Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer (raw, json)
Hash identifier: 0oa4pdAIp9XVuCjrrF7H/e4X4njNDfMeunpBVM0vFy8=
Subject key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C06406FF22646A85C000AF209B172
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12314
AS: 50313
IP: 185.33.172.0/22
IP: 212.42.32.0/19
IP: 2a0d:9480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:06:40:6f:f2:26:46:a8:5c:00:0a:f2:09:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:a4:d2:c3:99:83:fa:97:9b:db:c0:85:c6:
52:34:86:ad:d4:4b:4f:a7:c0:99:87:7e:7b:5e:4a:
ba:ae:3a:75:0a:3b:97:08:bd:55:75:58:cf:f7:67:
4d:0f:a5:b8:ab:a8:73:8c:5a:e8:14:0f:0f:11:c9:
f7:03:82:ab:65:41:c7:ee:36:22:0f:de:38:3e:0f:
73:58:0e:4f:fe:64:c8:80:d6:1c:00:8c:aa:b6:7d:
b0:89:24:d9:4e:92:a0:79:d8:27:53:74:8b:49:d2:
f9:d5:88:1a:79:ab:08:16:95:71:85:d4:67:48:33:
8c:04:e8:04:58:a3:5f:0d:e2:88:5d:0b:dd:ce:29:
95:ea:81:4c:91:02:27:9b:7f:e0:71:89:a8:b6:8e:
8e:c9:20:86:a9:31:ef:e0:40:c8:f6:e5:c2:f1:84:
01:cd:49:0e:77:46:05:11:2b:65:7f:e8:c8:dc:4c:
d3:f7:10:cf:4a:df:0f:2f:23:76:27:77:c5:ac:8c:
b6:98:80:2f:57:8d:72:16:cf:f5:07:e1:e5:2c:6c:
89:c2:a7:9f:a3:fa:71:d6:0d:ed:64:de:11:b3:0e:
32:ca:28:e7:0a:e0:08:ef:a8:55:d0:ee:93:49:d3:
77:44:93:81:e5:2a:9a:cc:47:84:03:e9:01:b9:70:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.172.0/22
212.42.32.0/19
IPv6:
2a0d:9480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12314
50313
Signature Algorithm: sha256WithRSAEncryption
71:fe:89:17:89:a7:a6:ee:75:3d:81:35:6f:d9:a2:50:91:b7:
52:32:c7:b7:fa:e3:60:d9:9c:95:9b:38:96:d3:e0:ab:c3:5c:
2d:8b:3d:54:9a:0f:bd:8c:72:e2:e6:1d:9e:2a:8f:3c:e1:60:
b7:b3:ae:bb:f3:36:c4:a5:d8:bb:9a:9d:d5:5f:17:be:85:2e:
3f:cd:35:c9:3e:5f:e6:18:3f:af:4e:86:be:1c:2c:74:70:60:
71:66:e6:0c:87:e3:10:b2:14:7e:6d:bf:b3:93:a3:0c:c0:e7:
3f:2d:93:b4:be:f6:5d:71:22:bd:f6:10:74:89:09:7d:63:f6:
a1:a9:44:98:d5:65:ae:91:b1:1b:5a:01:89:85:82:62:90:2b:
5a:0a:5c:11:f5:36:fe:c1:e0:e2:38:8e:b7:2f:b2:fb:1a:17:
60:0b:fd:d2:f0:1f:6d:0c:ed:2d:e3:7f:45:11:62:3b:31:cb:
1f:34:5d:d6:da:69:82:89:4b:09:e2:03:50:70:5c:c4:28:d7:
ce:f9:b0:60:6b:6c:03:4d:cb:68:96:88:0f:1e:b5:d9:a2:e2:
3f:9c:78:dc:c9:ea:7e:ed:a5:41:0d:aa:52:cf:50:0b:d2:69:
58:52:e4:bc:23:22:ea:c0:6b:7a:b1:3e:f9:42:16:6d:91:9b:
57:bf:89:f5
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAZQmbAZAb/ImRqhcAAryCbFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjdhMjY3MDUwOGI5NDUxMjNiZWVjYmYxMzE0NWZmYmQ3YmZjZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2uk0sOZg/qXm9vAhcZSNIat1EtP
p8CZh357Xkq6rjp1CjuXCL1VdVjP92dND6W4q6hzjFroFA8PEcn3A4KrZUHH7jYi
D944Pg9zWA5P/mTIgNYcAIyqtn2wiSTZTpKgedgnU3SLSdL51YgaeasIFpVxhdRn
SDOMBOgEWKNfDeKIXQvdzimV6oFMkQInm3/gcYmoto6OySCGqTHv4EDI9uXC8YQB
zUkOd0YFEStlf+jI3EzT9xDPSt8PLyN2J3fFrIy2mIAvV41yFs/1B+HlLGyJwqef
o/px1g3tZN4Rsw4yyijnCuAI76hV0O6TSdN3RJOB5SqazEeEA+kBuXBjAwIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFEJ6JnBQi5RRI77svxMUX/vXv83kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2VjMmUw
OC1mNjNhLTRiZDctYjg2NC0wNmIzY2VhNDkyZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZWMyZTA4
LWY2M2EtNGJkNy1iODY0LTA2YjNjZWE0OTJlZS8xL1Fub21jRkNMbEZFanZ1eV9F
eFJmLTllX3plUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuSGsAwQF1CogMA0EAgACMAcDBQMqDZSAMB4G
CCsGAQUFBwEIAQH/BA8wDaALMAkCAjAaAgMAxIkwDQYJKoZIhvcNAQELBQADggEB
AHH+iReJp6budT2BNW/ZolCRt1Iyx7f642DZnJWbOJbT4KvDXC2LPVSaD72McuLm
HZ4qjzzhYLezrrvzNsSl2LuandVfF76FLj/NNck+X+YYP69Ohr4cLHRwYHFm5gyH
4xCyFH5tv7OTowzA5z8tk7S+9l1xIr32EHSJCX1j9qGpRJjVZa6RsRtaAYmFgmKQ
K1oKXBH1Nv7B4OI4jrcvsvsaF2AL/dLwH20M7S3jf0URYjsxyx80XdbaaYKJSwni
A1BwXMQo1875sGBrbANNy2iWiA8etdmi4j+ceNzJ6n7tpUENqlLPUAvSaVhS5Lwj
IurAa3qxPvlCFm2Rm1e/ifU=
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:55 2025 by rpki-client