Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
File: T2F9awPi_l-JEcvrX64tyjvWZ38.cer (raw, json)
Hash identifier: kfkYvtpqAPDrWgTL9q9F1Y928EdMk6XUiYuQy9wVbXM=
Subject key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC5C7E89CBF9C9CCAE2B4063F66291
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44034
IP: 2.64.0.0/13
IP: 37.250.0.0/16
IP: 77.241.128.0/20
IP: 78.156.192.0/19
IP: 79.138.128.0/17
IP: 80.251.192.0/20
IP: 94.191.128.0/17
IP: 95.209.0.0/16
IP: 109.56.0.0/14
IP: 212.27.0.0/19
IP: 2a02:aa0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5c:7e:89:cb:f9:c9:cc:ae:2b:40:63:f6:62:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:19:16:b7:80:e6:71:22:c9:62:34:19:5c:
48:be:cc:6d:39:53:5e:b3:ce:19:dd:5c:f4:94:19:
c8:d9:4d:87:48:df:59:6a:1e:f8:1e:17:ef:0f:bf:
e4:0b:a7:d8:07:d7:06:c0:72:69:99:d5:06:04:b8:
4b:32:30:19:c1:90:db:87:7d:0b:86:ac:07:f2:41:
82:9e:68:ca:58:2b:57:15:2d:97:b0:5d:64:98:9a:
de:02:21:e2:22:b7:4c:42:c0:ea:23:5e:5d:6a:ef:
1b:8f:2a:ba:e0:ba:18:56:12:29:87:f3:e5:98:91:
d4:da:7e:af:78:54:c8:84:6e:16:c5:f0:09:4b:ea:
0f:78:b8:f2:46:ed:8a:f8:46:1e:b6:53:24:94:e9:
0e:4c:fe:fb:90:65:e2:4d:f3:07:a6:18:32:6f:b2:
4b:47:52:f9:ce:6a:c7:b8:14:ef:f8:19:a9:b4:97:
2b:9f:e0:4b:15:94:df:19:8a:3f:6c:22:7e:73:20:
a3:67:98:df:db:12:71:32:d3:e1:d0:96:4d:13:d2:
11:ff:f3:5d:d5:b6:68:b4:ec:59:ab:61:38:d9:8a:
42:4f:32:10:b6:4d:e5:b5:a1:a6:5b:4f:61:ba:23:
9e:0e:79:3d:32:9c:d0:d4:11:b4:ab:f2:15:31:57:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.64.0.0/13
37.250.0.0/16
77.241.128.0/20
78.156.192.0/19
79.138.128.0/17
80.251.192.0/20
94.191.128.0/17
95.209.0.0/16
109.56.0.0/14
212.27.0.0/19
IPv6:
2a02:aa0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44034
Signature Algorithm: sha256WithRSAEncryption
84:b8:dc:30:3a:05:d0:1d:ff:b0:cb:c2:3e:95:9e:49:5f:2e:
f5:db:3b:a4:1e:0b:61:34:25:da:63:bd:44:44:5c:86:64:2c:
8d:0a:66:aa:00:ac:45:a8:0e:f1:84:ae:4b:b2:3c:61:12:8c:
05:f4:ba:94:e2:c0:50:04:6b:ed:99:e8:6e:19:49:89:7f:a9:
34:42:03:c3:ea:fe:fe:1b:b8:c3:a4:a0:62:6b:a1:53:e6:af:
a9:0a:47:24:bb:49:f9:4d:81:4d:11:c6:30:ce:57:e3:0c:50:
ba:f1:b1:67:52:a3:96:f9:64:f7:54:d5:ca:53:10:c3:34:8d:
be:f1:f7:0b:1a:12:f0:d6:9d:8d:6b:19:72:77:1d:62:d1:9f:
7e:89:be:b6:7b:9b:bd:ce:09:43:d3:2b:0b:12:ab:91:91:05:
16:e9:7a:26:22:be:ea:1f:d2:43:32:c7:28:be:d5:c3:32:99:
e6:34:d7:e2:09:ad:d3:e4:16:dc:30:13:67:12:72:5c:aa:3f:
80:f8:38:aa:da:cd:68:56:4e:31:ee:44:ed:f4:d9:63:b2:a3:
dd:e2:49:72:ad:f5:c6:fa:bd:cc:cf:5c:a1:f7:18:1d:92:23:
14:f5:47:a9:df:37:33:47:eb:0f:a3:15:2f:40:e4:d7:7a:64:
0d:f6:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:21 2025 by rpki-client