Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer (raw, json)
Hash identifier: VN57jDCVRnTvWkwUUiWTmCmX+gzxfmjU2IGCO9QYPaQ=
Subject key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5CE55E7C0412007A86398DF231CF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201152
IP: 185.55.248.0/22
IP: 2a04:d700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ce:55:e7:c0:41:20:07:a8:63:98:df:23:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=473163527e83542dce693b16d0aedcd126d3319a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:b8:19:3b:ef:34:05:da:e7:22:9f:c4:22:
f6:a5:f3:72:5e:c1:aa:c8:90:59:52:0c:04:5c:b3:
c8:ca:2b:54:a3:7c:e0:aa:53:0c:f2:49:0d:e2:79:
f0:90:45:25:f2:d0:39:1e:45:13:ed:93:78:f3:65:
03:fa:d9:e0:4f:4b:24:66:c4:0d:61:ab:40:2c:8a:
87:6b:db:31:91:1e:6b:67:51:ee:3f:d0:65:42:27:
92:5b:70:0d:1b:f4:d3:8d:b3:7a:ca:d6:37:2b:94:
bb:98:0c:ba:99:52:96:4e:cf:c7:56:7b:46:59:f8:
3e:4a:fb:34:28:69:be:a3:94:ff:73:46:01:01:2e:
87:24:d7:88:53:9b:02:c3:ad:8d:25:69:87:e1:ed:
35:c1:e9:c2:8a:72:c3:dd:74:16:1a:79:a2:45:b0:
94:54:50:a3:a5:1e:1e:85:a8:22:54:be:97:52:03:
ac:a2:10:3d:e0:1a:2c:9d:63:53:c6:ac:81:03:5f:
5f:c6:28:56:36:86:35:d6:e0:8a:a0:77:03:a1:db:
85:6b:a7:2c:36:0c:53:64:4a:42:6e:93:43:56:32:
3e:27:fb:64:47:82:6d:94:25:bc:91:7d:88:5a:d6:
34:5f:ec:92:ec:07:9f:fc:40:57:a4:21:7f:4b:46:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.248.0/22
IPv6:
2a04:d700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201152
Signature Algorithm: sha256WithRSAEncryption
60:4b:5c:b3:85:05:cb:5c:2a:67:3f:96:65:56:64:4d:c7:fc:
3f:03:17:e4:53:7c:f8:a2:21:03:56:54:d8:34:bb:71:54:12:
fa:2f:c4:f5:af:5d:79:22:1b:29:38:26:15:8f:d9:2a:ce:f5:
7d:55:4f:da:97:29:c9:a5:3c:c4:26:65:24:c8:14:93:79:52:
14:bc:7a:22:cb:48:fd:c8:d4:fb:0a:4d:9c:89:7d:15:96:87:
0b:dd:71:66:ab:6b:31:b4:e6:7d:4b:15:a3:45:d7:95:d6:a5:
fe:aa:c7:d3:b8:8e:f1:6f:0f:2b:dc:85:11:44:02:e0:8b:ce:
70:31:5e:c2:cc:82:ee:39:fb:5f:e4:85:51:1a:7d:f4:8a:b7:
29:49:c7:e3:5a:8e:f3:0a:af:ba:8d:db:69:9c:b7:9f:5c:73:
97:ed:93:e8:df:83:73:0e:13:01:d8:c9:88:97:64:da:0a:ea:
b3:f3:e7:b4:bb:ea:e1:a5:3c:20:24:44:82:2a:de:4b:93:aa:
48:0a:fd:58:5e:48:32:86:28:45:c0:d2:b3:17:00:8a:6f:22:
ba:f0:be:57:3d:a5:76:90:4f:ba:38:52:75:6a:40:06:45:19:
2f:bd:d5:24:aa:d3:36:9f:06:9f:84:57:24:85:e0:f1:2c:84:
5d:3f:94:ff
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQntc5V58BBIAeoY5jfIxz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzMxNjM1MjdlODM1NDJkY2U2OTNiMTZkMGFlZGNkMTI2ZDMzMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22C4GTvvNAXa5yKfxCL2pfNyXsGq
yJBZUgwEXLPIyitUo3zgqlMM8kkN4nnwkEUl8tA5HkUT7ZN482UD+tngT0skZsQN
YatALIqHa9sxkR5rZ1HuP9BlQieSW3ANG/TTjbN6ytY3K5S7mAy6mVKWTs/HVntG
Wfg+Svs0KGm+o5T/c0YBAS6HJNeIU5sCw62NJWmH4e01wenCinLD3XQWGnmiRbCU
VFCjpR4ehagiVL6XUgOsohA94BosnWNTxqyBA19fxihWNoY11uCKoHcDoduFa6cs
NgxTZEpCbpNDVjI+J/tkR4JtlCW8kX2IWtY0X+yS7Aef/EBXpCF/S0YbDwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2FiMjM4
OS04ZDM2LTQzZmUtYWY0Mi05YTM4NDE5NjcxODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYWIyMzg5
LThkMzYtNDNmZS1hZjQyLTlhMzg0MTk2NzE4MS8xL1J6RmpVbjZEVkMzT2FUc1cw
SzdjMFNiVE1aby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTf4MA0EAgACMAcDBQMqBNcAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMRwDANBgkqhkiG9w0BAQsFAAOCAQEAYEtcs4UFy1wq
Zz+WZVZkTcf8PwMX5FN8+KIhA1ZU2DS7cVQS+i/E9a9deSIbKTgmFY/ZKs71fVVP
2pcpyaU8xCZlJMgUk3lSFLx6IstI/cjU+wpNnIl9FZaHC91xZqtrMbTmfUsVo0XX
ldal/qrH07iO8W8PK9yFEUQC4IvOcDFewsyC7jn7X+SFURp99Iq3KUnH41qO8wqv
uo3baZy3n1xzl+2T6N+Dcw4TAdjJiJdk2grqs/PntLvq4aU8ICREgireS5OqSAr9
WF5IMoYoRcDSsxcAim8iuvC+Vz2ldpBPujhSdWpABkUZL73VJKrTNp8Gn4RXJIXg
8SyEXT+U/w==
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:54:31 2025 by rpki-client