Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
File: KslDUX9eO3R-dTAyB4mgNES0ORI.cer (raw, json)
Hash identifier: 9S8VA84NA89xp3bjU7TvdhWOyPU03cKl/vPu4y+yGgo=
Subject key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A5F45D87CBDC0852F31A877DCA99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49033
AS: 61214
AS: 64416
AS: 206989
IP: 45.135.56.0/22
IP: 94.46.216.0/22
IP: 103.104.60.0/22
IP: 113.212.72.0/22
IP: 185.91.92.0/22
IP: 185.116.144.0/22
IP: 185.166.88.0/22
IP: 185.171.48.0/22
IP: 185.232.160.0/22
IP: 185.238.108.0/22
IP: 204.8.80.0/22
IP: 2a0f:dcc0::/29
IP: 2a0f:ddc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:f4:5d:87:cb:dc:08:52:f3:1a:87:7d:ca:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ac943517f5e3b747e7530320789a03444b43912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:d1:7c:a3:97:27:95:7a:ed:5b:68:7e:08:
b5:6d:36:c1:36:51:c7:49:bf:ff:ba:86:5a:c1:68:
d3:1d:1e:c6:76:dc:e4:fc:a8:f2:d2:7d:d1:28:77:
a5:a2:31:11:d3:cb:f1:c9:a8:d1:8e:29:0f:82:93:
cd:3b:9f:e4:eb:c3:75:61:8b:f4:80:8d:b3:fd:57:
14:36:9f:3f:fe:a7:d7:61:2a:c9:7b:39:f5:50:04:
a2:3e:28:27:7d:52:52:0e:5b:b3:72:9c:2e:97:42:
74:94:b5:b7:06:33:ce:4a:50:6a:c9:33:87:e7:96:
c0:db:c2:a2:98:f6:90:6a:e7:0d:41:3d:e0:5c:80:
b7:54:00:a3:df:a2:ec:fd:47:ce:7b:0b:4b:7b:80:
a1:74:10:c5:5e:53:9c:48:f3:ec:02:9f:97:5a:79:
32:80:b3:2b:2b:ef:34:97:5b:a3:f7:28:9b:07:84:
7b:ff:3a:39:55:9d:43:81:e1:b3:41:d1:58:df:24:
8d:ee:c7:83:49:a5:1c:09:b9:aa:1f:bb:d6:b2:41:
e2:dc:d1:68:a5:29:fa:ec:59:cb:d9:df:a5:51:ec:
9d:f3:2a:f5:f0:9a:1f:2a:e5:1c:4d:2b:ef:ed:fa:
47:78:86:4b:f5:54:db:67:14:91:53:e4:4e:cc:90:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.56.0/22
94.46.216.0/22
103.104.60.0/22
113.212.72.0/22
185.91.92.0/22
185.116.144.0/22
185.166.88.0/22
185.171.48.0/22
185.232.160.0/22
185.238.108.0/22
204.8.80.0/22
IPv6:
2a0f:dcc0::/29
2a0f:ddc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49033
61214
64416
206989
Signature Algorithm: sha256WithRSAEncryption
24:84:d3:0c:93:1a:a5:f9:c9:ff:f3:ce:22:d0:6b:39:02:ce:
d9:e8:7e:59:b2:57:e9:e2:44:dd:a2:28:d6:b1:fd:a8:10:06:
d5:4e:b2:99:f5:40:be:c5:fb:d5:49:28:4c:05:dd:a6:04:c1:
09:97:0d:91:6a:52:35:b7:81:f1:5c:07:b8:e9:63:5f:09:a4:
03:94:8f:0f:65:f9:4c:1f:71:60:41:93:f9:84:4d:14:78:69:
27:76:13:c9:9b:6c:39:d0:5f:b4:3f:84:f3:5d:74:ef:4f:2f:
10:c8:10:86:91:92:4b:31:b3:47:3e:ff:b9:2e:b2:ff:8a:2e:
64:e5:41:3d:60:b2:c2:cc:9e:2c:b0:51:98:44:b7:a3:2b:ee:
c6:ae:28:eb:41:cf:49:e9:9d:97:6b:59:e5:0c:b6:6f:ed:81:
af:af:57:f5:79:11:4c:ae:e7:51:69:e4:0d:58:39:84:a6:99:
90:09:ef:c6:27:d9:9b:c6:c4:e6:e8:4b:a7:d4:6b:07:b9:31:
26:8c:9f:02:92:53:45:d3:27:7e:09:f9:db:5e:18:a5:66:0a:
d9:de:4d:70:c4:28:4a:6a:7d:44:f1:40:6a:94:2a:18:c4:a1:
cd:1d:40:a5:ce:bd:da:07:a5:ed:b1:3c:e9:49:38:aa:fa:51:
37:9f:d4:80
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgISAZQks6X0XYfL3AhS8xqHfcqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWM5NDM1MTdmNWUzYjc0N2U3NTMwMzIwNzg5YTAzNDQ0YjQzOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5rRfKOXJ5V67Vtofgi1bTbBNlHH
Sb//uoZawWjTHR7Gdtzk/Kjy0n3RKHelojER08vxyajRjikPgpPNO5/k68N1YYv0
gI2z/VcUNp8//qfXYSrJezn1UASiPignfVJSDluzcpwul0J0lLW3BjPOSlBqyTOH
55bA28KimPaQaucNQT3gXIC3VACj36Ls/UfOewtLe4ChdBDFXlOcSPPsAp+XWnky
gLMrK+80l1uj9yibB4R7/zo5VZ1DgeGzQdFY3ySN7seDSaUcCbmqH7vWskHi3NFo
pSn67FnL2d+lUeyd8yr18JofKuUcTSvv7fpHeIZL9VTbZxSRU+ROzJA6IwIDAQAB
o4IDATCCAv0wHQYDVR0OBBYEFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzE5NTEx
ZC01MzdlLTQyNDEtYTBkOC0yZDkxY2ZkN2FhZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMTk1MTFk
LTUzN2UtNDI0MS1hMGQ4LTJkOTFjZmQ3YWFmNC8xL0tzbERVWDllTzNSLWRUQXlC
NG1nTkVTME9SSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF
BwEHAQH/BGIwYDBIBAIAATBCAwQCLYc4AwQCXi7YAwQCZ2g8AwQCcdRIAwQCuVtc
AwQCuXSQAwQCuaZYAwQCuaswAwQCueigAwQCue5sAwQCzAhQMBQEAgACMA4DBQMq
D9zAAwUDKg/dwDApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMAv4kCAwDvHgIDAPug
AgMDKI0wDQYJKoZIhvcNAQELBQADggEBACSE0wyTGqX5yf/zziLQazkCztnoflmy
V+niRN2iKNax/agQBtVOspn1QL7F+9VJKEwF3aYEwQmXDZFqUjW3gfFcB7jpY18J
pAOUjw9l+UwfcWBBk/mETRR4aSd2E8mbbDnQX7Q/hPNddO9PLxDIEIaRkksxs0c+
/7kusv+KLmTlQT1gssLMniywUZhEt6Mr7sauKOtBz0npnZdrWeUMtm/tga+vV/V5
EUyu51Fp5A1YOYSmmZAJ78Yn2ZvGxOboS6fUawe5MSaMnwKSU0XTJ34J+dteGKVm
CtneTXDEKEpqfUTxQGqUKhjEoc0dQKXOvdoHpe2xPOlJOKr6UTef1IA=
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:02 2025 by rpki-client