Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer (raw, json)
Hash identifier: DjJj8OjZfxyMK8Q2QEGpXppILO2U6h7A3YQQZzBgIDI=
Subject key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143DAE3C71F0656D15DDD16131E3752
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50398
IP: 91.219.44.0/22
IP: 91.245.0.0 -- 91.245.4.255
IP: 91.245.6.0/23
IP: 2001:67c:1260::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:e3:c7:1f:06:56:d1:5d:dd:16:13:1e:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:54:d2:42:86:2c:1e:ee:94:39:ab:66:2e:
2b:ef:e3:ab:72:ce:55:d5:7a:b2:b5:c1:57:4f:15:
3a:e8:97:b4:ac:a1:71:b1:58:99:0a:53:10:38:ea:
e7:33:b7:ec:a7:b1:de:1f:29:49:5d:49:19:7d:0d:
eb:55:07:78:8c:d8:ae:30:f2:8d:6a:59:d9:ae:f9:
9c:8f:5c:34:a4:89:20:e2:d9:ea:dc:5c:70:ff:c9:
fd:f1:d5:8a:2d:09:5c:2b:56:42:0e:ab:c2:b7:d3:
73:a8:41:c7:82:51:d0:89:6a:2e:a0:db:62:4e:74:
80:41:88:7e:1e:82:33:c2:c4:ed:be:1b:d5:16:9d:
df:8f:fa:37:34:2e:2d:0a:49:dc:a5:1c:3f:3f:9a:
3d:20:58:d0:55:4e:2c:78:a5:e2:9d:c4:78:36:d5:
56:41:26:16:d6:7c:11:7d:8a:f5:fb:52:9e:8e:70:
50:51:d4:68:99:a2:3c:4a:ee:2f:97:4b:9c:21:2c:
db:9f:ca:15:4e:d4:ea:22:1d:d3:52:ca:b9:c6:b2:
cc:77:f6:13:02:33:34:1f:ef:4c:2b:77:61:30:d9:
27:ec:a1:fa:e1:e6:c7:e9:a3:20:f8:1d:ef:66:1d:
23:6a:ad:30:cd:6a:f0:44:99:b6:ba:23:7b:06:57:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.44.0/22
91.245.0.0-91.245.4.255
91.245.6.0/23
IPv6:
2001:67c:1260::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50398
Signature Algorithm: sha256WithRSAEncryption
76:ee:7e:10:d3:8e:c6:00:9b:07:67:cb:45:dd:bb:17:fa:f6:
c8:d7:a3:84:af:e7:8c:41:ea:59:9f:71:19:47:f5:2a:77:b7:
e5:be:fc:1b:fb:f4:4a:c0:0c:6d:f9:3d:1b:a7:14:00:0c:3a:
86:d8:57:f6:d7:61:b4:8e:94:ba:81:35:63:7c:bf:48:c9:a8:
ea:6d:fd:a4:b8:d8:3d:49:d6:de:4a:05:88:e4:e5:ce:8a:23:
69:32:88:1f:8e:c8:59:2c:a8:64:e1:a9:68:77:61:90:fd:95:
8e:a9:0f:2e:70:1b:21:35:65:d0:d2:a5:d8:6b:8a:3a:fb:41:
ce:18:6c:5c:76:d6:5d:19:3d:2c:fb:b1:9f:73:14:40:54:fb:
4e:b7:e5:ee:fd:cd:d6:c8:2d:c1:2d:37:d6:29:6f:10:9b:c3:
a1:29:b7:45:e3:5b:7b:3c:64:ab:0c:05:83:47:23:ad:b2:f6:
7b:d3:a9:d3:92:65:32:9b:39:18:b8:78:ef:96:f1:bc:ca:62:
27:0a:31:78:79:f1:b2:c1:18:7f:a6:79:56:f4:12:03:9c:9a:
2e:8a:5b:cc:84:72:8e:ca:c5:8c:04:3b:d8:b1:32:1a:f7:3d:
0e:5c:28:d1:c1:20:c8:f1:7c:b0:22:9a:cb:10:02:02:4b:bf:
9f:92:74:95
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAZQhQ9rjxx8GVtFd3RYTHjdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDdlOTBkNjJkZTJjNzI3Y2Q0NTM5YTJmMDcwYzRlOTFkZjMyYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLVU0kKGLB7ulDmrZi4r7+Orcs5V
1XqytcFXTxU66Je0rKFxsViZClMQOOrnM7fsp7HeHylJXUkZfQ3rVQd4jNiuMPKN
alnZrvmcj1w0pIkg4tnq3Fxw/8n98dWKLQlcK1ZCDqvCt9NzqEHHglHQiWouoNti
TnSAQYh+HoIzwsTtvhvVFp3fj/o3NC4tCkncpRw/P5o9IFjQVU4seKXincR4NtVW
QSYW1nwRfYr1+1KejnBQUdRomaI8Su4vl0ucISzbn8oVTtTqIh3TUsq5xrLMd/YT
AjM0H+9MK3dhMNkn7KH64ebH6aMg+B3vZh0jaq0wzWrwRJm2uiN7BlfhawIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFCB+kNYt4scnzUU5ovBwxOkd8yu0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzI0ZTNk
MC1iNTU2LTQ4ODgtOWY2Zi1mYmU2OGZmNjI3YjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMjRlM2Qw
LWI1NTYtNDg4OC05ZjZmLWZiZTY4ZmY2MjdiMi8xL0lINlExaTNpeHlmTlJUbWk4
SERFNlIzeks3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF
BwEHAQH/BDQwMjAfBAIAATAZAwQCW9ssMAsDAwBb9QMEAFv1BAMEAVv1BjAPBAIA
AjAJAwcAIAEGfBJgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDE3jANBgkqhkiG
9w0BAQsFAAOCAQEAdu5+ENOOxgCbB2fLRd27F/r2yNejhK/njEHqWZ9xGUf1Kne3
5b78G/v0SsAMbfk9G6cUAAw6hthX9tdhtI6UuoE1Y3y/SMmo6m39pLjYPUnW3koF
iOTlzoojaTKIH47IWSyoZOGpaHdhkP2VjqkPLnAbITVl0NKl2GuKOvtBzhhsXHbW
XRk9LPuxn3MUQFT7Trfl7v3N1sgtwS031ilvEJvDoSm3ReNbezxkqwwFg0cjrbL2
e9Op05JlMps5GLh475bxvMpiJwoxeHnxssEYf6Z5VvQSA5yaLopbzIRyjsrFjAQ7
2LEyGvc9Dlwo0cEgyPF8sCKayxACAku/n5J0lQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:17 2025 by rpki-client