Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer (raw, json)
Hash identifier: AOcuLahTIs8AkCTWNcKbubTbUbLzYTvubDTLuO1U/Is=
Subject key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D61E7D9B980153059BD469309CC259
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31708
IP: 31.193.168.0/21
IP: 62.197.40.0/23
IP: 62.197.44.0/24
IP: 62.197.50.0/23
IP: 83.142.24.0/22
IP: 83.142.29.0/24
IP: 85.13.192.0/18
IP: 89.187.64.0/22
IP: 89.187.70.0 -- 89.187.72.255
IP: 89.187.74.0 -- 89.187.76.255
IP: 89.187.78.0 -- 89.187.92.255
IP: 89.187.94.0/23
IP: 109.70.136.0/21
IP: 193.26.222.0/24
IP: 2a01:c0::/32
IP: 2a06:1bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1e:7d:9b:98:01:53:05:9b:d4:69:30:9c:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:ab:f6:a9:b0:d1:e0:65:05:e9:95:a6:2e:
4b:59:d4:40:a8:69:7e:ec:bc:e9:57:f0:6a:02:8d:
e1:34:3e:da:4e:5f:e6:9b:71:e8:b6:94:6b:fb:e9:
ad:e3:c1:a7:cd:47:a6:cc:b1:32:a5:8f:c5:86:3b:
80:36:0b:81:4c:5a:d1:a3:5f:c0:c2:84:d6:44:3c:
31:75:93:e7:44:c7:0b:05:93:a1:f2:9d:a6:ae:cd:
67:46:d9:f3:26:03:24:0a:b5:26:2e:a5:71:9a:f8:
21:b3:f7:ba:51:6d:3b:35:02:a2:1d:b6:38:7f:91:
ba:d9:d5:15:d2:9c:8f:0e:a4:57:d3:c9:b7:64:8b:
ae:7b:8e:4d:2a:24:66:61:ab:f4:38:89:fb:ae:9e:
28:4c:c5:df:76:fb:cb:91:a1:61:b4:16:7b:52:ae:
7f:0a:ff:c7:44:87:9c:1f:75:12:74:b6:ce:ad:5a:
ea:69:99:b7:c5:46:93:d8:bb:21:08:1f:e6:a8:61:
ab:66:6e:5e:a7:94:a2:e5:80:15:e5:cd:74:0c:18:
60:4d:b8:d3:1d:29:6c:97:f4:e5:e4:b4:fd:3e:45:
6f:c0:f4:a1:17:7d:1a:b9:7a:db:e7:17:53:1c:c0:
4b:b5:79:6c:48:f1:61:87:df:e9:5d:34:00:28:82:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.168.0/21
62.197.40.0/23
62.197.44.0/24
62.197.50.0/23
83.142.24.0/22
83.142.29.0/24
85.13.192.0/18
89.187.64.0/22
89.187.70.0-89.187.72.255
89.187.74.0-89.187.76.255
89.187.78.0-89.187.92.255
89.187.94.0/23
109.70.136.0/21
193.26.222.0/24
IPv6:
2a01:c0::/32
2a06:1bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31708
Signature Algorithm: sha256WithRSAEncryption
75:51:f5:8e:2d:1e:e4:7c:26:3a:cb:2b:dd:2f:59:08:0f:ce:
20:c5:00:ce:93:ee:0b:bd:b5:05:62:39:1a:9a:0e:2a:28:40:
7c:ef:c4:16:48:88:08:d3:f4:39:84:a0:a4:0c:3a:98:8c:7d:
04:cb:82:ce:10:3c:cd:97:79:c4:30:f2:e8:77:54:16:1c:4d:
13:f1:38:8e:7c:93:ea:2c:e0:3a:eb:bb:28:69:a0:65:3e:b3:
9a:46:06:2a:ed:33:ca:11:48:5c:0f:29:18:f8:cd:98:d8:8e:
99:e4:18:91:40:0c:d5:c9:68:5e:9d:d5:b8:2a:a2:a3:55:7f:
59:13:17:60:f4:a3:96:f0:09:f1:4a:aa:f4:25:f9:4d:01:34:
ca:0d:c0:43:5c:0c:08:d1:5c:9c:48:74:e4:2e:5a:95:17:dc:
8f:3f:c7:7c:74:f1:c0:45:e7:51:15:b1:ea:83:08:65:b8:c9:
48:7b:60:79:ee:1c:6f:ce:8c:40:57:df:86:fc:d7:e4:d3:b0:
82:b3:ef:ea:1c:c5:7f:f0:47:12:32:cf:6a:1b:de:f1:43:de:
05:7c:e8:f4:25:4e:0c:f0:b1:b0:6d:c7:2c:e9:af:07:80:88:
a2:3a:a0:2c:67:7c:1b:c3:66:9b:d1:a5:8e:b4:36:58:01:37:
89:a8:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:47:47 2025 by rpki-client