Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
File: TDfyfrSZezvvnygmajlpQFD-dPk.cer (raw, json)
Hash identifier: wrOOZRW0KLr2lsYDZVtHNtnnF2D70GK42OaOddGvv9I=
Subject key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F9C097E95D9A6D8A182C2CF4A3E5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12975
AS: 31408
IP: 1.178.112.0 -- 1.178.143.255
IP: 1.178.208.0/20
IP: 1.179.40.0/21
IP: 1.179.72.0/21
IP: 1.179.88.0/21
IP: 5.11.40.0/21
IP: 24.42.64.0/18
IP: 37.75.208.0/21
IP: 43.230.140.0/22
IP: 43.241.156.0/22
IP: 43.243.24.0/22
IP: 43.243.32.0/22
IP: 43.243.92.0/22
IP: 43.245.156.0/22
IP: 43.245.208.0/22
IP: 43.255.108.0/22
IP: 45.113.108.0/22
IP: 45.116.248.0/22
IP: 45.117.4.0/22
IP: 45.117.40.0/22
IP: 45.121.104.0/22
IP: 45.127.176.0/22
IP: 45.134.202.0/23
IP: 46.60.64.0/18
IP: 59.152.88.0/21
IP: 66.9.0.0/19
IP: 77.91.128.0/18
IP: 82.213.0.0/18
IP: 83.244.0.0/17
IP: 85.184.240.0/22
IP: 86.104.188.0/22
IP: 95.215.104.0/22
IP: 103.27.144.0/22
IP: 103.37.84.0/22
IP: 103.47.68.0/22
IP: 103.49.208.0/22
IP: 103.53.4.0/22
IP: 103.57.108.0/22
IP: 103.102.252.0/22
IP: 103.193.132.0/22
IP: 103.196.120.0/22
IP: 103.199.176.0/22
IP: 103.206.36.0/22
IP: 103.206.108.0/22
IP: 103.209.204.0/22
IP: 103.215.4.0/22
IP: 103.216.184.0/22
IP: 103.231.104.0/22
IP: 103.239.96.0/22
IP: 103.242.60.0/22
IP: 103.248.36.0/22
IP: 103.248.244.0/22
IP: 113.212.64.0/22
IP: 115.166.128.0/22
IP: 118.107.180.0/22
IP: 139.190.128.0/18
IP: 144.48.236.0/22
IP: 150.253.32.0/19
IP: 158.140.16.0/20
IP: 158.140.64.0/18
IP: 162.212.180.0/22
IP: 176.65.0.0 -- 176.65.11.255
IP: 182.161.60.0/22
IP: 185.19.220.0/22
IP: 188.0.96.0/19
IP: 188.161.0.0/16
IP: 193.223.252.0/23
IP: 193.227.236.0/23
IP: 194.169.188.0/23
IP: 194.176.98.0/23
IP: 195.123.112.0/21
IP: 195.123.160.0/21
IP: 203.28.19.0/24
IP: 203.30.104.0/22
IP: 203.89.108.0/22
IP: 203.189.236.0/22
IP: 212.14.224.0/19
IP: 213.6.0.0/16
IP: 213.244.64.0/18
IP: 2a00:4a60::/29
IP: 2a00:d2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:09:7e:95:d9:a6:d8:a1:82:c2:cf:4a:3e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:22:31:6c:ff:d8:77:f0:94:b5:92:89:77:
93:b5:a2:9c:c9:ea:c7:5f:61:f6:09:9d:f9:30:44:
3a:ad:0b:93:4c:1f:d1:9b:51:ab:10:3d:95:94:dc:
4a:c9:7e:59:50:e9:4c:f0:a1:5f:d6:8c:4e:c0:6a:
a7:2d:cd:ee:1d:37:21:84:6e:c9:31:19:ad:ca:b3:
6f:1c:76:40:be:b2:45:22:ad:af:76:13:2d:17:31:
3b:64:b6:97:f7:08:2e:a1:03:fb:f3:99:8f:42:8d:
c0:7d:f6:db:e8:0b:2f:8f:8d:53:67:32:09:61:19:
13:f0:b0:1a:6b:f2:6f:d9:2f:7f:56:00:9d:ef:0e:
e3:1a:83:8b:93:ba:8a:15:e6:78:94:f2:bf:35:a7:
6e:5a:85:82:10:b0:c2:1c:03:49:cd:ee:ef:ac:16:
af:d4:54:8d:01:f3:87:92:23:dd:c9:8f:8c:d5:b3:
9a:68:ab:d3:9a:d4:82:ac:b1:6b:82:14:a8:23:4b:
c2:c3:91:99:51:ce:31:31:0c:e2:17:1d:c0:67:b6:
a5:16:ea:25:30:8d:aa:41:ee:92:cf:92:16:dc:14:
44:a5:a0:b2:f8:0c:9b:00:cd:b7:e5:80:15:6a:33:
da:3d:c8:22:ba:ca:3a:85:ae:b3:8f:cf:23:23:96:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.178.208.0/20
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.230.140.0/22
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.245.156.0/22
43.245.208.0/22
43.255.108.0/22
45.113.108.0/22
45.116.248.0/22
45.117.4.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
59.152.88.0/21
66.9.0.0/19
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
85.184.240.0/22
86.104.188.0/22
95.215.104.0/22
103.27.144.0/22
103.37.84.0/22
103.47.68.0/22
103.49.208.0/22
103.53.4.0/22
103.57.108.0/22
103.102.252.0/22
103.193.132.0/22
103.196.120.0/22
103.199.176.0/22
103.206.36.0/22
103.206.108.0/22
103.209.204.0/22
103.215.4.0/22
103.216.184.0/22
103.231.104.0/22
103.239.96.0/22
103.242.60.0/22
103.248.36.0/22
103.248.244.0/22
113.212.64.0/22
115.166.128.0/22
118.107.180.0/22
139.190.128.0/18
144.48.236.0/22
150.253.32.0/19
158.140.16.0/20
158.140.64.0/18
162.212.180.0/22
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.0.96.0/19
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.89.108.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
IPv6:
2a00:4a60::/29
2a00:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12975
31408
Signature Algorithm: sha256WithRSAEncryption
28:fe:ba:d9:f7:38:64:d5:25:1d:e8:60:91:cf:21:08:88:b9:
c7:ab:29:bc:b7:d3:5c:85:fe:f4:15:6d:cf:6b:2f:26:bd:3d:
2e:ee:bd:de:3f:a3:61:2b:94:0b:1b:c4:f7:ff:56:83:5a:54:
7c:cd:41:0b:4a:7e:32:c3:99:85:41:97:ed:f6:3c:31:64:a6:
49:b3:86:7e:c9:88:35:a1:95:b4:4a:4e:6f:04:09:9e:20:90:
9f:fc:40:b6:7b:8c:26:70:1c:f3:3d:d5:cb:ac:c8:50:9c:f6:
df:c7:b0:c9:82:af:8c:0c:c5:f2:fd:db:56:5f:46:c0:f9:f2:
eb:22:7f:2a:07:a7:11:76:3e:d4:4c:e1:35:98:0d:c5:24:dc:
cc:29:a5:22:1f:53:2f:e7:bd:81:1e:9c:2b:1d:68:c8:f6:3a:
ab:4a:65:11:7d:c4:f8:07:2c:dd:86:89:be:77:a6:6d:c9:3b:
f7:d0:09:50:f2:26:fe:64:69:6b:2c:ee:87:3e:75:52:0c:6d:
7d:1d:2f:ea:24:a1:57:fc:3d:84:ee:a3:31:aa:0c:b8:5b:07:
64:88:42:fa:13:8c:c5:c3:56:87:c0:19:03:8a:3b:60:28:d6:
2b:fb:d1:4f:52:29:53:d7:44:b4:26:6a:e6:22:73:e5:a8:4c:
38:15:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:03:11 2025 by rpki-client