68:6f:d7:e0:6d:51:24:c3:b4:84:9d:2e:68:8d:
96:17:73:20:6f:26:4b:f6:59:77:e0:00:07:5f:26:dc:8b:35:
03:7a:e9:ae:c1:28:a7:c0:3e:0f:b3:09:17:d5:ab:1c:3e:0d:
66:ca:da:6b:f7:c0:25:03:69:90:be:32:17:38:c1:58:da:a2:
7b:66:62:68:e3:4d:08:a3:ea:28:f2:ed:7c:f1:5c:2f:4b:cc:
e2:ef:6e:ab:19:ca:96:df:fa:e4:5a:1b:61:63:e4:5e:10:01:
58:4a:ac:e4:f9:1d:0e:57:7d:68:4a:1e:8b:0f:d5:f3:3f:6d:
24:fe:e3:95:87:db:7e:27:62:c6:63:e7:3d:f9:38:bf:95:77:
43:b9:0a:bb:32:b8:ec:9b:e4:65:ba:e1:61:10:17:11:09:61:
17:0b:35:60:bd:ad:90:f6:eb:d8:f6:3a:d1:ff:3c:d1:49:71:
a0:7e:f2:e3:2c:27:3a:81:69:e0:a4:1c:de:3f:16:02:26:26:
81:c5:e5:e8
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQl/A3gurXkA0AZptIVXDSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDQ0ZGE1YzE5MDQwOTU4NjBlODY4MTgwNTczZWUzYzg5NWE3YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAughWklRTGXeDPVzeoHiJPKTwIjrn
ema29ThhpSM3fRTtrw7XiI9vmUFXuw4/apFqT2GfunQhPuFQsB5vKzo5/iVjcaob
ovBYcALpMb3wDH96zDdEQ0YTODkBKp6kQtnXlCNJPHNFocNwJH+McZaO3fA/gi6D
VFwryDI+5P1+nCIXRBiXvUBAckbPOxPs4deqDSRbARGY5iK0ZhHnKQG3El8bsPJu
Thl3fH55xDllTQukaxQPeWccBgAzy1Vr8CkyFsPZ5D/qwT4rP1MX9Tobmp2jqu0u
uzUCqhI4UreAOOFr6uirwQ4YWkY2B7cmqw4sBv29wemfaTm4JExQU6AqnQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFA1E2lwZBAlYYOhoGAVz7jyJWntFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2JjZTUz
ZC1kMzlkLTRlMjMtYWExNy0yN2ZiNTgyMmIzMmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYmNlNTNk
LWQzOWQtNGUyMy1hYTE3LTI3ZmI1ODIyYjMyZC8xL0RVVGFYQmtFQ1ZoZzZHZ1lC
WFB1UElsYWUwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDbUcwAwQCuagwMA0EAgACMAcDBQAqAzsAMA0G
CSqGSIb3DQEBCwUAA4IBAQCMEduE3PqjXyoLPfSPZWUfIie8gIVkaTkCGKq35NgK
92+oiDYKJcEXPC35APWNuZfpJBSBnAZWfDu7aG/X4G1RJMO0hJ0uaI2WF3MgbyZL
9ll34AAHXybcizUDeumuwSinwD4PswkX1ascPg1mytpr98AlA2mQvjIXOMFY2qJ7
ZmJo400Io+oo8u188VwvS8zi726rGcqW3/rkWhthY+ReEAFYSqzk+R0OV31oSh6L
D9XzP20k/uOVh9t+J2LGY+c9+Ti/lXdDuQq7Mrjsm+RluuFhEBcRCWEXCzVgva2Q
9uvY9jrR/zzRSXGgfvLjLCc6gWngpBzePxYCJiaBxeXo
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:18:27 2025 by rpki-client