Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
File: L4g71OpOPesouJSxkPjgi68G8cw.cer (raw, json)
Hash identifier: X6JgwI794RwwTE+szkypSuS7l8vRNqr5RpQeAtUjITw=
Subject key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B696776D4120CAD698D0B108C9C08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212101
IP: 185.230.105.0/24
IP: 2a10:b380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:69:67:76:d4:12:0c:ad:69:8d:0b:10:8c:9c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:08:3c:5a:8e:03:04:99:7f:99:98:39:4f:
24:94:61:0a:17:27:00:05:78:3d:3c:38:8a:8a:6a:
2b:10:da:32:4b:1d:96:62:a7:2f:4e:73:1b:c6:b3:
25:c9:e6:46:60:6b:73:2d:eb:f8:28:27:85:13:28:
5b:86:3f:dc:c8:53:ed:d9:57:e7:6d:74:b1:5f:a1:
bd:81:a3:bf:a0:ae:4f:c6:c9:e8:c1:38:67:84:68:
20:2c:56:00:31:4e:ce:b4:c5:ee:10:ab:37:29:80:
cc:f1:34:34:a2:42:3a:4b:eb:12:13:b1:1a:25:de:
b6:f6:3d:b4:00:4f:62:8f:da:8c:25:c9:c1:3e:2d:
37:c2:3d:9b:1b:02:00:97:c3:d4:0e:a9:00:cf:95:
24:84:8a:ff:c5:32:20:b9:0d:26:32:ac:55:a7:85:
d7:7c:7a:3a:04:bd:92:b9:f3:e3:90:ec:f8:c8:e0:
c3:38:e9:97:62:13:de:e1:60:c7:64:d8:71:57:ba:
5b:a1:f2:b8:f9:f3:b8:62:41:21:32:4e:9f:c4:ea:
c5:fa:41:49:55:b1:e4:2c:bd:33:83:16:d9:a4:b1:
d8:89:53:5c:68:1b:6c:9c:4a:06:4f:08:2b:5e:41:
6b:b4:3b:d8:dc:51:47:30:bb:aa:ac:2f:02:5e:76:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.105.0/24
IPv6:
2a10:b380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212101
Signature Algorithm: sha256WithRSAEncryption
8e:48:ac:59:0c:93:93:df:3d:16:50:f7:35:9b:a0:87:ae:9e:
b1:19:e8:0d:75:0b:97:b7:cb:c8:20:23:0f:17:63:68:f7:4d:
dc:e9:27:f3:44:2e:6d:c4:1a:f9:77:f4:9f:b2:d1:ea:3e:0a:
44:e8:6c:f0:b1:cb:9a:0a:1f:5a:72:1e:24:fa:87:24:df:7e:
f3:be:d1:a5:71:69:77:54:48:70:fc:3c:f4:0b:e0:5c:20:61:
0f:f4:03:7b:bc:c1:ff:5d:2d:a8:ce:f0:a6:6e:95:cf:60:bf:
a2:98:45:30:27:0c:2d:90:c6:e4:5d:db:0c:8c:97:25:57:6b:
1e:de:16:cb:63:3d:71:17:66:94:8b:00:4a:86:90:17:e7:75:
2e:ac:d0:a0:ae:2a:29:31:39:f0:9b:99:87:69:0c:b5:48:07:
96:ac:93:6a:81:6e:f6:5a:cd:9d:75:56:0f:6f:4f:83:69:37:
0b:11:a3:64:e3:4b:e3:46:c3:87:55:4e:96:68:71:20:13:92:
55:f0:48:af:99:d9:3c:17:34:f5:e3:f8:19:0b:c5:c1:90:12:
e1:52:b5:59:34:1d:0c:1b:b4:34:ef:d9:a8:fd:19:d9:4c:78:
ed:6a:c0:2d:71:52:6c:07:41:e6:46:74:e2:96:db:a7:2e:14:
b3:ae:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:07:31 2025 by rpki-client