Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer (raw, json)
Hash identifier: quDERF+bmIb8Gc2fCY65ZPTKbNbuHfQ5ptuIunK/uyw=
Subject key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D95814B5BC770CB2A938B6B0839158
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204541
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:58:14:b5:bc:77:0c:b2:a9:38:b6:b0:83:91:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:3f:65:ca:b9:ae:89:4c:72:c8:21:e4:5d:
9e:ec:7a:d7:2a:ac:e7:0c:b1:86:de:b5:cb:2b:44:
aa:35:04:a2:d8:d7:31:bf:2e:6b:11:d4:cb:33:b0:
7a:9e:97:b4:0e:b4:e7:45:ca:2e:17:0a:22:3c:a7:
a2:8f:81:81:e3:53:11:73:43:84:ef:82:72:19:46:
dc:a7:38:ec:c6:ca:64:1a:3e:1e:89:47:84:35:80:
06:17:24:01:c8:d7:b0:a0:ee:78:36:c9:16:fb:10:
e3:e8:33:7a:b9:89:01:6f:b0:f0:db:f2:9f:db:94:
e5:9c:05:5a:06:1c:59:d1:54:16:45:24:17:57:70:
93:2e:c1:ee:f5:f8:7a:40:d2:dd:48:00:21:0c:40:
9a:5b:4c:0a:3e:4a:00:d4:cc:08:10:79:c4:0d:78:
2b:d4:f6:07:2b:2e:00:c4:0e:ce:a3:a7:1c:60:0a:
6f:9d:7c:3c:dc:a3:d2:c3:c0:28:36:4f:cc:bf:91:
06:7f:28:a6:95:0c:f8:c0:a3:92:a7:2f:91:84:7a:
0f:2c:5b:57:d0:62:dc:22:3a:af:3d:60:1a:2e:b6:
99:08:b8:8c:ad:49:ac:51:ec:c7:20:8e:4b:7b:92:
9e:c7:35:86:c1:f1:ba:40:99:59:9c:fe:fb:ea:f3:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204541
Signature Algorithm: sha256WithRSAEncryption
6a:9c:40:cb:40:b3:c6:e3:7c:ea:af:4e:98:a3:8c:55:c9:cc:
78:80:eb:75:6d:64:35:85:74:ad:65:b3:73:c1:2d:98:14:aa:
e3:96:50:43:d2:eb:ca:9c:d0:e6:ea:33:d3:75:b1:b9:e0:29:
38:dc:3d:25:0a:2f:5b:ac:d8:29:e5:aa:90:31:d7:d8:60:f4:
4d:3e:73:96:35:e9:40:60:4f:d8:b8:6a:25:46:85:df:d2:5c:
a9:54:84:8a:ec:42:a0:cc:22:7a:35:f7:59:96:34:a4:99:64:
43:97:5c:66:a8:fb:c7:f9:72:29:21:69:6b:d6:ad:91:2a:73:
13:7c:c1:5d:94:29:7b:bd:28:96:84:91:64:9b:29:3c:e2:ec:
06:81:ba:83:6f:58:fc:ac:3f:43:a8:35:ba:f7:ba:ad:4d:1e:
07:b9:6f:bb:ee:e9:37:f1:39:9a:f1:92:87:87:4a:c8:7f:1e:
da:92:e4:b6:8e:79:29:65:24:f0:73:15:b4:b9:bd:9b:7f:f8:
23:3d:a7:0b:fc:5d:3c:5f:fa:a7:12:09:b0:40:16:2a:98:a7:
a9:f4:db:59:b9:3d:54:40:17:f0:56:a0:93:bb:2d:10:9f:b0:
6d:81:7d:ec:ae:be:6a:5e:c6:50:ca:de:5c:1a:e6:eb:b7:67:
1c:2e:5f:1b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQm2VgUtbx3DLKpOLawg5FYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTY4ZWUwYjFmNDBjYmIxM2E4OGZkZTRjMGIxMTY4MzA0ZGYyZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiY/Zcq5rolMcsgh5F2e7HrXKqzn
DLGG3rXLK0SqNQSi2Ncxvy5rEdTLM7B6npe0DrTnRcouFwoiPKeij4GB41MRc0OE
74JyGUbcpzjsxspkGj4eiUeENYAGFyQByNewoO54NskW+xDj6DN6uYkBb7Dw2/Kf
25TlnAVaBhxZ0VQWRSQXV3CTLsHu9fh6QNLdSAAhDECaW0wKPkoA1MwIEHnEDXgr
1PYHKy4AxA7Oo6ccYApvnXw83KPSw8AoNk/Mv5EGfyimlQz4wKOSpy+RhHoPLFtX
0GLcIjqvPWAaLraZCLiMrUmsUezHII5Le5KexzWGwfG6QJlZnP776vOrAQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDlo7gsfQMuxOoj95MCxFoME3y1rMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzlmNjlk
NC02NWVmLTRkNWUtOWMyZi03OTk4ZjRiZGYyMWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvOWY2OWQ0
LTY1ZWYtNGQ1ZS05YzJmLTc5OThmNGJkZjIxYy8xL09XanVDeDlBeTdFNmlQM2t3
TEVXZ3dUZkxXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMe/TANBgkqhkiG9w0BAQsFAAOCAQEAapxAy0CzxuN8
6q9OmKOMVcnMeIDrdW1kNYV0rWWzc8EtmBSq45ZQQ9LrypzQ5uoz03WxueApONw9
JQovW6zYKeWqkDHX2GD0TT5zljXpQGBP2LhqJUaF39JcqVSEiuxCoMwiejX3WZY0
pJlkQ5dcZqj7x/lyKSFpa9atkSpzE3zBXZQpe70oloSRZJspPOLsBoG6g29Y/Kw/
Q6g1uve6rU0eB7lvu+7pN/E5mvGSh4dKyH8e2pLkto55KWUk8HMVtLm9m3/4Iz2n
C/xdPF/6pxIJsEAWKpinqfTbWbk9VEAX8Fagk7stEJ+wbYF97K6+al7GUMreXBrm
67dnHC5fGw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:58 2025 by rpki-client