Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer (raw, json)
Hash identifier: Bsoz4qZTRqQGRxpOPTuaNXjuU3EIRCQhYkCv900p7LI=
Subject key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427474022A9C9BD0C3FAD47D7E75E0247
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21161
IP: 178.249.80.0/21
IP: 185.195.180.0/22
IP: 193.138.83.0/24
IP: 194.110.196.0/24
IP: 194.121.11.0/24
IP: 2a02:2198::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:40:22:a9:c9:bd:0c:3f:ad:47:d7:e7:5e:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:61:f7:75:c1:2f:74:0f:c3:07:bf:03:a9:
78:0a:f9:02:16:e7:09:99:d7:8a:8d:d5:98:32:8a:
db:0a:fa:96:69:76:4a:5f:65:fb:84:e7:e9:b1:68:
ba:ea:52:9d:ee:94:aa:dc:d0:ec:b2:9d:a9:57:e1:
90:01:fb:79:a0:51:a6:f8:74:39:51:0d:99:5f:46:
70:1b:63:2c:fb:ee:d2:c6:25:f8:ad:4a:15:29:41:
6d:5c:1c:a6:76:d8:15:e0:40:49:a9:53:09:4c:bb:
db:ab:22:3a:07:4b:6b:2e:f3:b6:69:52:0f:08:11:
cd:71:00:71:58:7e:03:fa:2f:06:6b:8d:8f:f8:2c:
06:6a:a8:16:00:5b:16:64:21:1f:b7:a9:d3:c4:c7:
64:9c:25:ca:f9:b7:96:24:11:33:75:19:c3:28:18:
c6:ef:14:d4:24:c9:26:91:82:89:bb:e8:a9:6e:5d:
8c:ba:37:f4:61:fd:9d:bf:a0:02:db:12:38:0e:92:
2e:9e:65:0a:e4:7f:32:64:91:aa:73:26:87:c7:9e:
e1:75:d7:d2:28:45:ab:c8:48:a2:70:71:5d:1b:1b:
e2:b8:c6:aa:22:0a:91:40:25:1e:e0:21:8d:0a:a4:
08:25:72:3c:6a:23:a9:d3:9b:38:b7:ec:56:3f:00:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.80.0/21
185.195.180.0/22
193.138.83.0/24
194.110.196.0/24
194.121.11.0/24
IPv6:
2a02:2198::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21161
Signature Algorithm: sha256WithRSAEncryption
8a:3d:fd:7b:51:2a:3d:08:d5:43:67:d4:a8:4b:64:2f:6e:5c:
27:ed:43:81:4d:5e:ca:5e:01:6c:db:3e:81:90:e7:44:66:ee:
85:f3:79:55:df:23:09:da:78:64:bd:16:3b:e2:03:8e:9c:1e:
b6:90:22:7b:d9:3c:f6:f3:9f:c3:6c:26:26:cf:99:79:a6:9f:
33:ce:0b:26:bb:3d:5d:0c:18:0e:d3:16:88:6f:14:2e:4b:48:
af:a4:06:49:e0:99:1c:78:61:34:71:36:65:16:8e:56:05:c6:
23:f1:48:a3:d0:68:b5:3f:5f:7f:a1:dd:84:f9:2c:4f:69:04:
8c:94:7e:a5:1a:8a:e0:ff:d7:4c:ad:19:38:ef:21:ee:e8:64:
fb:b4:cd:cf:ae:bf:3e:46:65:ef:51:6e:19:e3:82:7e:3a:6e:
9e:8f:be:d1:a2:41:c4:a6:e1:8e:8b:5e:99:84:d7:d4:eb:f2:
f8:9a:57:6f:7e:60:a3:b7:c9:51:47:f8:b4:37:e1:00:70:c2:
6b:f2:81:f1:55:a1:4d:92:b6:4e:f0:9a:64:e7:36:8b:75:44:
97:c8:17:e4:cb:3b:4d:83:8e:25:0a:5e:28:32:41:a8:0b:1a:
e8:29:4d:07:bc:20:31:cf:7b:17:d6:b6:56:23:be:e4:09:c7:
f4:b1:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:37:05 2025 by rpki-client