Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
File: IzlKEl-jrODEem_jT0CGtNO6VYg.cer (raw, json)
Hash identifier: 07hhrl/hYK0qUdDaUH2xlEyb7vCo4+Lg8iv/sk+wTg4=
Subject key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E5A63FFE9496DC0639393E3B07932
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21229
AS: 197248
IP: 62.112.192.0/21
IP: 62.112.208.0/21
IP: 77.111.88.0/21
IP: 93.88.192.0/21
IP: 109.61.0.0/22
IP: 109.61.8.0/21
IP: 109.61.20.0 -- 109.61.31.255
IP: 109.61.48.0 -- 109.61.79.255
IP: 109.61.96.0/21
IP: 109.61.112.0/21
IP: 185.229.249.0/24
IP: 2a01:be00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5a:63:ff:e9:49:6d:c0:63:93:93:e3:b0:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:5f:0d:17:43:5d:95:87:86:d1:7c:92:7e:
00:05:26:d0:68:9d:68:2a:f4:e2:54:4f:a7:0a:79:
3d:d1:5c:52:1a:be:5d:78:5e:63:19:95:9b:7b:53:
75:fd:5f:dd:8c:f9:e0:d5:5b:d1:e9:24:d7:67:a5:
a0:cb:1e:e9:cf:91:01:e0:9f:13:d8:41:b5:ba:34:
7d:e2:5d:a0:52:06:aa:1a:d6:b8:20:d5:38:ea:a5:
83:46:06:55:b1:de:d0:75:cc:4a:e0:ed:a9:07:b3:
33:08:8b:c6:af:b1:a1:9c:7d:bf:30:46:34:e8:64:
8c:2f:3b:1d:74:bc:27:7f:26:db:84:5f:43:42:89:
4e:af:b2:2a:21:36:7f:cf:40:48:96:d2:43:42:f9:
79:25:12:a4:61:57:60:61:26:f2:f2:26:ae:db:3d:
94:ca:6b:0b:8b:97:55:de:1d:dd:34:08:b4:e4:13:
56:6d:50:a0:d3:85:32:db:fe:44:2d:91:6d:9f:13:
95:dc:5b:98:ea:0a:d3:85:0b:b5:fc:64:b6:12:fc:
02:9a:82:a2:6e:af:a4:96:02:a5:27:09:b7:18:2d:
5c:b4:b8:6f:1e:ad:da:3e:45:0f:f3:58:78:91:c6:
f7:30:2f:27:d5:6c:0c:e5:97:75:da:c5:ec:61:4a:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0/21
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
185.229.249.0/24
IPv6:
2a01:be00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21229
197248
Signature Algorithm: sha256WithRSAEncryption
85:29:0a:ce:b7:b0:6c:71:1a:32:72:70:89:19:8c:b4:61:3e:
cd:d8:15:ea:67:ac:6a:c0:3a:5f:f0:d3:00:5a:ef:a0:f3:c1:
73:dc:df:47:56:b4:f3:d8:1b:db:74:73:c9:01:25:4e:cb:8b:
97:ef:3f:cb:ce:2a:02:dc:b7:21:d4:b7:ae:be:29:cd:bd:f2:
c1:c6:ae:5b:9a:1c:b3:94:c5:65:14:90:0a:cc:1c:86:cb:23:
4c:1a:2c:6e:2e:5b:1a:7f:8f:a2:a2:e1:12:8e:f2:49:46:ad:
60:00:42:86:ad:e6:a4:b7:e6:e8:e6:c6:3e:67:7a:44:51:71:
82:8b:d7:29:8f:d2:65:dd:e3:67:4b:36:76:52:ce:26:84:fb:
34:75:1e:32:dc:0d:58:f8:2e:b3:d2:ba:93:2d:6d:f5:37:ed:
d2:62:42:94:e0:b5:5d:3e:c6:8d:6e:d9:a1:07:4b:ab:8e:f2:
71:f4:b5:b2:75:4f:9c:e9:2f:b8:e7:0f:f3:57:70:f2:fd:c2:
83:8f:57:9b:bc:f4:4d:d8:7c:36:2d:05:f2:c3:a3:6b:3d:f7:
a8:5a:df:7a:3f:d8:bf:7d:ae:7d:33:9a:dd:64:71:a0:cd:a1:
77:a8:4d:6e:cd:41:c9:d4:93:d2:34:18:0a:a9:98:a6:b8:6b:
be:12:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:05 2025 by rpki-client