Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
File: GxUEuvgu-OsK5QivQLY442YKVIg.cer (raw, json)
Hash identifier: dqiGsOm/TUXr/xoPRqVLbP6/omHkWFLufTT7oiZjsuc=
Subject key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019445E9EF8E14A848D71C5C32B19A173E60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jan 2025 12:35:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210459
IP: 77.81.177.0/24
IP: 185.38.103.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:e9:ef:8e:14:a8:48:d7:1c:5c:32:b1:9a:17:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 8 12:35:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:34:52:c9:12:5b:a9:5a:2a:28:5a:23:9a:
4a:4f:57:b5:50:e8:89:8c:7f:61:c6:6a:8b:3e:dc:
78:15:50:eb:34:ab:9d:12:48:47:49:0a:1c:29:ea:
74:00:4a:3a:8f:62:60:61:06:fa:d6:42:f5:9c:ee:
fa:c7:89:cd:be:74:63:40:1f:11:44:e8:e6:5b:2e:
54:12:78:74:76:74:bd:90:02:20:48:7e:37:4b:df:
5c:d9:37:f3:b9:b1:9e:c7:0c:8e:7f:40:f6:4d:b3:
f5:f9:c1:1a:b6:5e:8d:3b:fc:cf:8e:3a:86:61:39:
a6:f7:81:8d:d0:74:78:c1:08:93:93:dd:68:1a:3e:
35:d4:62:4b:36:6e:d5:92:b9:04:5d:32:ee:0e:00:
f9:34:13:e8:c9:40:bf:e4:bd:44:e0:62:85:86:16:
3a:fd:3f:34:8e:44:c5:af:aa:e7:67:85:87:06:ba:
ad:2b:f2:ec:e0:44:93:04:77:4a:b4:90:b2:f2:f2:
18:df:92:1a:78:ba:ce:bc:d8:3b:9c:ac:c6:e8:35:
74:a9:7d:90:d4:70:89:fe:5e:76:f0:8f:0e:03:5c:
34:fa:5c:0e:95:82:f8:9f:a7:a9:19:6c:42:34:e3:
6f:92:e3:2f:ba:6c:b4:d9:bb:7c:9f:37:e7:4e:af:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.177.0/24
185.38.103.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210459
Signature Algorithm: sha256WithRSAEncryption
9a:63:65:2a:6d:c0:4c:81:95:76:bd:9a:2f:21:88:ae:e2:ad:
b6:4e:03:0a:52:c5:29:fe:c5:e0:12:7d:67:50:2b:a5:7c:4a:
ce:fc:ce:7c:dc:74:14:bb:b4:a5:9a:7e:0e:e1:9c:ad:5f:75:
c1:f3:4f:b1:b6:3d:37:fc:dd:31:6a:c6:74:8c:8e:b0:de:88:
59:ac:2f:4b:a3:c2:86:55:cb:8e:05:a4:7c:f5:25:39:a5:77:
f8:e6:95:70:32:2e:f5:f7:b9:33:c0:60:55:83:bf:b8:e9:e1:
d9:8d:94:b9:ff:a7:8a:19:46:80:41:48:73:46:dc:d8:15:e5:
d2:ef:9b:69:dd:28:bc:4a:26:52:8f:bc:8b:e8:23:f3:ea:88:
61:cc:4e:51:36:0c:56:93:e7:1c:66:9d:ab:a0:50:ab:3d:13:
52:55:ad:46:fa:3f:86:cc:2a:8a:7b:69:d5:d4:b0:71:ae:64:
d6:3d:12:d2:31:62:31:b6:72:7b:2a:4c:a1:3f:53:61:e8:f5:
9f:fa:2f:cd:d7:2d:b7:d7:90:e2:df:7c:62:13:a1:dc:d1:4c:
2f:30:e6:57:be:53:a6:c1:1a:24:a7:8a:8b:00:f7:11:fd:02:
44:82:1f:5f:92:51:04:44:2d:d5:a0:e6:1a:53:01:c6:f4:8a:
ae:fb:d9:65
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZRF6e+OFKhI1xxcMrGaFz5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTA4MTIzNTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjE1MDRiYWY4MmVmOGViMGFlNTA4YWY0MGI2MzhlMzY2MGE1NDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjU0UskSW6laKihaI5pKT1e1UOiJ
jH9hxmqLPtx4FVDrNKudEkhHSQocKep0AEo6j2JgYQb61kL1nO76x4nNvnRjQB8R
ROjmWy5UEnh0dnS9kAIgSH43S99c2TfzubGexwyOf0D2TbP1+cEatl6NO/zPjjqG
YTmm94GN0HR4wQiTk91oGj411GJLNm7VkrkEXTLuDgD5NBPoyUC/5L1E4GKFhhY6
/T80jkTFr6rnZ4WHBrqtK/Ls4ESTBHdKtJCy8vIY35IaeLrOvNg7nKzG6DV0qX2Q
1HCJ/l528I8OA1w0+lwOlYL4n6epGWxCNONvkuMvumy02bt8nzfnTq9eKQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFBsVBLr4LvjrCuUIr0C2OONmClSIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzJiN2Y3
MC1mYWQxLTQwM2MtYjA4ZS0yYzNlYTRiODZlMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvMmI3Zjcw
LWZhZDEtNDAzYy1iMDhlLTJjM2VhNGI4NmUyMC8xL0d4VUV1dmd1LU9zSzVRaXZR
TFk0NDJZS1ZJZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQATVGxAwQAuSZnMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwM2GzANBgkqhkiG9w0BAQsFAAOCAQEAmmNlKm3ATIGVdr2aLyGIruKt
tk4DClLFKf7F4BJ9Z1ArpXxKzvzOfNx0FLu0pZp+DuGcrV91wfNPsbY9N/zdMWrG
dIyOsN6IWawvS6PChlXLjgWkfPUlOaV3+OaVcDIu9fe5M8BgVYO/uOnh2Y2Uuf+n
ihlGgEFIc0bc2BXl0u+bad0ovEomUo+8i+gj8+qIYcxOUTYMVpPnHGadq6BQqz0T
UlWtRvo/hswqintp1dSwca5k1j0S0jFiMbZyeypMoT9TYej1n/ovzdctt9eQ4t98
YhOh3NFMLzDmV75TpsEaJKeKiwD3Ef0CRIIfX5JRBEQt1aDmGlMBxvSKrvvZZQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:13 2025 by rpki-client