Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer (raw, json)
Hash identifier: bx65uApHVO2LadZc/KVg9zzLrUP11KbjCoXUI62whT0=
Subject key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195B2E1D581CD62BF7A652738D01CDE6AB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Mar 2025 09:28:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49263
AS: 56726
AS: 57014
AS: 59816
IP: 185.70.132.0/22
IP: 185.241.36.0/22
IP: 185.251.224.0/22
IP: 185.254.88.0/22
IP: 194.147.120.0/22
IP: 2a05:2a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:e1:d5:81:cd:62:bf:7a:65:27:38:d0:1c:de:6a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 20 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:02:f9:1f:d1:4c:60:41:7d:98:00:67:fc:
e2:e8:d9:75:ec:11:6a:c4:a3:ac:bd:5b:ff:d7:d2:
db:8c:51:40:39:5a:06:2a:db:39:2a:8c:99:6d:23:
c4:2a:56:e2:18:ba:49:32:76:3b:44:a7:98:54:34:
4d:28:64:35:50:3e:ee:64:75:1a:f4:7b:00:37:36:
7e:b2:47:e8:68:5b:be:58:28:65:71:b7:94:07:c9:
4e:d8:c4:21:73:5c:71:4c:68:e3:f3:e5:26:f5:b3:
cb:16:50:b0:94:25:b3:b2:31:0f:48:5f:54:5e:7d:
13:8e:6d:63:33:61:8b:68:3f:2d:89:0a:a7:aa:a3:
9c:18:54:4b:db:d4:e6:94:4e:e9:cc:f7:a5:d8:41:
da:42:e7:72:ed:d4:41:2f:36:35:31:77:65:f4:94:
c5:7b:ae:75:76:ce:0b:9e:ec:c4:0d:42:87:c5:71:
c8:2f:95:b3:27:48:7e:83:2a:4f:c5:8d:2e:f9:55:
be:2b:f4:aa:99:5a:c9:fb:5c:48:6b:a8:3d:e1:92:
48:df:5b:e6:3e:ee:3c:f6:28:86:ef:d2:52:56:10:
8b:46:02:a2:55:95:2b:b1:f3:7a:02:11:9d:bc:58:
63:f6:d5:d9:fe:1b:0d:3b:8a:6f:81:98:ce:ee:45:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.132.0/22
185.241.36.0/22
185.251.224.0/22
185.254.88.0/22
194.147.120.0/22
IPv6:
2a05:2a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49263
56726
57014
59816
Signature Algorithm: sha256WithRSAEncryption
ae:31:e4:d1:23:b4:43:fc:3d:71:f7:24:4a:32:5c:82:4b:b7:
8f:1a:28:e8:1a:e4:b1:04:45:d3:f8:ed:c1:cb:82:18:3e:93:
4c:b9:31:5f:8c:98:13:a9:b0:09:a6:cf:9d:aa:d6:79:04:41:
dc:de:8d:38:cb:45:3f:d3:13:d4:90:fc:b1:45:72:e9:ed:8c:
55:06:20:91:10:83:6a:33:ee:d4:60:98:e1:7d:4a:48:a3:bf:
b5:95:94:91:46:35:a2:3f:13:d2:d9:8f:64:d0:9b:f1:f1:f0:
e3:00:1c:2f:1c:3c:4b:d1:66:73:07:0a:2e:b0:04:8b:89:79:
3c:62:a6:4b:14:17:65:16:87:17:01:a8:80:8c:54:13:3b:20:
79:52:c3:e0:c3:96:f9:09:9d:e3:1a:23:40:7a:87:49:49:2e:
c7:8f:5e:1e:f2:99:78:60:a1:49:24:ad:d4:b2:3e:1e:31:ac:
ff:06:55:75:a1:04:2f:63:bc:e7:c8:1f:49:a0:20:9a:4d:cf:
6e:37:9e:81:5c:43:2f:c9:f5:dd:71:e3:1a:75:f1:df:7e:de:
2e:0b:69:ae:24:62:c4:05:5b:d6:f1:e8:3b:ac:51:74:4b:52:
27:ea:b1:90:82:09:a0:b8:22:a0:f7:59:58:6e:ff:da:0b:51:
c1:3b:46:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:23:43 2025 by rpki-client