Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
File: IixFhb2I-yfK3ynuW7ldZXX874M.cer (raw, json)
Hash identifier: uvWLZlI8d6pWEyNdypZ2H1ZrurpsIqS8XgkPVrWyZOA=
Subject key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D3DDF8BAB73E2DA8DF192F98C7BF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.14.9.0/24
IP: 31.14.76.0/22
IP: 31.14.162.0/24
IP: 37.156.34.0/24
IP: 46.102.96.0/22
IP: 86.105.96.0/21
IP: 86.107.62.0/24
IP: 86.107.112.0/21
IP: 89.33.68.0/22
IP: 89.34.103.0/24
IP: 89.39.255.0/24
IP: 89.42.172.0/23
IP: 89.43.112.0/22
IP: 89.45.70.0/23
IP: 91.194.177.0/24
IP: 91.206.76.0/23
IP: 91.220.130.0/24
IP: 91.221.94.0/23
IP: 91.227.72.0/23
IP: 93.113.44.0/24
IP: 93.113.130.0/24
IP: 93.115.72.0/22
IP: 94.176.109.0/24
IP: 94.177.67.0/24
IP: 176.126.222.0/24
IP: 185.203.128.0/22
IP: 188.212.39.0/24
IP: 188.215.96.0/22
IP: 193.25.104.0/23
IP: 193.34.180.0/23
IP: 195.66.142.0/23
IP: 195.88.172.0/23
IP: 195.95.180.0/24
IP: 195.128.168.0/23
IP: 195.242.78.0/23
IP: 195.254.132.0/24
IP: 195.254.136.0/23
IP: 2a0a:e640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3d:df:8b:ab:73:e2:da:8d:f1:92:f9:8c:7b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:dc:e2:e6:1c:80:bc:83:88:68:a2:77:3e:
41:f3:cc:cd:49:1b:e5:70:56:6f:71:53:1b:ab:82:
0c:d0:3a:60:02:53:db:11:6c:ac:9b:50:87:8a:41:
17:4f:ce:8e:97:06:35:85:ff:fb:4d:8a:ff:b7:29:
20:7d:a8:4b:c1:cf:31:56:0f:bc:c3:ab:b6:94:bf:
c3:f2:28:36:1e:f4:90:9f:08:9b:af:50:0b:7d:81:
d3:e2:39:4b:b3:6e:13:94:8e:3e:08:64:c1:de:25:
83:5c:24:7b:ae:23:ea:e9:3f:ec:75:91:77:1e:c1:
1e:6b:5a:64:0e:4e:b7:33:a4:33:05:ac:8e:6a:1a:
af:7b:7e:9e:cc:c5:43:8c:9e:06:29:3f:dc:aa:11:
6a:33:fd:fd:b8:ad:8e:23:f4:9c:59:14:e1:ac:39:
a3:14:c0:6e:7f:0c:43:11:4a:11:c1:98:d3:eb:7b:
cd:4c:fd:6a:2e:63:37:8f:70:1e:2c:5b:23:07:38:
43:ef:4a:67:2f:6d:ea:eb:89:7c:72:a1:16:26:e8:
18:d9:fa:c9:df:99:db:64:ea:9d:37:45:86:d6:2b:
73:9b:74:cd:07:d9:cb:9e:57:d6:f1:fe:40:a9:a9:
af:08:63:62:7b:ba:f6:21:be:be:c8:f1:4d:84:b8:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.9.0/24
31.14.76.0/22
31.14.162.0/24
37.156.34.0/24
46.102.96.0/22
86.105.96.0/21
86.107.62.0/24
86.107.112.0/21
89.33.68.0/22
89.34.103.0/24
89.39.255.0/24
89.42.172.0/23
89.43.112.0/22
89.45.70.0/23
91.194.177.0/24
91.206.76.0/23
91.220.130.0/24
91.221.94.0/23
91.227.72.0/23
93.113.44.0/24
93.113.130.0/24
93.115.72.0/22
94.176.109.0/24
94.177.67.0/24
176.126.222.0/24
185.203.128.0/22
188.212.39.0/24
188.215.96.0/22
193.25.104.0/23
193.34.180.0/23
195.66.142.0/23
195.88.172.0/23
195.95.180.0/24
195.128.168.0/23
195.242.78.0/23
195.254.132.0/24
195.254.136.0/23
IPv6:
2a0a:e640::/29
Signature Algorithm: sha256WithRSAEncryption
6c:1a:d1:de:5b:a1:93:d4:26:00:0a:32:7c:0c:2b:7c:f1:6d:
55:a1:27:91:ff:95:2a:c5:e4:98:29:10:a7:e2:a8:8c:02:b2:
31:27:a4:99:99:f9:ed:8b:3b:b4:71:f8:56:02:37:14:51:3d:
85:6a:ae:28:75:43:88:88:20:0f:91:18:6b:1f:ec:52:0b:4a:
59:eb:0f:1d:1d:ce:d3:35:8a:73:bc:db:88:e1:4b:a4:15:bf:
9c:cb:f8:84:90:f4:9f:b3:05:d6:77:e4:bb:75:bf:e0:8e:07:
80:86:34:4d:15:0f:6c:80:26:ea:d4:cb:cc:81:a3:02:c6:00:
81:bb:ca:48:11:fd:d6:15:73:8a:57:d3:97:28:fb:31:78:92:
f2:cc:8f:97:15:b1:f6:15:84:bd:7c:ea:fa:5f:67:09:47:70:
f4:cf:9c:3a:eb:75:bc:e3:be:f1:7f:ff:1a:48:63:ab:43:12:
41:98:43:ad:05:8b:01:a6:69:c5:89:57:94:cd:21:56:91:27:
f3:1c:2f:63:a0:7f:d1:08:f3:54:f9:32:14:61:22:6a:f5:93:
b2:ba:07:77:4c:97:8c:74:8c:46:3e:39:e0:1e:4e:68:c9:65:
ae:86:52:5b:79:f8:eb:a1:9c:71:67:01:58:b7:de:99:00:95:
3f:fe:32:a2
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAZQijT3fi6tz4tqN8ZL5jHv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJjNDU4NWJkODhmYjI3Y2FkZjI5ZWU1YmI5NWQ2NTc1ZmNlZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwXc4uYcgLyDiGiidz5B88zNSRvl
cFZvcVMbq4IM0DpgAlPbEWysm1CHikEXT86OlwY1hf/7TYr/tykgfahLwc8xVg+8
w6u2lL/D8ig2HvSQnwibr1ALfYHT4jlLs24TlI4+CGTB3iWDXCR7riPq6T/sdZF3
HsEea1pkDk63M6QzBayOahqve36ezMVDjJ4GKT/cqhFqM/39uK2OI/ScWRThrDmj
FMBufwxDEUoRwZjT63vNTP1qLmM3j3AeLFsjBzhD70pnL23q64l8cqEWJugY2frJ
35nbZOqdN0WG1itzm3TNB9nLnlfW8f5AqamvCGNie7r2Ib6+yPFNhLh13QIDAQAB
o4IDcTCCA20wHQYDVR0OBBYEFCIsRYW9iPsnyt8p7lu5XWV1/O+DMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzZlYjM2
NS04MDNhLTRjMmYtYjdhZS1jNjQ3YThjMWRkZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNmViMzY1
LTgwM2EtNGMyZi1iN2FlLWM2NDdhOGMxZGRmYS8xL0lpeEZoYjJJLXlmSzN5bnVX
N2xkWlhYODc0TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBCgYIKwYB
BQUHAQcBAf8EgfowgfcwgeUEAgABMIHeAwQAHw4JAwQCHw5MAwQAHw6iAwQAJZwi
AwQCLmZgAwQDVmlgAwQAVms+AwQDVmtwAwQCWSFEAwQAWSJnAwQAWSf/AwQBWSqs
AwQCWStwAwQBWS1GAwQAW8KxAwQBW85MAwQAW9yCAwQBW91eAwQBW+NIAwQAXXEs
AwQAXXGCAwQCXXNIAwQAXrBtAwQAXrFDAwQAsH7eAwQCucuAAwQAvNQnAwQCvNdg
AwQBwRloAwQBwSK0AwQBw0KOAwQBw1isAwQAw1+0AwQBw4CoAwQBw/JOAwQAw/6E
AwQBw/6IMA0EAgACMAcDBQMqCuZAMA0GCSqGSIb3DQEBCwUAA4IBAQBsGtHeW6GT
1CYACjJ8DCt88W1VoSeR/5UqxeSYKRCn4qiMArIxJ6SZmfntizu0cfhWAjcUUT2F
aq4odUOIiCAPkRhrH+xSC0pZ6w8dHc7TNYpzvNuI4UukFb+cy/iEkPSfswXWd+S7
db/gjgeAhjRNFQ9sgCbq1MvMgaMCxgCBu8pIEf3WFXOKV9OXKPsxeJLyzI+XFbH2
FYS9fOr6X2cJR3D0z5w663W8477xf/8aSGOrQxJBmEOtBYsBpmnFiVeUzSFWkSfz
HC9joH/RCPNU+TIUYSJq9ZOyugd3TJeMdIxGPjngHk5oyWWuhlJbefjroZxxZwFY
t96ZAJU//jKi
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:38:50 2025 by rpki-client