Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
File: P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer (raw, json)
Hash identifier: vmGoh+HeEyGA1FlQx8pNIIoHHYQfQMIvznLCjU2HzwM=
Subject key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C5D456E0C3F85DA74BFE6CD10553
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8851
AS: 31270
AS: 34940
AS: 39179
AS: 41393
AS: 43198
AS: 60648
AS: 61341
AS: 196875
AS: 199291
IP: 37.98.144.0/21
IP: 37.252.24.0/21
IP: 77.93.128.0/19
IP: 77.107.64.0/18
IP: 79.99.72.0/21
IP: 79.99.144.0/21
IP: 80.240.80.0/20
IP: 81.5.128.0/18
IP: 81.168.0.0/17
IP: 82.152.0.0/15
IP: 82.163.0.0/19
IP: 85.159.128.0/21
IP: 89.28.232.0/21
IP: 89.31.232.0/21
IP: 89.213.0.0/21
IP: 89.213.40.0 -- 89.213.255.255
IP: 95.130.96.0/21
IP: 109.176.0.0/16
IP: 158.255.8.0/21
IP: 185.20.32.0/22
IP: 185.24.84.0/22
IP: 185.49.124.0/22
IP: 185.101.44.0/22
IP: 193.27.212.0/23
IP: 193.189.140.0/24
IP: 194.105.64.0/19
IP: 195.128.138.0/24
IP: 212.38.64.0/19
IP: 213.130.128.0/19
IP: 213.152.32.0/19
IP: 213.210.0.0/18
IP: 213.218.208.0 -- 213.218.255.255
IP: 217.144.144.0/20
IP: 217.145.64.0/20
IP: 2001:1a90::/32
IP: 2a00:c60::/32
IP: 2a00:1c40::/29
IP: 2a00:4ae0::/29
IP: 2a01:4cc0::/32
IP: 2a02:21f8::/32
IP: 2a02:6f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jan 2025 15:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c5:d4:56:e0:c3:f8:5d:a7:4b:fe:6c:d1:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:c4:33:c1:cb:64:46:09:6b:ff:d6:2e:92:
30:e6:08:0e:3e:52:f9:ec:68:28:48:7c:99:fb:e7:
e0:4c:fd:bb:1c:69:d0:18:0d:5b:bf:60:81:c0:e5:
87:76:7f:9f:2b:67:f9:6f:47:ab:61:f4:e9:8d:72:
63:35:1d:6b:90:87:f9:92:4f:d1:49:7a:50:27:c3:
88:69:b3:4b:13:5a:31:b3:51:a7:c0:71:0c:d9:a7:
6f:ed:5f:4c:84:e3:fe:b5:de:0b:a6:c3:81:6c:64:
d6:0b:6c:cc:4c:10:26:dc:ec:45:1c:e9:b1:23:e2:
54:ca:8a:23:fc:74:fb:81:ac:4a:c8:c1:ea:98:09:
41:3a:86:11:1f:14:ea:b9:07:03:09:7f:c2:ee:3e:
bf:58:a6:00:e4:72:99:6d:56:21:c8:b9:b2:c8:3a:
75:2a:38:26:68:da:1e:41:81:7b:67:ad:a2:13:50:
64:71:0b:a4:d1:36:a2:1d:24:9f:f7:44:a9:ed:15:
d6:31:2f:12:80:d9:4c:e3:41:d7:0c:04:95:3c:0d:
02:b4:8d:26:3f:3a:b1:37:5e:68:3e:33:b1:c2:a9:
33:03:66:ef:e8:3c:ac:8e:cf:2b:17:e7:49:58:55:
59:f7:5d:9c:04:20:ec:6b:93:5d:b5:02:74:28:a4:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/22
185.49.124.0/22
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a00:4ae0::/29
2a01:4cc0::/32
2a02:21f8::/32
2a02:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8851
31270
34940
39179
41393
43198
60648
61341
196875
199291
Signature Algorithm: sha256WithRSAEncryption
21:ad:78:73:ba:d6:15:d4:24:49:31:a2:f4:8a:b3:9f:b2:2e:
d1:57:8e:c0:78:a4:82:16:6a:12:5b:d1:49:77:04:40:5c:f2:
e7:de:ce:cd:26:97:bf:fd:d6:cf:64:91:39:55:f0:13:8d:bf:
dd:97:c2:13:4e:9e:81:8e:a1:c6:e9:47:70:29:7f:c3:ce:af:
25:1d:b2:b3:2f:80:f9:57:70:b8:c7:c1:48:eb:00:ec:85:32:
50:82:25:f1:e5:b9:96:07:7d:f1:0b:dd:d2:7b:9b:9b:c5:24:
3f:dc:09:bd:b6:20:eb:4e:3c:47:f9:4a:80:11:f9:84:1f:df:
5d:a6:2b:2c:b1:57:4d:f1:12:be:31:93:c7:41:b1:ed:3b:f0:
ce:7b:8f:7c:5b:9b:32:cd:59:bb:06:eb:b0:26:ad:36:66:8f:
ab:e0:8e:45:33:7e:16:2d:b8:37:b2:e8:04:9e:6f:28:43:c2:
76:5c:ba:28:08:fe:33:06:c3:a3:f6:02:39:f9:02:ce:fe:ab:
af:e1:a0:df:53:a7:52:25:c4:2b:f7:6d:bd:be:85:0a:ae:cf:
2e:d2:9a:ab:60:23:56:3e:22:6d:00:55:80:a3:92:b1:52:d4:
1c:8a:b8:89:3b:f3:ac:2c:2a:36:1f:69:68:96:d4:fb:f2:49:
d0:61:7b:12
-----BEGIN CERTIFICATE-----
MIIG0jCCBbqgAwIBAgISAZQhQ8XUVuDD+F2nS/5s0QVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmQzMGQ4YTdlMTJmYzdiZjYyZTBjMTIxZTdjYzIyNmRlYTUzYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhXEM8HLZEYJa//WLpIw5ggOPlL5
7GgoSHyZ++fgTP27HGnQGA1bv2CBwOWHdn+fK2f5b0erYfTpjXJjNR1rkIf5kk/R
SXpQJ8OIabNLE1oxs1GnwHEM2adv7V9MhOP+td4LpsOBbGTWC2zMTBAm3OxFHOmx
I+JUyooj/HT7gaxKyMHqmAlBOoYRHxTquQcDCX/C7j6/WKYA5HKZbVYhyLmyyDp1
KjgmaNoeQYF7Z62iE1BkcQuk0TaiHSSf90Sp7RXWMS8SgNlM40HXDASVPA0CtI0m
PzqxN15oPjOxwqkzA2bv6Dysjs8rF+dJWFVZ912cBCDsa5NdtQJ0KKTyeQIDAQAB
o4ID3jCCA9owHQYDVR0OBBYEFD/TDYp+Evx79i4MEh58wibepTubMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzQ5ZGMw
MC05N2UyLTQ2MjgtYWUzOS00MTIyOGUzOWZmN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNDlkYzAw
LTk3ZTItNDYyOC1hZTM5LTQxMjI4ZTM5ZmY3Yy8xL1A5TU5pbjRTX0h2Mkxnd1NI
bnpDSnQ2bE81cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBMAYIKwYB
BQUHAQcBAf8EggEfMIIBGzCB3wQCAAEwgdgDBAMlYpADBAMl/BgDBAVNXYADBAZN
a0ADBANPY0gDBANPY5ADBARQ8FADBAZRBYADBAdRqAADAwFSmAMEBVKjAAMEA1Wf
gAMEA1kc6AMEA1kf6AMEA1nVADALAwQDWdUoAwMBWdQDBANfgmADAwBtsAMEA57/
CAMEArkUIAMEArkYVAMEArkxfAMEArllLAMEAcEb1AMEAMG9jAMEBcJpQAMEAMOA
igMEBdQmQAMEBdWCgAMEBdWYIAMEBtXSADALAwQE1drQAwMA1doDBATZkJADBATZ
kUAwNwQCAAIwMQMFACABGpADBQAqAAxgAwUDKgAcQAMFAyoASuADBQAqAUzAAwUA
KgIh+AMFAyoCb4AwRQYIKwYBBQUHAQgBAf8ENjA0oDIwMAICIpMCAnomAgMAiHwC
AwCZCwIDAKGxAgMAqL4CAwDs6AIDAO+dAgMDAQsCAwMKezANBgkqhkiG9w0BAQsF
AAOCAQEAIa14c7rWFdQkSTGi9Iqzn7Iu0VeOwHikghZqElvRSXcEQFzy597OzSaX
v/3Wz2SROVXwE42/3ZfCE06egY6hxulHcCl/w86vJR2ysy+A+VdwuMfBSOsA7IUy
UIIl8eW5lgd98Qvd0nubm8UkP9wJvbYg6048R/lKgBH5hB/fXaYrLLFXTfESvjGT
x0Gx7TvwznuPfFubMs1ZuwbrsCatNmaPq+CORTN+Fi24N7LoBJ5vKEPCdly6KAj+
MwbDo/YCOfkCzv6rr+Gg31OnUiXEK/dtvb6FCq7PLtKaq2AjVj4ibQBVgKOSsVLU
HIq4iTvzrCwqNh9paJbU+/JJ0GF7Eg==
-----END CERTIFICATE-----
Generated at Wed Jan 22 01:06:35 2025 by rpki-client on console-fra.rpki-client.org