Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
File: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer (raw, json)
Hash identifier: WIZPOgUXAYSPVcxd8oFY1E/eYQMEUHjNpXHuqqZtN8c=
Subject key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F7044EE65A26F43DCCDD28BBDD4F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12990
AS: 30876
IP: 37.26.160.0/21
IP: 91.206.172.0/23
IP: 141.105.16.0/21
IP: 178.239.128.0/20
IP: 185.16.128.0/22
IP: 185.104.64.0/22
IP: 195.88.186.0/23
IP: 195.93.178.0/23
IP: 195.177.210.0/23
IP: 213.180.128.0/19
IP: 2a01:9440::/32
IP: 2a02:c10::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:70:44:ee:65:a2:6f:43:dc:cd:d2:8b:bd:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:6f:a4:64:89:99:e2:18:0e:86:78:71:b8:
28:1a:5c:e2:0e:47:4e:dd:32:19:25:9b:ad:25:b5:
28:35:1e:00:ca:90:70:e0:39:8f:32:22:d0:18:5f:
53:75:b2:a4:c2:26:03:00:0a:49:93:4c:d9:46:e1:
96:34:49:8b:b6:e0:0c:c4:e2:1c:b5:95:17:49:32:
15:a4:bf:dd:d3:92:b2:9d:e7:5c:2d:60:e9:47:99:
ca:24:84:48:42:c8:22:a0:91:e1:f3:22:93:2e:32:
42:1e:09:48:8d:29:59:cb:e3:38:3b:aa:53:d5:de:
fc:cb:fc:4c:f5:bc:1d:b9:59:9b:52:25:60:3e:62:
eb:a2:b2:71:e9:39:37:77:bd:71:5e:41:56:c7:b8:
6b:71:b0:d6:db:0c:d8:99:cc:79:69:5b:8e:77:50:
ac:85:44:c8:3d:be:f6:c8:5e:9e:cd:b4:56:64:95:
36:b9:87:65:6c:de:58:7f:4f:f8:0c:53:bc:8d:fc:
4a:d0:db:2a:0b:c7:ab:e4:27:df:bd:78:77:90:59:
1d:25:3d:af:36:0e:dd:eb:ed:7f:2f:1a:80:1b:42:
c7:6f:7c:48:00:7b:70:69:6e:45:4c:6f:b7:86:40:
91:e7:d0:3b:6a:8b:75:3c:8b:82:c7:f4:9f:88:4e:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.160.0/21
91.206.172.0/23
141.105.16.0/21
178.239.128.0/20
185.16.128.0/22
185.104.64.0/22
195.88.186.0/23
195.93.178.0/23
195.177.210.0/23
213.180.128.0/19
IPv6:
2a01:9440::/32
2a02:c10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12990
30876
Signature Algorithm: sha256WithRSAEncryption
80:b1:df:2a:a8:c0:84:3e:d2:0a:e9:8f:b9:74:77:47:e8:84:
04:8f:22:66:a3:bf:99:e7:4a:af:06:d3:cb:52:e8:8d:9a:54:
94:68:06:2c:c8:88:06:81:66:8d:a6:00:a5:fb:96:8c:84:33:
f4:2e:17:ac:40:20:90:74:cf:3e:5e:f2:c8:b8:db:f8:74:23:
1c:4b:60:5a:1f:1f:e9:0a:1d:d0:8e:ea:94:fd:c0:16:ce:10:
00:7c:40:ec:90:e8:34:e6:66:67:b8:3b:05:22:5f:05:44:02:
2f:c1:3f:76:ea:70:5a:99:dc:b3:de:98:37:69:c1:6f:7d:b3:
75:03:b5:6f:2d:4b:a8:61:0e:23:ed:4d:63:7b:53:b1:d4:70:
4b:2b:99:98:53:0a:d6:21:fb:67:af:bc:a7:6d:8d:a6:d8:1a:
57:71:51:ee:16:30:88:79:fd:67:f0:a9:2c:2a:f6:78:f1:9b:
89:fe:5d:7b:b7:00:7c:57:ae:2c:91:cc:11:c3:a7:c3:01:cd:
6a:9f:c3:de:8b:c1:c5:db:48:1c:1f:8c:e1:4d:ee:70:13:e7:
2c:9b:dc:9d:de:66:dc:db:c9:8a:28:a1:25:03:2a:4d:39:e6:
81:90:4c:72:84:11:98:b5:10:36:46:7e:28:5c:57:0d:38:24:
d8:2d:db:f5
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAZQlj3BE7mWib0PczdKLvdTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjA1Njg2N2U0ZDI4ODVlOTliNTQ5ZWQ2ZmI3ODYzMzBhZGY4ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5edvpGSJmeIYDoZ4cbgoGlziDkdO
3TIZJZutJbUoNR4AypBw4DmPMiLQGF9TdbKkwiYDAApJk0zZRuGWNEmLtuAMxOIc
tZUXSTIVpL/d05KynedcLWDpR5nKJIRIQsgioJHh8yKTLjJCHglIjSlZy+M4O6pT
1d78y/xM9bwduVmbUiVgPmLrorJx6Tk3d71xXkFWx7hrcbDW2wzYmcx5aVuOd1Cs
hUTIPb72yF6ezbRWZJU2uYdlbN5Yf0/4DFO8jfxK0NsqC8er5CffvXh3kFkdJT2v
Ng7d6+1/LxqAG0LHb3xIAHtwaW5FTG+3hkCR59A7aot1PIuCx/SfiE76QQIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFFIFaGfk0ohembVJ7W+3hjMK349EMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2IyN2Q0
NS0wOGNjLTQ3YTEtYWM1YS01ZjQ4MzYwODNhMzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvYjI3ZDQ1
LTA4Y2MtNDdhMS1hYzVhLTVmNDgzNjA4M2EzMC8xL1VnVm9aLVRTaUY2WnRVbnRi
N2VHTXdyZmowUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF
BwEHAQH/BFwwWjBCBAIAATA8AwQDJRqgAwQBW86sAwQDjWkQAwQEsu+AAwQCuRCA
AwQCuWhAAwQBw1i6AwQBw12yAwQBw7HSAwQF1bSAMBQEAgACMA4DBQAqAZRAAwUA
KgIMEDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIyvgICeJwwDQYJKoZIhvcNAQEL
BQADggEBAICx3yqowIQ+0grpj7l0d0fohASPImajv5nnSq8G08tS6I2aVJRoBizI
iAaBZo2mAKX7loyEM/QuF6xAIJB0zz5e8si42/h0IxxLYFofH+kKHdCO6pT9wBbO
EAB8QOyQ6DTmZme4OwUiXwVEAi/BP3bqcFqZ3LPemDdpwW99s3UDtW8tS6hhDiPt
TWN7U7HUcEsrmZhTCtYh+2evvKdtjabYGldxUe4WMIh5/WfwqSwq9njxm4n+XXu3
AHxXriyRzBHDp8MBzWqfw96LwcXbSBwfjOFN7nAT5yyb3J3eZtzbyYoooSUDKk05
5oGQTHKEEZi1EDZGfihcVw04JNgt2/U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:26 2025 by rpki-client