Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.cer (raw, json)
Hash identifier: 6watG7CtLxBCKzFVmiXGy/JMr3NU4/X22Bc/9U4JPcU=
Subject key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9C730D82FE8F81F4C340028173789
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200573
IP: 185.239.40.0/22
IP: 2a0c:3e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c7:30:d8:2f:e8:f8:1f:4c:34:00:28:17:37:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:c8:21:6a:fd:d1:30:8d:f9:e5:0c:8c:2f:
fd:e9:92:3e:87:4c:de:e2:c7:37:9a:4e:c1:99:2c:
4e:79:b9:ba:6d:f4:90:62:1e:24:1f:38:bc:e6:e8:
6f:d4:41:de:e2:15:c6:89:2a:d5:c9:43:f7:22:dd:
c7:28:1f:43:de:4d:0f:04:e6:f2:4e:a1:8d:1f:44:
7d:03:23:2d:2e:79:49:46:b3:70:f2:02:b1:1e:5f:
0e:22:69:0a:6e:f4:30:05:76:70:bd:45:d7:fe:88:
1c:fe:d2:56:62:2f:b2:7d:f5:c5:16:ef:51:fb:8a:
42:54:27:23:18:82:91:99:28:cd:98:06:6f:26:b7:
b4:69:c2:07:2a:2c:50:cb:da:7f:ae:4e:c3:89:c3:
29:ad:be:52:20:22:5d:37:0a:53:82:41:49:c7:53:
80:3d:45:f3:14:a3:89:79:e3:97:75:9a:cd:90:59:
97:6d:05:25:c7:aa:6b:89:90:67:1a:e2:f1:9d:50:
7f:13:06:6e:f2:ba:e6:8b:8c:1d:fe:06:8d:9d:9d:
fe:88:16:ae:a7:0c:ee:24:c6:39:09:5a:d7:7a:3b:
c4:82:c4:78:a7:a3:0a:8b:7f:5d:b3:5f:d2:01:89:
b2:3c:12:7b:17:dd:95:cc:a8:b5:10:e5:e3:29:01:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.40.0/22
IPv6:
2a0c:3e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200573
Signature Algorithm: sha256WithRSAEncryption
57:32:70:f0:36:d7:25:e2:77:26:38:8b:68:e4:b4:a4:12:ab:
7d:03:92:aa:b3:58:63:a5:66:ca:b2:7c:6a:f4:91:c8:17:f6:
bd:49:5b:d6:a1:73:2b:8c:b2:c5:73:3f:23:46:d4:34:b3:5f:
d3:0e:62:e6:27:ce:40:25:f6:fc:88:68:0b:7f:dc:a5:d0:77:
91:04:d5:00:23:40:ac:2c:99:e7:c2:23:68:7c:4d:61:4d:ba:
c6:1f:f4:b9:72:95:d8:67:d2:6b:97:d1:66:74:43:77:a8:9d:
2f:bb:0d:da:c3:ad:cf:06:53:f7:c8:4f:2c:37:45:4e:3b:22:
27:0a:5d:55:49:57:ca:77:b5:ca:bc:4e:ca:97:4f:05:9b:10:
91:4b:31:f5:8d:74:a1:b0:76:97:a7:38:2f:40:8a:1c:f0:c7:
00:ff:ff:2a:dc:41:22:61:5f:e9:c6:ac:91:42:7d:97:f1:54:
b9:1d:ca:2d:a4:43:5f:e2:48:6a:b6:c0:95:3c:bf:f1:10:b1:
89:65:23:a8:14:f4:97:65:20:2a:4f:cf:cf:b3:43:45:5f:b4:
9b:33:02:76:80:80:ee:2e:7b:98:71:b7:3c:12:14:b8:6c:7e:
d2:81:7b:91:13:8b:a0:86:87:cc:c5:c9:df:f8:e1:6c:11:8d:
90:7b:e6:6a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2ccw2C/o+B9MNAAoFzeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTU3ZmQ4M2UwOGUwZjMxZTc5NTE0Njc3YzA5ODgxMWVmNjkwNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIvIIWr90TCN+eUMjC/96ZI+h0ze
4sc3mk7BmSxOebm6bfSQYh4kHzi85uhv1EHe4hXGiSrVyUP3It3HKB9D3k0PBOby
TqGNH0R9AyMtLnlJRrNw8gKxHl8OImkKbvQwBXZwvUXX/ogc/tJWYi+yffXFFu9R
+4pCVCcjGIKRmSjNmAZvJre0acIHKixQy9p/rk7DicMprb5SICJdNwpTgkFJx1OA
PUXzFKOJeeOXdZrNkFmXbQUlx6priZBnGuLxnVB/EwZu8rrmi4wd/gaNnZ3+iBau
pwzuJMY5CVrXejvEgsR4p6MKi39ds1/SAYmyPBJ7F92VzKi1EOXjKQHYHQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEFX/YPgjg8x55UUZ3wJiBHvaQbXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2MyNzMw
Ny0xZmRkLTQyMWItYmJmZC1lMjgzMWNkN2ZjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYzI3MzA3
LTFmZGQtNDIxYi1iYmZkLWUyODMxY2Q3ZmNjOC8xL1FWZjlnLUNPRHpIbmxSUm5m
QW1JRWU5cEJ0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCue8oMA0EAgACMAcDBQMqDD6AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMPfTANBgkqhkiG9w0BAQsFAAOCAQEAVzJw8DbXJeJ3
JjiLaOS0pBKrfQOSqrNYY6VmyrJ8avSRyBf2vUlb1qFzK4yyxXM/I0bUNLNf0w5i
5ifOQCX2/IhoC3/cpdB3kQTVACNArCyZ58IjaHxNYU26xh/0uXKV2GfSa5fRZnRD
d6idL7sN2sOtzwZT98hPLDdFTjsiJwpdVUlXyne1yrxOypdPBZsQkUsx9Y10obB2
l6c4L0CKHPDHAP//KtxBImFf6caskUJ9l/FUuR3KLaRDX+JIarbAlTy/8RCxiWUj
qBT0l2UgKk/Pz7NDRV+0mzMCdoCA7i57mHG3PBIUuGx+0oF7kROLoIaHzMXJ3/jh
bBGNkHvmag==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:45 2025 by rpki-client