Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
File: K6cIjjnnrYgXt9EOoqW4oJikegs.cer (raw, json)
Hash identifier: GPGEQdowxmtJgyd9MrsjLkYIt99MqV6pFtffr8yU3Gs=
Subject key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D6EE8853F7C26F5167B5A686D42C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202113
IP: 185.52.244.0/22
IP: 2a04:c9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6e:e8:85:3f:7c:26:f5:16:7b:5a:68:6d:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:44:c3:51:96:89:08:12:3d:72:96:93:e2:
3a:b1:a7:47:8d:40:f2:ea:1f:8a:2d:ae:15:eb:ab:
79:c2:e0:f8:23:1b:ce:d3:34:9c:12:85:0e:a4:46:
2b:4b:d3:d1:bd:a2:09:6b:30:84:37:f0:ff:f8:a7:
1a:94:29:79:6d:4d:89:85:4f:a3:8b:84:26:06:0a:
3c:bb:92:7f:7e:30:ca:c4:2b:bc:1b:8e:b2:34:80:
1c:a9:79:3d:7a:89:5f:b6:f7:45:91:10:e0:53:f9:
0c:c9:03:d1:42:d9:67:de:46:3b:83:d6:ab:01:85:
d1:77:3c:d5:a0:03:79:52:d3:70:43:52:6e:13:88:
26:ab:e0:c2:25:84:f1:04:a0:8a:10:cc:d6:23:25:
fe:ba:da:4f:36:94:e4:e6:5f:c3:18:06:9d:de:8d:
d0:96:67:33:c5:09:6c:95:4c:13:07:8c:52:9b:c7:
09:66:02:fc:67:7f:e3:f5:f5:d6:28:16:d7:22:21:
4b:72:16:ab:05:48:7d:5e:d9:2d:27:68:b6:ea:ca:
dc:d0:78:49:fb:f2:38:35:fd:54:78:88:32:61:b6:
46:83:ef:cd:31:52:b3:f5:3a:37:f0:79:9f:6b:6b:
25:6d:9a:5e:af:2e:95:1b:0b:1e:73:76:c9:f8:ba:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.244.0/22
IPv6:
2a04:c9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202113
Signature Algorithm: sha256WithRSAEncryption
05:e8:7d:4b:07:67:85:9d:d3:f6:ef:5e:0d:61:1b:b2:76:29:
0f:23:3f:0f:8d:db:13:aa:a8:5c:cd:a6:de:68:da:46:84:c9:
f0:d8:4a:0f:b9:13:bd:9d:b1:d0:b2:31:3d:39:0f:4b:c4:17:
ba:01:19:52:36:ea:23:70:e4:0a:0c:2e:70:40:a4:d1:e6:3c:
fd:d1:9b:07:b5:ea:6a:32:a8:35:ea:1b:25:5e:77:a3:eb:04:
3e:36:21:50:7a:2e:51:eb:79:d8:42:f7:b3:7c:ec:02:99:0b:
26:86:7f:7a:d5:63:8f:01:a0:4b:8e:da:1f:be:6d:6f:61:5b:
45:85:8b:a5:0e:55:05:ca:0a:77:74:76:71:a1:37:54:0a:c0:
3d:f7:65:05:93:6b:14:38:74:31:96:d2:cf:0a:81:dd:87:4b:
c1:e1:c8:57:f5:0c:0e:0c:9e:8a:d1:a5:c2:8d:ea:ae:5e:6f:
42:6b:28:3e:b7:88:6a:5b:5d:59:91:7f:5e:ac:ff:49:b9:29:
9f:a8:3a:12:be:c5:65:84:31:9f:90:5d:64:8f:01:9c:aa:97:
01:25:bd:8e:41:2e:1a:40:30:3a:b6:54:4c:1c:9b:ff:bf:8d:
cc:6a:08:da:a6:4b:41:df:ff:90:93:bc:3f:19:15:07:af:88:
0d:7f:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:30:04 2025 by rpki-client