Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
File: Oab1TSH1N6neJHh90Oj7pAapyt0.cer (raw, json)
Hash identifier: 3uur9QTkDovIghNhl/9BXepDojaE4ikjwEOpQyS8qEw=
Subject key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206866B232E96855906608A67328F689
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.37.232.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:66:b2:32:e9:68:55:90:66:08:a6:73:28:f6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:90:a1:0c:90:c3:3c:68:38:1f:95:2a:e8:
36:5b:0f:01:00:b2:e6:bc:b7:2b:94:48:ec:be:9b:
24:24:9d:82:00:d0:71:db:12:ed:35:1e:71:d4:4f:
ba:52:6d:ef:36:9d:fe:44:75:b5:81:eb:8a:b3:0a:
ca:d3:88:b0:a7:80:b9:da:91:18:68:77:45:d5:04:
cd:c4:8c:65:74:1f:75:0f:0c:e9:b9:c1:e6:20:d0:
c7:6a:04:c6:ba:0d:a1:06:0d:00:b8:33:31:f5:18:
ca:9e:eb:2a:0b:48:05:9e:91:50:0d:40:58:d3:1f:
64:97:c6:0e:ff:7b:8c:b3:00:3a:cf:b7:3e:ce:8a:
cd:68:db:a9:aa:71:5b:e3:f3:b3:91:54:fb:61:0c:
1b:20:a8:d9:1d:84:43:87:27:8e:d1:78:96:ef:a2:
4f:a5:f7:5d:ab:8b:32:40:45:8c:2b:bf:c6:f9:2f:
14:27:48:00:e9:58:73:c8:1b:2d:69:10:1b:f0:61:
16:5d:d5:14:df:c6:3d:a6:06:1c:a1:dc:e8:e2:c0:
f0:d2:6c:ff:3d:ef:cc:88:46:8b:39:26:19:94:e3:
f4:0d:f8:0f:7b:8d:2f:27:15:36:26:e9:1b:8a:f6:
e8:6a:0a:90:4e:7c:98:b5:49:47:0c:bf:75:08:98:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:98:3a:1d:4c:37:65:51:82:29:df:0f:53:47:ab:c6:28:57:
d6:f4:cf:9c:89:94:17:3e:05:c6:38:05:70:2b:3c:0e:fb:98:
18:12:6c:03:8d:b7:25:70:2c:4f:d5:75:d8:00:02:15:73:48:
56:03:13:ff:98:bf:f4:2a:52:e1:22:a6:e5:04:66:74:af:3e:
86:b0:e8:79:15:a3:fd:cc:e8:88:28:22:b0:5f:42:f8:37:ad:
37:da:46:56:0e:a1:f5:f4:9b:c8:86:b2:b9:94:07:e2:a6:e5:
87:3c:9a:9f:01:5d:1e:05:d9:f5:3d:a3:ab:01:67:c6:5a:1b:
83:1f:d5:8b:63:ec:55:92:17:0c:98:a7:63:47:c9:2d:8b:86:
22:00:ab:b8:3c:cd:f8:e1:e6:49:c1:6c:a3:06:85:b8:fa:52:
7d:a6:95:b0:b8:49:e0:61:9e:65:b2:47:d3:23:87:0c:d7:32:
dc:7f:22:f4:d4:7c:5b:d5:6a:6a:da:38:a8:a8:af:d4:ed:c2:
7a:c8:e9:e8:0f:3b:cb:56:08:79:29:f2:76:b6:7a:d1:ff:23:
d5:c0:7e:e3:31:4d:00:35:8a:1a:78:7d:9f:b7:88:b5:b4:ac:
dd:8d:e9:da:a0:6e:4c:92:cf:d0:bf:7d:be:94:f1:fe:40:1f:
4d:cc:d8:c2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgaGayMuloVZBmCKZzKPaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWE2ZjU0ZDIxZjUzN2E5ZGUyNDc4N2RkMGU4ZmJhNDA2YTljYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphKQoQyQwzxoOB+VKug2Ww8BALLm
vLcrlEjsvpskJJ2CANBx2xLtNR5x1E+6Um3vNp3+RHW1geuKswrK04iwp4C52pEY
aHdF1QTNxIxldB91DwzpucHmINDHagTGug2hBg0AuDMx9RjKnusqC0gFnpFQDUBY
0x9kl8YO/3uMswA6z7c+zorNaNupqnFb4/OzkVT7YQwbIKjZHYRDhyeO0XiW76JP
pfddq4syQEWMK7/G+S8UJ0gA6VhzyBstaRAb8GEWXdUU38Y9pgYcodzo4sDw0mz/
Pe/MiEaLOSYZlOP0DfgPe40vJxU2JukbivboagqQTnyYtUlHDL91CJg5LQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDmm9U0h9Tep3iR4fdDo+6QGqcrdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2M5OGZi
NS1kYzk0LTRiN2QtYTk4OS02YzJmYWI1YTQwODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYzk4ZmI1
LWRjOTQtNGI3ZC1hOTg5LTZjMmZhYjVhNDA4NS8xL09hYjFUU0gxTjZuZUpIaDkw
T2o3cEFhcHl0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwSXoMA0GCSqGSIb3DQEBCwUAA4IBAQAbmDod
TDdlUYIp3w9TR6vGKFfW9M+ciZQXPgXGOAVwKzwO+5gYEmwDjbclcCxP1XXYAAIV
c0hWAxP/mL/0KlLhIqblBGZ0rz6GsOh5FaP9zOiIKCKwX0L4N6032kZWDqH19JvI
hrK5lAfipuWHPJqfAV0eBdn1PaOrAWfGWhuDH9WLY+xVkhcMmKdjR8kti4YiAKu4
PM344eZJwWyjBoW4+lJ9ppWwuEngYZ5lskfTI4cM1zLcfyL01Hxb1Wpq2jioqK/U
7cJ6yOnoDzvLVgh5KfJ2tnrR/yPVwH7jMU0ANYoaeH2ft4i1tKzdjenaoG5Mks/Q
v32+lPH+QB9NzNjC
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:07 2025 by rpki-client