Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.cer (raw, json)
Hash identifier: l8M+GHJAapEsYXHjx+m+1+qahlo/41hOPd1iFHAaHkk=
Subject key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424F2D63A87CD34F8740EE8C75DF20F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29256
AS: 29386
AS: 201550
IP: 5.0.0.0/16
IP: 5.155.0.0/16
IP: 31.9.0.0/16
IP: 46.40.128.0/18
IP: 62.16.80.0/20
IP: 80.70.120.0/21
IP: 82.100.128.0/19
IP: 82.137.192.0/18
IP: 91.144.0.0/18
IP: 94.47.0.0/16
IP: 178.253.64.0/18
IP: 185.41.84.0/22
IP: 185.92.88.0/22
IP: 185.99.100.0/22
IP: 185.109.212.0/22
IP: 188.133.0.0/17
IP: 193.124.10.0 -- 193.124.13.255
IP: 193.124.26.0 -- 193.124.29.255
IP: 193.124.38.0/23
IP: 193.124.52.0/23
IP: 193.124.62.0/23
IP: 193.124.68.0/23
IP: 193.124.72.0/22
IP: 193.124.82.0/23
IP: 193.124.86.0/23
IP: 193.124.96.0/20
IP: 193.124.122.0/23
IP: 193.124.126.0/23
IP: 193.124.152.0 -- 193.124.157.255
IP: 193.124.160.0/20
IP: 193.124.192.0/21
IP: 193.124.208.0/20
IP: 193.124.228.0 -- 193.124.239.255
IP: 193.124.252.0/23
IP: 194.58.0.0 -- 194.58.23.255
IP: 194.58.48.0/21
IP: 194.58.128.0 -- 194.58.151.255
IP: 194.58.156.0/22
IP: 194.58.208.0/21
IP: 194.58.224.0/20
IP: 194.58.248.0/21
IP: 194.135.106.0/23
IP: 194.135.116.0/23
IP: 194.135.248.0/21
IP: 2a03:8b60::/32
IP: 2a04:8180::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f2:d6:3a:87:cd:34:f8:74:0e:e8:c7:5d:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:5d:94:3f:31:ad:e2:7f:b2:c5:e5:8f:ab:
4c:f2:6c:20:6d:9f:11:79:e8:c3:78:ba:5d:f3:82:
6c:24:aa:96:62:6e:4f:45:61:20:bb:60:6e:d6:7d:
4e:89:43:0d:6a:28:9f:9b:6e:28:06:8d:ed:77:ee:
81:c2:ea:21:87:19:d7:e0:50:28:d9:62:a6:7e:74:
2e:5c:a6:b6:dc:6d:73:3d:2c:37:c3:94:47:10:86:
b0:d5:c6:7f:b2:1a:96:e9:94:4a:d6:2e:ec:e5:ed:
c9:21:e1:dc:28:98:49:37:f1:f9:d5:e8:fb:67:f4:
bd:15:56:07:d1:26:63:b0:44:f4:67:81:86:b4:a7:
69:f8:ba:ed:44:bf:da:7e:a6:a4:d5:de:c8:44:5a:
51:de:52:76:03:38:95:76:f5:e3:5a:c5:33:9b:a1:
90:06:a9:37:68:32:61:21:73:5c:85:3d:5d:5f:3f:
3b:87:bf:a4:c5:65:da:1f:ab:c5:e2:ba:29:9f:b7:
6b:04:40:7c:8f:b0:ed:b2:10:f5:3e:db:28:41:de:
63:d3:0a:02:f0:11:ac:0d:e8:a2:0f:8a:47:d1:ef:
4c:85:95:55:b9:c8:1e:96:fe:26:12:9f:d6:b2:f5:
1d:2f:5b:74:3b:1b:49:76:7a:b8:b5:0c:d0:ba:31:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.0.0/16
46.40.128.0/18
62.16.80.0/20
80.70.120.0/21
82.100.128.0/19
82.137.192.0/18
91.144.0.0/18
94.47.0.0/16
178.253.64.0/18
185.41.84.0/22
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.72.0/22
193.124.82.0/23
193.124.86.0/23
193.124.96.0/20
193.124.122.0/23
193.124.126.0/23
193.124.152.0-193.124.157.255
193.124.160.0/20
193.124.192.0/21
193.124.208.0/20
193.124.228.0-193.124.239.255
193.124.252.0/23
194.58.0.0-194.58.23.255
194.58.48.0/21
194.58.128.0-194.58.151.255
194.58.156.0/22
194.58.208.0/21
194.58.224.0/20
194.58.248.0/21
194.135.106.0/23
194.135.116.0/23
194.135.248.0/21
IPv6:
2a03:8b60::/32
2a04:8180::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29256
29386
201550
Signature Algorithm: sha256WithRSAEncryption
75:0f:20:0a:e9:0d:e6:05:81:86:cd:9a:e7:e0:ea:3c:84:48:
dd:63:03:00:e7:64:69:e2:a5:41:e4:96:26:8c:08:05:bd:38:
43:d8:08:1b:3a:d0:38:f5:31:1a:79:b8:e8:57:d6:df:bf:b6:
17:b6:d0:91:a5:80:a4:f6:52:57:cd:66:56:6b:26:e6:07:6d:
c3:82:b3:27:87:fd:97:b5:14:f2:03:2d:6f:1d:8e:89:3f:15:
8e:17:fc:09:fa:83:2b:1d:c0:9e:73:8f:49:0c:9d:8e:a5:7f:
ca:7a:f7:37:43:27:bb:2e:1d:47:7d:c1:f9:64:84:0c:3a:de:
93:24:c4:4e:f4:d5:a4:6f:65:db:ba:4a:b1:54:1d:d5:5f:5e:
68:65:7d:8f:48:76:71:20:71:fd:ad:f3:6e:7c:83:ef:bd:67:
31:8b:de:49:e5:c0:01:5b:45:52:56:5c:30:34:0d:b5:fe:64:
ff:c0:2b:e0:d5:0b:c2:1c:2a:73:b7:1c:e4:26:ff:59:e7:e1:
62:44:89:11:f8:06:a6:ad:84:4b:f1:c3:a4:5b:5a:c4:0a:bc:
a4:53:a9:7f:14:f6:27:39:f7:bc:da:8d:eb:eb:a2:78:4b:33:
8a:2c:45:59:2a:00:38:1f:bc:80:71:1b:45:d6:fd:7c:e9:e7:
f8:c8:4a:fd
-----BEGIN CERTIFICATE-----
MIIG6TCCBdGgAwIBAgISAYzEJPLWOofNNPh0DujHXfIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjgzNjk2NzE2ZGJjYzM2MGI5YTYyZWY3ZDg0YjRkMjhmOTU4YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZdlD8xreJ/ssXlj6tM8mwgbZ8R
eejDeLpd84JsJKqWYm5PRWEgu2Bu1n1OiUMNaiifm24oBo3td+6BwuohhxnX4FAo
2WKmfnQuXKa23G1zPSw3w5RHEIaw1cZ/shqW6ZRK1i7s5e3JIeHcKJhJN/H51ej7
Z/S9FVYH0SZjsET0Z4GGtKdp+LrtRL/afqak1d7IRFpR3lJ2AziVdvXjWsUzm6GQ
Bqk3aDJhIXNchT1dXz87h7+kxWXaH6vF4ropn7drBEB8j7DtshD1PtsoQd5j0woC
8BGsDeiiD4pH0e9MhZVVucgelv4mEp/WsvUdL1t0OxtJdnq4tQzQujFkGQIDAQAB
o4ID9TCCA/EwHQYDVR0OBBYEFEKDaWcW28w2C5pi732EtNKPlYvdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzU0NDJj
ZS00OGJjLTQxNjQtOTM1MC05MjQwZDlmNzVhZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNTQ0MmNl
LTQ4YmMtNDE2NC05MzUwLTkyNDBkOWY3NWFlNi8xL1FvTnBaeGJiekRZTG1tTHZm
WVMwMG8tVmk5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBagYIKwYB
BQUHAQcBAf8EggFZMIIBVTCCATsEAgABMIIBMwMDAAUAAwMABZsDAwAfCQMEBi4o
gAMEBD4QUAMEA1BGeAMEBVJkgAMEBlKJwAMEBluQAAMDAF4vAwQGsv1AAwQCuSlU
AwQCuVxYAwQCuWNkAwQCuW3UAwQHvIUAMAwDBAHBfAoDBAHBfAwwDAMEAcF8GgME
AcF8HAMEAcF8JgMEAcF8NAMEAcF8PgMEAcF8RAMEAsF8SAMEAcF8UgMEAcF8VgME
BMF8YAMEAcF8egMEAcF8fjAMAwQDwXyYAwQBwXycAwQEwXygAwQDwXzAAwQEwXzQ
MAwDBALBfOQDBATBfOADBAHBfPwwCwMDAcI6AwQDwjoQAwQDwjowMAwDBAfCOoAD
BAPCOpADBALCOpwDBAPCOtADBATCOuADBAPCOvgDBAHCh2oDBAHCh3QDBAPCh/gw
FAQCAAIwDgMFACoDi2ADBQEqBIGAMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAnJI
AgJyygIDAxNOMA0GCSqGSIb3DQEBCwUAA4IBAQB1DyAK6Q3mBYGGzZrn4Oo8hEjd
YwMA52Rp4qVB5JYmjAgFvThD2AgbOtA49TEaebjoV9bfv7YXttCRpYCk9lJXzWZW
aybmB23DgrMnh/2XtRTyAy1vHY6JPxWOF/wJ+oMrHcCec49JDJ2OpX/Kevc3Qye7
Lh1HfcH5ZIQMOt6TJMRO9NWkb2XbukqxVB3VX15oZX2PSHZxIHH9rfNufIPvvWcx
i95J5cABW0VSVlwwNA21/mT/wCvg1QvCHCpztxzkJv9Z5+FiRIkR+AamrYRL8cOk
W1rECrykU6l/FPYnOfe82o3r66J4SzOKLEVZKgA4H7yAcRtF1v186ef4yEr9
-----END CERTIFICATE-----
Generated at Fri May 3 09:06:42 2024 by rpki-client on console-ams.rpki-client.org