Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
File: RjadxdpeTnDHNbI1cE2evFglk0k.cer (raw, json)
Hash identifier: fWdteB+w70pf48jLAG+FaOmawfwIEePawg/wWeGR1Uw=
Subject key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDCA0A47333E229EDAE418DC348512
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3332
IP: 193.203.196.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ca:0a:47:33:3e:22:9e:da:e4:18:dc:34:85:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:53:ed:c3:8d:0f:2c:1f:d9:09:85:67:36:
79:f8:0d:38:e5:2e:5c:ec:ea:5e:08:09:a4:a0:1e:
0b:e7:db:ea:d0:c0:2c:2a:c5:aa:0c:71:9b:7f:11:
13:a3:27:8f:6d:24:d0:52:39:d9:b1:88:4e:b3:a3:
22:56:90:d7:17:90:35:84:6c:63:7a:42:b1:22:64:
43:2e:00:e9:83:fa:d7:4f:a7:83:7a:20:5b:8a:aa:
f3:a8:c6:50:a1:20:05:36:dd:84:b2:28:5a:6a:62:
95:4c:c6:eb:ef:2a:5d:9c:c7:1b:c1:5a:1f:91:48:
e0:d5:f0:30:b7:b6:3e:c8:27:31:64:1e:9b:54:5e:
19:5a:28:d7:c9:47:35:90:58:98:89:0c:74:45:1d:
39:3c:72:74:42:2f:0f:28:27:4f:ea:c1:4c:fd:0f:
a2:35:ed:0c:ef:04:8a:1d:00:27:86:92:e6:00:8d:
e5:b5:38:e4:b9:3d:ab:28:68:74:b0:0d:23:b1:b7:
4c:0d:b6:dc:09:7c:4f:22:e6:01:03:fe:1d:e2:20:
7e:d3:1b:95:20:6e:29:32:f3:0d:9d:79:f1:68:70:
c9:7f:af:1e:5c:dc:fb:f5:a9:ef:ea:0d:2d:ab:0d:
cd:20:6c:af:44:8c:6b:56:bc:60:fa:ef:4a:06:3a:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3332
Signature Algorithm: sha256WithRSAEncryption
06:16:53:dc:97:29:02:ef:41:d6:fd:d6:a2:00:69:3b:9a:b5:
04:d1:d4:c4:b5:cd:2b:d2:df:55:2d:e8:01:e4:d5:45:57:ff:
14:85:b2:de:b1:20:51:22:5a:d2:a8:f8:ce:ea:57:30:d1:99:
50:9e:29:c3:38:18:28:ed:78:9d:72:14:4b:65:1f:ad:dc:4a:
5d:df:0f:ba:91:bf:05:ef:a3:4c:59:22:ac:74:cb:15:89:55:
06:aa:bc:ec:58:3f:df:26:74:56:55:60:42:24:e6:c6:67:8c:
11:20:aa:6c:68:32:d7:2f:c0:2e:a5:12:a3:12:a4:b3:e1:d2:
42:31:49:1b:66:c1:1f:b5:de:90:49:d3:7b:a0:65:0d:59:40:
35:9c:e9:5d:2e:67:ba:c6:81:c5:ef:83:3c:9b:07:d9:1a:76:
f3:8f:36:37:39:13:b2:79:32:42:0f:eb:cc:e3:5d:58:bc:ee:
8e:59:19:ca:25:99:4e:f2:75:11:fb:e4:42:c8:fa:0f:44:73:
77:fe:94:dd:0b:1a:70:9b:86:d6:ff:6f:c7:e2:4b:bf:84:cf:
34:a4:69:25:eb:b2:cf:0c:6a:d6:46:43:cd:2a:c4:fd:df:b3:
07:28:d8:1a:86:dd:7e:1a:23:9c:4a:b4:ab:76:57:62:f1:2f:
5e:f1:d0:21
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQl/coKRzM+Ip7a5BjcNIUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjM2OWRjNWRhNWU0ZTcwYzczNWIyMzU3MDRkOWViYzU4MjU5MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL5T7cONDywf2QmFZzZ5+A045S5c
7OpeCAmkoB4L59vq0MAsKsWqDHGbfxEToyePbSTQUjnZsYhOs6MiVpDXF5A1hGxj
ekKxImRDLgDpg/rXT6eDeiBbiqrzqMZQoSAFNt2EsihaamKVTMbr7ypdnMcbwVof
kUjg1fAwt7Y+yCcxZB6bVF4ZWijXyUc1kFiYiQx0RR05PHJ0Qi8PKCdP6sFM/Q+i
Ne0M7wSKHQAnhpLmAI3ltTjkuT2rKGh0sA0jsbdMDbbcCXxPIuYBA/4d4iB+0xuV
IG4pMvMNnXnxaHDJf68eXNz79anv6g0tqw3NIGyvRIxrVrxg+u9KBjr7dQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFEY2ncXaXk5wxzWyNXBNnrxYJZNJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2ZlNjli
Mi0wYWJiLTRlNTUtOGIzOC1hOTE2MzRkMmE4MDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmU2OWIy
LTBhYmItNGU1NS04YjM4LWE5MTYzNGQyYTgwOC8xL1JqYWR4ZHBlVG5ESE5iSTFj
RTJldkZnbGsway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwcvEMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
Ag0EMA0GCSqGSIb3DQEBCwUAA4IBAQAGFlPclykC70HW/daiAGk7mrUE0dTEtc0r
0t9VLegB5NVFV/8UhbLesSBRIlrSqPjO6lcw0ZlQninDOBgo7XidchRLZR+t3Epd
3w+6kb8F76NMWSKsdMsViVUGqrzsWD/fJnRWVWBCJObGZ4wRIKpsaDLXL8AupRKj
EqSz4dJCMUkbZsEftd6QSdN7oGUNWUA1nOldLme6xoHF74M8mwfZGnbzjzY3OROy
eTJCD+vM411YvO6OWRnKJZlO8nUR++RCyPoPRHN3/pTdCxpwm4bW/2/H4ku/hM80
pGkl67LPDGrWRkPNKsT937MHKNgaht1+GiOcSrSrdldi8S9e8dAh
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:31:36 2025 by rpki-client