Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer (raw, json)
Hash identifier: lR1V6WqcAdLbmpj7st2kU91T1byUY86UUqFQBP5q67I=
Subject key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F99C02DD2C9D6AC44C85B0FBA59707D83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 May 2024 06:04:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200615
AS: 204035
AS: 208204
IP: 37.228.132.0/24
IP: 37.228.134.0/24
IP: 37.228.148.0/22
IP: 146.19.118.0/24
IP: 185.101.92.0/22
IP: 185.107.192.0/22
IP: 185.116.156.0/22
IP: 185.245.168.0/22
IP: 193.46.24.0/22
IP: 193.56.126.0/24
IP: 193.56.129.0/24
IP: 193.56.156.0/24
IP: 193.56.173.0/24
IP: 194.125.248.0/22
IP: 2a06:1c40::/29
IP: 2a06:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:c0:2d:d2:c9:d6:ac:44:c8:5b:0f:ba:59:70:7d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 06:04:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:0a:f4:83:35:d4:09:9f:a4:8d:aa:9a:aa:
36:0a:23:7d:ad:89:1e:8a:74:90:1e:29:b3:06:88:
d6:3f:ab:58:3f:f1:36:40:cf:af:46:60:47:43:73:
35:bd:8b:fa:1b:28:ed:31:f7:94:6f:3c:94:b1:10:
55:ca:e4:a3:06:a6:35:2e:f4:6e:c7:d9:5d:14:28:
ab:93:c4:0e:cc:95:f4:40:8e:47:b1:4e:74:38:e3:
db:43:e1:10:78:90:d3:b0:34:f2:ff:56:90:30:e1:
29:ae:ff:34:9f:83:ad:6b:76:76:f3:0f:b6:8d:9d:
81:46:a2:05:cf:61:fc:79:02:41:e4:00:3f:6f:3b:
6b:d3:36:d0:62:ce:27:3a:db:2a:b2:ac:d3:88:fa:
91:94:b0:3b:6b:4c:06:34:e2:48:22:cb:a3:94:54:
f5:d3:0a:ee:d1:39:8f:00:b7:24:fb:92:2e:35:10:
e2:98:f3:8e:eb:ee:52:a7:2f:6d:b2:5a:d6:c6:af:
f1:d4:c7:d8:bb:b0:68:0d:f7:3e:8a:cb:01:c2:1a:
62:48:2e:e2:09:86:c9:b8:d3:05:ec:2c:bd:98:db:
1b:3a:4a:0f:f3:3d:cd:dc:c9:e7:d8:5c:5b:0e:41:
5b:ae:a8:7c:01:b7:32:28:17:eb:56:52:dd:86:28:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
146.19.118.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200615
204035
208204
Signature Algorithm: sha256WithRSAEncryption
70:bd:15:a4:4e:09:ca:29:43:e3:56:37:82:81:a3:2d:7c:48:
f0:90:e3:a7:0f:dc:ef:8f:53:0a:28:e4:fd:0e:7d:f6:f0:5f:
6b:23:96:34:7a:2c:5c:fd:86:42:25:d0:99:e0:1a:40:26:0b:
ed:8a:c3:6e:e2:c7:02:1d:e7:06:07:e0:97:ae:5e:7d:03:19:
3b:dc:58:46:87:9b:f4:c0:66:b6:4c:38:c9:9b:9f:75:f2:69:
d5:fc:36:89:be:da:a4:ed:8e:43:2d:a8:7b:96:34:4b:b2:90:
bf:77:0b:36:91:dc:e1:a4:1c:9d:f4:65:74:c4:ba:0a:4d:bc:
44:85:51:b9:e6:d6:9a:d1:f9:b0:f3:41:4d:38:ac:82:b8:a1:
0d:80:f4:a3:9d:47:5e:b9:77:93:09:1f:2d:e7:1d:34:ba:3c:
86:48:d8:7d:4d:93:f5:d6:c2:71:e8:33:e2:2d:49:39:3b:fc:
95:1e:ae:4d:6a:5e:35:03:57:32:81:22:5b:48:4c:95:6b:f2:
53:33:a3:fb:06:a4:17:b8:a1:f7:f7:a2:e1:5f:27:c5:0a:f8:
fa:2f:bf:a8:ae:9c:4e:73:12:a7:ff:a8:e9:28:02:df:e9:67:
e1:cb:ef:fc:4b:fd:bf:f9:ee:ae:ea:d7:18:2c:d8:ec:8c:bb:
44:79:7b:18
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAY+ZwC3SydasRMhbD7pZcH2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTIxMDYwNDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQxODE5NmIyOWY2MGU4NWQ4NzEyZGU0MDM5YTUzMWNmYzFhYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn0K9IM11AmfpI2qmqo2CiN9rYke
inSQHimzBojWP6tYP/E2QM+vRmBHQ3M1vYv6GyjtMfeUbzyUsRBVyuSjBqY1LvRu
x9ldFCirk8QOzJX0QI5HsU50OOPbQ+EQeJDTsDTy/1aQMOEprv80n4Ota3Z28w+2
jZ2BRqIFz2H8eQJB5AA/bztr0zbQYs4nOtsqsqzTiPqRlLA7a0wGNOJIIsujlFT1
0wru0TmPALck+5IuNRDimPOO6+5Spy9tslrWxq/x1MfYu7BoDfc+issBwhpiSC7i
CYbJuNMF7Cy9mNsbOkoP8z3N3Mnn2FxbDkFbrqh8AbcyKBfrVlLdhiiyLwIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFFDRgZayn2DoXYcS3kA5pTHPwasxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2NiZWNm
NC1iY2VkLTRkODMtYmZjYS1iNGExODFjZDQwZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvY2JlY2Y0
LWJjZWQtNGQ4My1iZmNhLWI0YTE4MWNkNDBmNi8xL1VOR0JscktmWU9oZGh4TGVR
RG1sTWNfQnF6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF
BQcBBwEB/wR0MHIwWgQCAAEwVAMEACXkhAMEACXkhgMEAiXklAMEAJITdgMEArll
XAMEArlrwAMEArl0nAMEArn1qAMEAsEuGAMEAME4fgMEAME4gQMEAME4nAMEAME4
rQMEAsJ9+DAUBAIAAjAOAwUDKgYcQAMFAyoGf4AwJAYIKwYBBQUHAQgBAf8EFTAT
oBEwDwIDAw+nAgMDHQMCAwMtTDANBgkqhkiG9w0BAQsFAAOCAQEAcL0VpE4JyilD
41Y3goGjLXxI8JDjpw/c749TCijk/Q599vBfayOWNHosXP2GQiXQmeAaQCYL7YrD
buLHAh3nBgfgl65efQMZO9xYRoeb9MBmtkw4yZufdfJp1fw2ib7apO2OQy2oe5Y0
S7KQv3cLNpHc4aQcnfRldMS6Ck28RIVRuebWmtH5sPNBTTisgrihDYD0o51HXrl3
kwkfLecdNLo8hkjYfU2T9dbCcegz4i1JOTv8lR6uTWpeNQNXMoEiW0hMlWvyUzOj
+wakF7ih9/ei4V8nxQr4+i+/qK6cTnMSp/+o6SgC3+ln4cvv/Ev9v/nururXGCzY
7Iy7RHl7GA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:50:57 2024 by rpki-client on console-ams.rpki-client.org