Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json)
Hash identifier: CImx5Z0S/yqNYm2NwO/YP5+y9VKUJzh/rG5O8tcjA+Q=
Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194645293F7D22C619A9AABA4C088F43A90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Jan 2025 10:18:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6206
AS: 62349
IP: 31.171.128.0/21
IP: 37.46.192.0/21
IP: 45.154.4.0/22
IP: 91.199.50.0/24
IP: 91.230.225.0/24
IP: 94.185.80.0/21
IP: 94.228.208.0/20
IP: 109.235.48.0/21
IP: 185.153.188.0/22
IP: 185.196.92.0/22
IP: 194.110.67.0/24
IP: 195.191.144.0/23
IP: 2a00:dd0::/32
IP: 2a07:6580::/29
IP: 2a07:8840::/29
IP: 2a0a:6b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:52:93:f7:d2:2c:61:9a:9a:ab:a4:c0:88:f4:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 14 10:18:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a:
59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36:
22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0:
93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a:
67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43:
8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d:
8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8:
e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68:
38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2:
e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40:
cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a:
64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4:
53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84:
40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46:
a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7:
79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f:
b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.128.0/21
37.46.192.0/21
45.154.4.0/22
91.199.50.0/24
91.230.225.0/24
94.185.80.0/21
94.228.208.0/20
109.235.48.0/21
185.153.188.0/22
185.196.92.0/22
194.110.67.0/24
195.191.144.0/23
IPv6:
2a00:dd0::/32
2a07:6580::/29
2a07:8840::/29
2a0a:6b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6206
62349
Signature Algorithm: sha256WithRSAEncryption
30:df:66:79:4f:a1:ba:84:ce:c7:0e:d8:60:4c:e2:19:0d:d6:
dd:66:8b:42:f8:13:3e:3c:fe:0a:a0:ef:10:46:9d:07:9b:84:
6e:9c:5e:db:67:d0:c1:2a:47:75:d8:8f:ac:ec:ea:0f:83:66:
37:25:68:8e:39:94:74:bb:f2:9e:c5:59:9b:5f:31:22:76:f4:
b9:a9:ec:af:bb:4f:51:2a:39:14:b8:5d:70:0f:81:80:85:ca:
9f:0b:e8:2c:62:95:f8:7a:a8:3a:f7:6f:9f:d0:a6:e6:ff:7b:
70:e4:93:d5:04:0c:20:02:5b:06:2c:78:ec:88:75:18:0c:82:
89:87:9e:89:c7:24:de:3a:24:05:69:1e:12:df:ac:0f:88:97:
35:8e:f9:68:ab:d8:af:ba:1b:36:1c:94:05:79:75:05:8f:bb:
e3:30:ce:73:92:56:22:a6:0e:16:c1:f2:bf:26:d2:2c:87:8a:
bc:83:1f:86:ba:40:b8:76:9a:8d:06:44:04:cd:2b:16:ef:c5:
f1:cb:b1:00:b3:16:59:37:52:c4:64:5d:5c:c9:f6:0a:0c:3a:
69:10:00:d3:9f:7d:5c:18:50:2d:1c:39:49:88:d5:d9:98:46:
34:85:6b:b7:34:62:f8:31:b8:27:0f:e7:61:39:88:3d:9f:14:
28:78:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:50 2025 by rpki-client