Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
File: JtPbi-01S0eMbRcEoeOubJJtVnI.cer (raw, json)
Hash identifier: 1qaID0k2eQqDAJL9v4eIJc6IwvDGufYt3mP3SYuRueg=
Subject key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826E9A56C73728BBCFE97F37E29E74A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211799
IP: 185.40.17.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e9:a5:6c:73:72:8b:bc:fe:97:f3:7e:29:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:eb:de:33:ab:7a:ad:b0:3c:3e:98:38:7f:
f5:ee:a4:a9:1d:d4:84:72:38:6b:61:af:59:a9:68:
d1:76:a9:45:f5:e5:68:6a:82:52:a4:cb:d2:16:92:
17:ca:98:0b:da:3b:24:28:d6:70:e0:cd:fa:01:85:
71:b1:53:b9:21:b7:2f:17:ed:8b:b9:ac:42:b7:ef:
26:e1:33:dc:4d:70:ff:e6:77:da:4a:a7:7d:f8:99:
06:ba:98:2a:d5:75:0e:2f:79:01:88:6a:19:10:a0:
d3:a9:af:35:16:e6:76:a9:81:fa:9d:ef:f4:ae:94:
ba:5b:65:c4:d0:96:9c:26:4b:1e:33:16:d7:d4:bb:
62:ad:11:52:9d:70:fd:a0:6e:8c:95:c4:46:b8:2a:
34:30:f3:09:23:ba:b7:11:7d:b9:d3:2e:cb:a3:97:
9a:a8:da:11:34:5d:ec:fa:af:20:3f:58:e4:a8:7e:
b0:0e:b7:ee:37:7b:57:aa:9d:0f:e2:bc:de:39:24:
e6:6c:a6:9f:d7:9e:b6:55:11:0b:6d:15:56:cb:c3:
05:f4:a7:27:c9:de:4e:4f:5b:8b:74:bc:b7:1c:65:
db:c0:1d:b7:fb:6d:f0:a3:66:e7:f5:f8:bc:2e:b8:
50:32:3f:42:3b:75:f2:49:e3:8a:ad:fc:0b:5b:4c:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.17.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211799
Signature Algorithm: sha256WithRSAEncryption
8f:4c:e3:31:c1:66:49:38:3f:9c:e7:df:4b:19:49:e5:ef:0e:
fb:a2:f8:d9:f0:60:9d:4a:58:0a:be:06:8e:f1:c4:80:de:6d:
0e:4f:6f:62:22:05:61:1f:48:d4:1a:fd:17:40:9b:eb:55:16:
af:ce:df:5b:4b:03:51:c2:40:51:45:da:08:f6:ab:2c:82:9c:
6d:ab:e5:f3:1b:c4:40:ce:9a:ed:23:6d:64:75:b3:0f:a6:3f:
a1:2e:b5:c3:fa:09:e4:9c:c2:4c:8c:26:bb:e0:dc:79:64:6f:
4d:06:a8:6b:4e:14:93:a8:2d:58:b0:a5:df:a6:eb:32:2f:d7:
fa:79:0c:20:72:3e:8c:74:bb:a2:83:4c:5f:6f:c6:4b:9f:aa:
5e:7f:26:b4:28:f2:58:b6:f0:c7:89:b9:57:d0:db:26:41:95:
79:4e:1b:f5:9f:c5:41:d1:a4:19:19:8e:bb:2a:b5:63:3a:84:
4f:d0:1c:30:13:94:62:d1:f6:be:c9:5c:d2:41:2a:e7:68:45:
49:37:41:a6:52:30:02:54:4c:81:e5:d5:ec:62:32:5f:82:9d:
41:63:85:48:8a:dd:1b:fb:89:b9:a8:a3:ca:b9:fb:db:1a:bc:
a4:a8:a6:46:45:8d:aa:60:57:f2:83:ac:7c:3b:d0:f8:aa:da:
d6:b2:4e:b4
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQoJumlbHNyi7z+l/N+KedKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmQzZGI4YmVkMzU0YjQ3OGM2ZDE3MDRhMWUzYWU2YzkyNmQ1NjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uTr3jOreq2wPD6YOH/17qSpHdSE
cjhrYa9ZqWjRdqlF9eVoaoJSpMvSFpIXypgL2jskKNZw4M36AYVxsVO5IbcvF+2L
uaxCt+8m4TPcTXD/5nfaSqd9+JkGupgq1XUOL3kBiGoZEKDTqa81FuZ2qYH6ne/0
rpS6W2XE0JacJkseMxbX1LtirRFSnXD9oG6MlcRGuCo0MPMJI7q3EX250y7Lo5ea
qNoRNF3s+q8gP1jkqH6wDrfuN3tXqp0P4rzeOSTmbKaf1562VRELbRVWy8MF9Kcn
yd5OT1uLdLy3HGXbwB23+23wo2bn9fi8LrhQMj9CO3XySeOKrfwLW0z+LQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFCbT24vtNUtHjG0XBKHjrmySbVZyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2MzMjFh
My1kMzYyLTQ1NGYtOGU4NC1jZTZiYjcxYThkYTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvYzMyMWEz
LWQzNjItNDU0Zi04ZTg0LWNlNmJiNzFhOGRhNi8xL0p0UGJpLTAxUzBlTWJSY0Vv
ZU91YkpKdFZuSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuSgRMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM7VzANBgkqhkiG9w0BAQsFAAOCAQEAj0zjMcFmSTg/nOffSxlJ5e8O+6L42fBg
nUpYCr4GjvHEgN5tDk9vYiIFYR9I1Br9F0Cb61UWr87fW0sDUcJAUUXaCParLIKc
bavl8xvEQM6a7SNtZHWzD6Y/oS61w/oJ5JzCTIwmu+DceWRvTQaoa04Uk6gtWLCl
36brMi/X+nkMIHI+jHS7ooNMX2/GS5+qXn8mtCjyWLbwx4m5V9DbJkGVeU4b9Z/F
QdGkGRmOuyq1YzqET9AcMBOUYtH2vslc0kEq52hFSTdBplIwAlRMgeXV7GIyX4Kd
QWOFSIrdG/uJuaijyrn72xq8pKimRkWNqmBX8oOsfDvQ+Kra1rJOtA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:49 2025 by rpki-client