Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer (raw, json)
Hash identifier: nzFZnOpfhduAKSVjNl6pM0ywj+rwjToT7j75xpanp/k=
Subject key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FC12202529523752CE14E801FAA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44704
IP: 195.42.96.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fc:12:20:25:29:52:37:52:ce:14:e8:01:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:a2:11:ec:e1:f7:86:66:1c:52:ba:a8:f5:
35:09:00:f9:c6:34:b0:7c:31:c6:0b:f9:d8:ed:0d:
8d:21:57:9c:6c:15:f3:71:d8:97:8b:85:ad:4b:f8:
91:48:45:59:fc:1e:9c:81:d6:fa:e5:d2:81:63:f1:
f6:44:6f:26:20:ba:19:d4:c9:c5:f0:9e:d2:a1:cb:
72:05:7d:b6:d1:14:51:34:8e:88:4e:54:69:d2:1a:
78:30:45:86:09:29:27:0a:a9:11:3d:45:91:c1:64:
e5:b4:8b:3d:fe:89:fc:e3:dd:14:a1:a5:ef:3b:31:
c3:bf:2f:6c:d5:50:a9:90:9f:2a:a7:cd:e1:c7:37:
e5:6a:5c:43:a5:d4:15:ec:c7:39:b0:da:e7:8d:86:
0e:31:6b:22:88:3a:76:cf:92:e5:d8:9c:18:89:8f:
58:2f:38:5f:c9:d8:46:9d:78:dd:fe:1b:9c:88:32:
d6:11:87:dd:64:84:b6:f6:94:4f:9f:23:0b:84:25:
dc:27:38:fc:41:52:9d:a3:2a:da:68:c1:64:4b:90:
0a:db:74:8e:8b:0f:43:27:f8:af:8d:3a:1c:a7:08:
8c:ad:13:03:16:a1:95:20:72:c1:b5:11:e5:d8:26:
98:09:31:81:9c:8a:d2:7a:72:b1:e5:3c:8d:47:f6:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.96.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44704
Signature Algorithm: sha256WithRSAEncryption
25:75:a6:b2:71:ff:02:09:8f:a1:b0:af:9d:5e:e8:30:17:aa:
bf:fc:de:b3:72:d4:2d:b8:71:62:09:06:5e:f8:a1:86:d3:69:
e5:15:fc:e0:3a:83:04:51:75:74:81:86:0f:ea:46:91:7e:7b:
ee:e2:af:b6:44:e5:0f:ff:3e:05:96:13:ce:50:bb:e8:c6:31:
e2:2e:b5:fd:6e:0e:fc:50:29:21:88:60:e0:40:75:9c:66:93:
0f:b0:f8:e0:7b:ad:dc:04:2d:62:9f:45:2d:08:fb:17:c8:75:
98:3f:4e:4f:95:6a:78:4b:f5:5d:e3:f4:fb:00:24:19:c6:b3:
98:0e:2e:7b:c5:a5:35:21:5c:e3:23:18:65:57:03:12:d5:a1:
84:50:59:0f:e3:2b:9d:0e:ea:d9:ba:f9:d2:7e:b3:aa:eb:86:
c2:3a:6a:15:4c:4b:1f:73:1e:34:1d:dc:90:b7:f0:56:bb:26:
5a:a6:76:6a:df:e3:f1:d7:c3:fe:cc:d0:f2:00:7e:7e:6f:7a:
3e:bf:be:39:4b:6d:13:69:53:68:c8:9c:0c:d6:1c:98:83:4c:
32:55:64:f0:58:02:30:56:1b:05:a8:7b:b8:dc:ae:c0:bd:85:
18:23:2e:32:ed:e9:00:04:17:7d:47:79:e3:51:8a:93:b7:41:
fa:ea:1b:62
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQgZ/wSICUpUjdSzhToAfqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDg2MTc4Mjk3M2MzODJjYzFjZTY3MGY1YWQ1MGRmOGZiNTNjODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5GiEezh94ZmHFK6qPU1CQD5xjSw
fDHGC/nY7Q2NIVecbBXzcdiXi4WtS/iRSEVZ/B6cgdb65dKBY/H2RG8mILoZ1MnF
8J7SoctyBX220RRRNI6ITlRp0hp4MEWGCSknCqkRPUWRwWTltIs9/on8490UoaXv
OzHDvy9s1VCpkJ8qp83hxzflalxDpdQV7Mc5sNrnjYYOMWsiiDp2z5Ll2JwYiY9Y
LzhfydhGnXjd/huciDLWEYfdZIS29pRPnyMLhCXcJzj8QVKdoyraaMFkS5AK23SO
iw9DJ/ivjTocpwiMrRMDFqGVIHLBtRHl2CaYCTGBnIrSenKx5TyNR/bXbwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFB2GF4KXPDgswc5nD1rVDfj7U8guMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2NjZWFm
Mi03NTYxLTQyYTctOGQxMi04ZTA2MGNhOTZmYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvY2NlYWYy
LTc1NjEtNDJhNy04ZDEyLThlMDYwY2E5NmZhYy8xL0hZWVhncGM4T0N6QnptY1BX
dFVOLVB0VHlDNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwypgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCuoDANBgkqhkiG9w0BAQsFAAOCAQEAJXWmsnH/AgmPobCvnV7oMBeqv/zes3LU
LbhxYgkGXvihhtNp5RX84DqDBFF1dIGGD+pGkX577uKvtkTlD/8+BZYTzlC76MYx
4i61/W4O/FApIYhg4EB1nGaTD7D44Hut3AQtYp9FLQj7F8h1mD9OT5VqeEv1XeP0
+wAkGcazmA4ue8WlNSFc4yMYZVcDEtWhhFBZD+MrnQ7q2br50n6zquuGwjpqFUxL
H3MeNB3ckLfwVrsmWqZ2at/j8dfD/szQ8gB+fm96Pr++OUttE2lTaMicDNYcmINM
MlVk8FgCMFYbBah7uNyuwL2FGCMuMu3pAAQXfUd541GKk7dB+uobYg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:22:34 2025 by rpki-client