Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
File: VSrToLS3ToWvVPWK11owJrffcYE.cer (raw, json)
Hash identifier: d9rgloeNSjiYyiX7LkEZDOj5bYETeLl5SME2PmDRmAA=
Subject key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5314E7F22E5132C63DFC0724EE42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15426
AS: 16131
AS: 39647
AS: 49713
AS: 56943
IP: 5.178.32.0/21
IP: 37.152.8.0/21
IP: 45.10.228.0/22
IP: 45.88.48.0/22
IP: 45.131.200.0/22
IP: 45.157.108.0/22
IP: 46.102.224.0/21
IP: 46.231.80.0/21
IP: 62.212.128.0/19
IP: 81.28.80.0/20
IP: 84.243.192.0/18
IP: 86.107.200.0/21
IP: 89.184.160.0/19
IP: 89.255.0.0/18
IP: 91.219.108.0/22
IP: 94.247.0.0/21
IP: 141.0.24.0/21
IP: 141.98.20.0/22
IP: 146.255.48.0/21
IP: 178.132.208.0/21
IP: 178.238.96.0/20
IP: 185.2.240.0/22
IP: 185.10.232.0/22
IP: 185.19.56.0/22
IP: 185.22.192.0/22
IP: 185.31.228.0/22
IP: 185.54.204.0/22
IP: 185.60.252.0/22
IP: 185.67.60.0/22
IP: 185.112.44.0/22
IP: 185.157.60.0/22
IP: 185.160.72.0/23
IP: 185.176.140.0/22
IP: 185.181.72.0/22
IP: 185.189.104.0/22
IP: 185.232.184.0/22
IP: 185.233.88.0/22
IP: 185.243.88.0/22
IP: 185.247.144.0/22
IP: 185.253.208.0/22
IP: 188.213.224.0/21
IP: 188.240.24.0/21
IP: 193.22.132.0/22
IP: 193.84.188.0/22
IP: 193.107.220.0/22
IP: 194.53.204.0/22
IP: 194.76.128.0/22
IP: 195.134.168.0/21
IP: 217.67.224.0/19
IP: 217.148.132.0/23
IP: 217.171.224.0/21
IP: 2001:1be8::/32
IP: 2a00:1950::/29
IP: 2a03:1a00::/32
IP: 2a07:a380::/29
IP: 2a0a:1880::/29
IP: 2a0a:c580::/29
IP: 2a0b:e280::/29
IP: 2a0c:bb00::/29
IP: 2a0c:bd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:53:14:e7:f2:2e:51:32:c6:3d:fc:07:24:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:c8:a5:44:69:9a:1e:60:ab:bb:4e:7f:73:
a7:b0:71:62:a3:ad:4f:36:d7:0b:7e:d9:58:55:36:
0f:66:ba:2a:94:db:3a:27:4d:ee:b8:45:ad:83:43:
94:44:21:71:7b:a2:87:8d:96:18:51:b8:f1:be:d3:
00:9b:ba:3f:f6:38:2e:ca:4b:02:3e:31:1c:aa:c2:
aa:7f:a0:bf:c9:9c:be:9d:1d:ce:e2:72:5f:6a:94:
12:d3:bf:46:4b:7b:b7:82:3f:60:22:31:23:63:68:
e8:a8:e9:31:2f:3a:1b:0b:b4:94:40:9c:bb:33:60:
b0:b8:a3:fa:6d:08:cd:c0:d4:79:37:bb:2b:3d:a5:
12:d2:4c:f3:2f:02:ec:1a:be:b6:be:95:99:e3:ad:
16:27:70:f5:d8:7e:fb:85:0d:2f:33:5c:c7:68:3a:
a9:b8:33:4d:50:fc:2e:31:6d:31:09:39:6f:cc:a4:
f4:f3:fd:01:7e:95:f4:7f:2e:c6:c0:70:d6:0c:5f:
65:41:2c:e4:a0:e2:78:37:5b:30:b2:ec:75:1f:5e:
18:eb:64:36:5f:a0:22:c1:fc:a9:10:cc:3d:de:6c:
27:87:06:f7:b4:73:e9:90:c0:2d:84:23:83:36:bd:
90:a4:65:e8:ea:9e:85:45:97:b1:6c:48:20:02:da:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.32.0/21
37.152.8.0/21
45.10.228.0/22
45.88.48.0/22
45.131.200.0/22
45.157.108.0/22
46.102.224.0/21
46.231.80.0/21
62.212.128.0/19
81.28.80.0/20
84.243.192.0/18
86.107.200.0/21
89.184.160.0/19
89.255.0.0/18
91.219.108.0/22
94.247.0.0/21
141.0.24.0/21
141.98.20.0/22
146.255.48.0/21
178.132.208.0/21
178.238.96.0/20
185.2.240.0/22
185.10.232.0/22
185.19.56.0/22
185.22.192.0/22
185.31.228.0/22
185.54.204.0/22
185.60.252.0/22
185.67.60.0/22
185.112.44.0/22
185.157.60.0/22
185.160.72.0/23
185.176.140.0/22
185.181.72.0/22
185.189.104.0/22
185.232.184.0/22
185.233.88.0/22
185.243.88.0/22
185.247.144.0/22
185.253.208.0/22
188.213.224.0/21
188.240.24.0/21
193.22.132.0/22
193.84.188.0/22
193.107.220.0/22
194.53.204.0/22
194.76.128.0/22
195.134.168.0/21
217.67.224.0/19
217.148.132.0/23
217.171.224.0/21
IPv6:
2001:1be8::/32
2a00:1950::/29
2a03:1a00::/32
2a07:a380::/29
2a0a:1880::/29
2a0a:c580::/29
2a0b:e280::/29
2a0c:bb00::/29
2a0c:bd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15426
16131
39647
49713
56943
Signature Algorithm: sha256WithRSAEncryption
3d:f8:3a:2e:89:c2:dd:54:f4:79:0f:67:68:fa:ac:2c:17:9f:
28:f7:7a:65:a2:e8:93:da:b7:de:0f:af:bf:70:96:00:61:13:
8c:83:ea:a4:ee:5f:6e:02:42:62:6a:92:cb:c6:4c:d1:99:3f:
9c:24:2f:ba:9d:17:55:9d:8d:16:8a:48:5c:0e:fc:b3:a0:5b:
53:41:ac:11:e8:c6:c1:a1:c9:34:06:08:74:0a:e9:94:84:44:
9a:bc:d5:24:52:d3:8a:f5:c0:39:e6:34:c9:2c:70:c8:aa:5e:
cd:e6:5b:5c:98:25:67:e7:9a:53:fd:77:f1:ff:90:6e:6f:72:
22:b6:97:42:a1:b3:1c:1e:50:3f:8a:f0:1a:d9:1e:83:e1:a9:
ee:75:bb:78:b2:97:69:05:17:42:ec:4a:51:f4:8c:82:7e:05:
b8:fd:5b:71:64:3e:1e:fc:a6:a9:17:c7:ae:95:14:26:dc:7d:
60:fc:76:08:ad:ff:bf:71:21:03:17:1e:a2:86:7f:57:f4:55:
21:76:22:82:d0:6f:d3:86:d7:a4:b1:80:a8:44:67:60:84:1a:
16:54:ee:24:8d:cc:8a:e9:86:d7:d9:c3:8b:ff:3d:98:f9:b3:
91:e7:df:ee:65:81:a6:a8:24:da:ad:df:b0:7b:ce:28:fd:38:
19:21:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:32:36 2025 by rpki-client