Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
File: O8o0owNBd9CEM40zsIm34DzKOoo.cer (raw, json)
Hash identifier: c4UNdI5QNPYEXqVXxHiWXzIGi+0SZTMgMvXKqIQ1FN4=
Subject key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424448EA76833834B43A4671AADE6CA8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13289
AS: 29624
IP: 82.212.192.0/18
IP: 185.111.32.0/22
IP: 2a00:cb0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8e:a7:68:33:83:4b:43:a4:67:1a:ad:e6:ca:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:6b:3c:91:00:dd:e2:b9:45:20:95:40:c3:
37:c2:73:a6:68:f0:c9:b7:bd:b9:64:3c:56:ec:e2:
b7:96:d8:85:11:8b:52:8f:bc:7c:4b:ea:a2:a0:f8:
59:59:bd:ac:c0:39:ab:7b:54:c6:22:50:a8:be:9e:
79:29:69:83:9b:a5:90:bb:0a:15:7a:82:c1:af:12:
74:5e:c3:db:a4:cf:65:94:bc:4f:65:50:93:38:93:
6b:e8:7d:13:c3:1f:76:45:a8:55:15:c0:0e:18:b1:
6f:d7:f5:e2:a2:2f:dc:63:62:11:c4:f8:68:01:db:
98:8a:e0:3d:ee:ad:e2:b4:82:7f:a8:85:ed:51:93:
98:aa:d8:6f:3a:7c:fc:87:7b:d6:b4:bc:80:eb:d6:
ce:43:69:5e:76:98:5a:be:08:de:da:7f:ae:76:49:
4a:83:f5:40:60:b5:8a:3e:ef:11:b2:01:9a:3b:23:
ad:8c:62:19:65:e1:77:0c:26:4f:f1:08:1f:f7:68:
63:dd:38:fc:f9:7e:b5:46:a4:0c:1a:bb:45:4c:d8:
83:ce:cd:69:a5:9c:e9:36:b1:36:fc:a5:41:69:c1:
22:ae:5e:97:8b:71:af:0c:93:e1:9a:c9:55:69:b2:
50:40:cd:36:1d:31:6a:4a:50:92:2d:e3:d2:6a:a6:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.192.0/18
185.111.32.0/22
IPv6:
2a00:cb0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13289
29624
Signature Algorithm: sha256WithRSAEncryption
8b:69:89:a0:76:60:98:ca:b4:49:6c:24:e6:cc:9c:64:2c:9c:
fc:63:ba:6e:2c:e1:d3:1b:07:34:12:16:70:29:e7:38:ac:ef:
76:a9:da:25:02:80:15:ef:41:11:ec:b7:34:60:e6:f2:58:c3:
3a:fe:5f:13:8c:21:87:07:bf:60:ed:6d:be:2e:89:58:ce:de:
1d:ca:c4:60:bd:62:af:29:0e:b2:2f:da:f8:29:a9:5a:f5:8d:
e9:14:57:8d:90:2f:25:a4:25:35:fa:3b:8f:cc:64:1e:50:98:
39:4a:40:9b:0f:11:83:f0:60:03:61:81:d6:a5:b0:c7:8b:d0:
0e:c7:47:5b:18:32:63:c6:ae:70:76:a2:13:e2:56:33:ef:45:
e4:9e:13:d6:9e:e7:ac:e6:07:45:11:cc:ca:8a:89:be:d3:52:
b7:24:ac:3f:b9:9f:7c:b7:9a:9f:be:fc:a3:60:8c:36:00:12:
58:b5:4f:50:62:70:33:8b:d6:7a:3a:17:bc:a8:b1:13:6e:26:
6e:09:5a:08:9f:0f:95:e3:e7:72:63:47:4d:65:70:6d:ce:99:
84:79:96:8e:29:27:0a:fe:e8:69:05:b9:a2:6f:77:83:25:42:
0e:7a:7e:5c:5a:d5:bf:8d:ea:06:06:d0:3f:ff:ef:e8:03:a1:
68:e9:0e:46
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZQkRI6naDODS0OkZxqt5sqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmNhMzRhMzAzNDE3N2QwODQzMzhkMzNiMDg5YjdlMDNjY2EzYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaxrPJEA3eK5RSCVQMM3wnOmaPDJ
t725ZDxW7OK3ltiFEYtSj7x8S+qioPhZWb2swDmre1TGIlCovp55KWmDm6WQuwoV
eoLBrxJ0XsPbpM9llLxPZVCTOJNr6H0Twx92RahVFcAOGLFv1/Xioi/cY2IRxPho
AduYiuA97q3itIJ/qIXtUZOYqthvOnz8h3vWtLyA69bOQ2ledphavgje2n+udklK
g/VAYLWKPu8RsgGaOyOtjGIZZeF3DCZP8Qgf92hj3Tj8+X61RqQMGrtFTNiDzs1p
pZzpNrE2/KVBacEirl6Xi3GvDJPhmslVabJQQM02HTFqSlCSLePSaqbJvwIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFDvKNKMDQXfQhDONM7CJt+A8yjqKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2QxMjQ1
Yy0wMmNmLTQ4YjUtOWU0Mi04OTc1M2YyYjQ3ZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZDEyNDVj
LTAyY2YtNDhiNS05ZTQyLTg5NzUzZjJiNDdkYy8xL084bzBvd05CZDlDRU00MHpz
SW0zNER6S09vby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQGUtTAAwQCuW8gMA0EAgACMAcDBQAqAAywMB0G
CCsGAQUFBwEIAQH/BA4wDKAKMAgCAjPpAgJzuDANBgkqhkiG9w0BAQsFAAOCAQEA
i2mJoHZgmMq0SWwk5sycZCyc/GO6bizh0xsHNBIWcCnnOKzvdqnaJQKAFe9BEey3
NGDm8ljDOv5fE4whhwe/YO1tvi6JWM7eHcrEYL1irykOsi/a+CmpWvWN6RRXjZAv
JaQlNfo7j8xkHlCYOUpAmw8Rg/BgA2GB1qWwx4vQDsdHWxgyY8aucHaiE+JWM+9F
5J4T1p7nrOYHRRHMyoqJvtNStySsP7mffLean778o2CMNgASWLVPUGJwM4vWejoX
vKixE24mbglaCJ8PlePncmNHTWVwbc6ZhHmWjiknCv7oaQW5om93gyVCDnp+XFrV
v43qBgbQP//v6AOhaOkORg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:44 2025 by rpki-client