Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
File: ThXfaIw66uP2he1Es5bCGYOVhh0.cer (raw, json)
Hash identifier: dNDt3hcv//X/4FiLw4cuaE4BWgBnJg7S9/dsvtxBgdg=
Subject key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425222CCABBD3FE7D10B71F8797F5413C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16340
AS: 20781
AS: 20961
AS: 21021
AS: 30824
AS: 39349
AS: 39439
AS: 44643
AS: 50312
IP: 31.6.128.0/17
IP: 31.42.16.0/20
IP: 37.131.128.0/19
IP: 37.190.128.0/17
IP: 46.186.0.0/17
IP: 46.231.56.0/21
IP: 62.61.32.0/19
IP: 62.141.192.0/18
IP: 80.244.128.0/19
IP: 80.245.176.0/20
IP: 81.190.0.0/16
IP: 82.115.64.0/19
IP: 83.68.64.0/19
IP: 84.38.80.0/20
IP: 85.117.0.0/19
IP: 87.116.192.0/18
IP: 89.17.224.0/19
IP: 89.228.0.0/14
IP: 91.218.242.0/23
IP: 92.42.112.0/21
IP: 93.94.184.0/21
IP: 94.78.128.0/18
IP: 94.251.128.0/17
IP: 95.129.224.0/21
IP: 95.174.32.0/19
IP: 176.107.112.0/21
IP: 176.221.96.0/19
IP: 185.31.184.0/22
IP: 193.43.240.0/22
IP: 193.106.76.0/22
IP: 193.200.118.0/23
IP: 194.116.132.0/23
IP: 194.149.240.0/24
IP: 195.93.134.0/23
IP: 195.93.222.0/23
IP: 213.136.224.0/19
IP: 217.70.48.0/20
IP: 217.75.48.0/20
IP: 217.144.192.0/19
IP: 217.172.224.0/19
IP: 2a00:1c00::/32
IP: 2a00:bde0::/32
IP: 2a02:2a40::/32
IP: 2a03:e800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:ca:bb:d3:fe:7d:10:b7:1f:87:97:f5:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:21:ee:88:04:aa:a2:1f:a2:35:c9:85:88:
52:78:3a:80:5a:a7:80:e6:65:c0:62:1f:61:26:63:
2d:66:e5:19:aa:33:37:7d:e8:3d:3f:15:47:28:cf:
9c:9f:b9:79:3e:c6:40:f6:12:af:3b:15:47:03:06:
65:a6:1e:27:0b:e8:4a:05:97:e5:ce:4c:91:1f:08:
44:cc:ed:32:5b:a4:81:3b:03:b2:74:82:2c:6b:28:
2a:a5:f1:26:bd:48:ff:76:d1:ab:05:08:63:dc:c6:
41:b6:9d:69:c8:e2:ee:93:0d:d9:78:53:cc:f7:3d:
89:01:72:7b:c5:57:1b:c7:b8:f8:7a:bf:2b:1e:b9:
5b:35:de:41:62:f0:8f:cd:f5:e1:20:a4:b1:30:32:
69:6a:6e:a2:17:83:71:b1:1f:b6:6c:13:a3:03:97:
e4:72:12:3b:6e:65:82:f2:a6:59:81:95:a8:cb:e8:
5f:35:ac:09:77:20:cf:b9:a3:79:3f:6b:eb:f1:44:
39:da:35:d3:33:95:c5:d6:41:4b:18:04:a3:cc:0d:
a8:87:f4:0e:06:cc:59:57:8f:82:e3:a7:32:b1:bb:
e6:3c:d1:9f:32:40:74:22:41:66:c1:97:e5:ca:98:
a4:67:b4:d1:28:f3:3f:12:ab:7f:1f:19:f9:85:87:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0/17
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
91.218.242.0/23
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
2a03:e800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16340
20781
20961
21021
30824
39349
39439
44643
50312
Signature Algorithm: sha256WithRSAEncryption
72:a2:15:08:fd:6a:30:ba:7d:4c:09:4a:95:bb:4f:ec:6e:68:
ff:d1:bb:f9:a4:0e:8f:bf:c1:7c:54:62:7e:e0:cf:27:d3:34:
01:71:3e:aa:b7:8a:d4:ca:7e:b1:65:0f:74:80:04:34:2b:45:
47:fd:50:85:7f:6b:6a:f9:f7:23:29:69:a9:0d:81:a4:a2:9f:
02:f3:1b:c5:4d:cf:9e:f1:f9:3b:8f:5d:50:d6:47:d1:fb:e9:
23:78:91:d1:74:d8:14:00:01:3a:0e:ad:25:d8:3e:31:ff:a2:
96:be:1d:fa:0a:4a:66:6b:95:87:f7:67:19:ec:ec:af:c5:c7:
0b:b6:9a:78:c3:63:d8:90:4e:a9:55:cf:ec:76:60:ea:4d:97:
3c:2a:d1:a8:14:96:9c:db:1a:4b:29:8a:d2:eb:9b:e1:d8:54:
3b:b6:26:7e:81:73:54:3e:bb:3d:6b:be:d3:e7:03:ac:eb:a7:
2e:d5:43:e6:ce:32:3b:24:a8:d5:f5:6f:b1:ed:95:ef:ad:44:
01:36:6c:c7:28:4e:3e:2b:89:c3:f2:65:f1:23:b7:f7:f6:0a:
96:99:4c:dd:31:63:50:78:05:92:1b:ff:77:a6:74:e3:c4:8b:
28:59:44:66:7e:21:7f:65:1d:70:5a:7c:ab:ce:a1:1d:a1:db:
81:04:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:04 2025 by rpki-client