Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer (raw, json)
Hash identifier: sX12YM5dDx533AJCmagr5+Fef0RMIzTamlYQ5eEEHHM=
Subject key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A55A2EBFC297E23AF86B4F3C39F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29522
AS: 34360
AS: 41079
AS: 43758
AS: 47383
AS: 48760
AS: 198414
IP: 2.57.136.0/22
IP: 91.198.146.0/24
IP: 91.199.22.0/24
IP: 91.213.206.0/24
IP: 91.224.38.0/23
IP: 91.225.28.0/22
IP: 91.228.196.0/22
IP: 91.234.146.0/24
IP: 91.237.52.0/24
IP: 91.239.66.0/23
IP: 93.157.96.0/21
IP: 94.152.0.0/16
IP: 178.250.40.0/21
IP: 185.5.96.0/22
IP: 185.11.100.0/22
IP: 185.25.148.0/22
IP: 185.84.136.0/22
IP: 185.123.160.0/22
IP: 185.140.120.0/22
IP: 185.142.204.0/22
IP: 185.180.204.0 -- 185.180.211.255
IP: 185.193.112.0/22
IP: 185.201.112.0/22
IP: 185.204.216.0/22
IP: 185.208.164.0/22
IP: 185.212.132.0/22
IP: 185.243.52.0/22
IP: 193.17.184.0/24
IP: 193.218.152.0/22
IP: 194.60.251.0/24
IP: 194.169.227.0/24
IP: 195.2.254.0/23
IP: 195.62.12.0/23
IP: 195.78.66.0/23
IP: 195.114.0.0/23
IP: 195.149.224.0/21
IP: 195.242.116.0/23
IP: 213.108.56.0/21
IP: 2001:67c:2e0::/48
IP: 2a00:76a0::/32
IP: 2a00:e940::/32
IP: 2a01:4660::/32
IP: 2a02:1778::/32
IP: 2a02:7240::/32
IP: 2a07:1cc0::/29
IP: 2a0a:b180::/29
IP: 2a0a:c2c0::/29
IP: 2a0a:fe40::/29
IP: 2a0b:3ac0::/29
IP: 2a0b:77c0::/29
IP: 2a0d:680::/29
IP: 2a14:4bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:5a:2e:bf:c2:97:e2:3a:f8:6b:4f:3c:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:7a:b3:8f:d4:eb:59:69:01:cf:33:3f:8f:
10:5e:2c:69:d5:8c:d8:97:0d:93:77:f8:4b:c9:59:
11:5c:63:66:52:48:90:8c:ae:f2:b2:26:81:8c:90:
02:59:da:d6:ed:2f:88:26:d7:c8:01:2b:c0:19:b4:
7b:e4:1d:76:ee:66:b0:ae:7c:fc:24:6b:0c:ba:ae:
71:b9:90:5a:cb:eb:d9:fe:f7:60:de:18:d0:33:72:
65:19:29:8c:87:2b:a4:9c:66:fa:ff:56:2d:90:fc:
83:58:ba:5d:4e:48:ef:27:e4:d8:02:df:08:96:04:
af:54:23:9e:54:a2:be:d1:24:fe:56:e2:14:47:9b:
a8:8b:ca:0a:e3:e5:a7:58:ce:7a:07:1a:d2:f1:ed:
c4:08:92:7e:a0:93:21:16:06:46:4c:39:ef:e1:d2:
ce:77:ff:ad:1f:f4:b0:ef:9e:9d:c2:83:a9:d6:08:
ad:ae:b9:da:ca:5f:b0:33:24:d2:9c:a0:a9:d9:33:
50:b5:c0:1b:40:d3:0f:d6:59:98:16:bf:ec:8b:75:
62:45:cb:62:c4:1f:f0:80:c5:bb:e7:61:af:68:f3:
29:05:12:87:98:8a:a0:1a:21:e2:0b:cd:fe:69:70:
49:e1:3a:fe:a3:d2:b0:2b:bb:3c:10:08:56:4f:d0:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.136.0/22
91.198.146.0/24
91.199.22.0/24
91.213.206.0/24
91.224.38.0/23
91.225.28.0/22
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
93.157.96.0/21
94.152.0.0/16
178.250.40.0/21
185.5.96.0/22
185.11.100.0/22
185.25.148.0/22
185.84.136.0/22
185.123.160.0/22
185.140.120.0/22
185.142.204.0/22
185.180.204.0-185.180.211.255
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/22
185.212.132.0/22
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.60.251.0/24
194.169.227.0/24
195.2.254.0/23
195.62.12.0/23
195.78.66.0/23
195.114.0.0/23
195.149.224.0/21
195.242.116.0/23
213.108.56.0/21
IPv6:
2001:67c:2e0::/48
2a00:76a0::/32
2a00:e940::/32
2a01:4660::/32
2a02:1778::/32
2a02:7240::/32
2a07:1cc0::/29
2a0a:b180::/29
2a0a:c2c0::/29
2a0a:fe40::/29
2a0b:3ac0::/29
2a0b:77c0::/29
2a0d:680::/29
2a14:4bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29522
34360
41079
43758
47383
48760
198414
Signature Algorithm: sha256WithRSAEncryption
61:50:4f:0d:31:67:b3:39:71:b1:a2:ae:8b:da:d0:3f:19:9c:
a7:7c:35:f0:1c:30:b2:de:af:74:15:08:f6:2f:79:fc:5d:54:
6b:78:9a:0d:94:fb:64:18:ad:c1:4c:93:2c:a9:34:f7:8d:86:
fb:65:50:96:77:87:59:0d:c0:77:59:7f:60:e6:e8:b0:aa:9b:
29:f2:be:83:aa:1e:26:05:e1:40:8b:f9:a2:e6:54:74:81:63:
fd:70:1b:f3:68:eb:2e:99:2a:3c:d7:45:e0:95:04:d5:33:5f:
61:01:0a:9d:7b:65:16:70:39:6e:ae:e9:ee:4f:0c:33:2d:b1:
f7:3d:51:30:28:b9:db:f1:d6:bc:36:40:bf:52:13:7e:fe:16:
fd:25:26:a6:80:ed:c7:a5:73:09:f0:62:50:76:a1:16:54:9b:
42:18:41:06:4b:21:63:52:da:21:a6:1d:36:65:90:a9:e7:08:
f5:d2:8c:49:de:ca:11:e1:29:0e:f9:96:c0:18:14:07:4d:f2:
0b:2b:f2:6a:03:c1:25:02:79:91:37:ff:d8:68:ca:2d:18:0e:
b9:cb:da:9d:9c:90:62:37:33:38:ad:04:54:d9:d9:a2:23:12:
42:7f:e2:6b:b5:5f:4c:75:b5:4f:75:df:af:6b:b8:e6:0a:48:
8b:33:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:09:25 2025 by rpki-client