Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
File: VSrToLS3ToWvVPWK11owJrffcYE.cer (raw, json)
Hash identifier: XJCau5JASyCJMRIqVzLVCwZ0DOtXjJQs0jLA7CdAHMs=
Subject key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA99C39E1265362CFE5041A41DE5461C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15426
AS: 16131
AS: 39647
AS: 49713
AS: 56943
IP: 5.178.32.0/21
IP: 37.152.8.0/21
IP: 45.10.228.0/22
IP: 45.88.48.0/22
IP: 45.131.200.0/22
IP: 45.157.108.0/22
IP: 46.102.224.0/21
IP: 46.231.80.0/21
IP: 62.212.128.0/19
IP: 81.28.80.0/20
IP: 84.243.192.0/18
IP: 86.107.200.0/21
IP: 89.184.160.0/19
IP: 89.255.0.0/18
IP: 91.219.108.0/22
IP: 94.247.0.0/21
IP: 141.0.24.0/21
IP: 141.98.20.0/22
IP: 146.255.48.0/21
IP: 178.132.208.0/21
IP: 178.238.96.0/20
IP: 185.2.240.0/22
IP: 185.10.232.0/22
IP: 185.19.56.0/22
IP: 185.22.192.0/22
IP: 185.31.228.0/22
IP: 185.54.204.0/22
IP: 185.60.252.0/22
IP: 185.67.60.0/22
IP: 185.112.44.0/22
IP: 185.157.60.0/22
IP: 185.160.72.0/23
IP: 185.176.140.0/22
IP: 185.181.72.0/22
IP: 185.189.104.0/22
IP: 185.232.184.0/22
IP: 185.233.88.0/22
IP: 185.243.88.0/22
IP: 185.247.144.0/22
IP: 185.253.208.0/22
IP: 188.213.224.0/21
IP: 188.240.24.0/21
IP: 193.22.132.0/22
IP: 193.84.188.0/22
IP: 193.107.220.0/22
IP: 194.53.204.0/22
IP: 194.76.128.0/22
IP: 195.134.168.0/21
IP: 217.67.224.0/19
IP: 217.148.132.0/23
IP: 217.171.224.0/21
IP: 2001:1be8::/32
IP: 2a00:1950::/29
IP: 2a03:1a00::/32
IP: 2a07:a380::/29
IP: 2a0a:1880::/29
IP: 2a0a:c580::/29
IP: 2a0b:e280::/29
IP: 2a0c:bb00::/29
IP: 2a0c:bd00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:c3:9e:12:65:36:2c:fe:50:41:a4:1d:e5:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:c8:a5:44:69:9a:1e:60:ab:bb:4e:7f:73:
a7:b0:71:62:a3:ad:4f:36:d7:0b:7e:d9:58:55:36:
0f:66:ba:2a:94:db:3a:27:4d:ee:b8:45:ad:83:43:
94:44:21:71:7b:a2:87:8d:96:18:51:b8:f1:be:d3:
00:9b:ba:3f:f6:38:2e:ca:4b:02:3e:31:1c:aa:c2:
aa:7f:a0:bf:c9:9c:be:9d:1d:ce:e2:72:5f:6a:94:
12:d3:bf:46:4b:7b:b7:82:3f:60:22:31:23:63:68:
e8:a8:e9:31:2f:3a:1b:0b:b4:94:40:9c:bb:33:60:
b0:b8:a3:fa:6d:08:cd:c0:d4:79:37:bb:2b:3d:a5:
12:d2:4c:f3:2f:02:ec:1a:be:b6:be:95:99:e3:ad:
16:27:70:f5:d8:7e:fb:85:0d:2f:33:5c:c7:68:3a:
a9:b8:33:4d:50:fc:2e:31:6d:31:09:39:6f:cc:a4:
f4:f3:fd:01:7e:95:f4:7f:2e:c6:c0:70:d6:0c:5f:
65:41:2c:e4:a0:e2:78:37:5b:30:b2:ec:75:1f:5e:
18:eb:64:36:5f:a0:22:c1:fc:a9:10:cc:3d:de:6c:
27:87:06:f7:b4:73:e9:90:c0:2d:84:23:83:36:bd:
90:a4:65:e8:ea:9e:85:45:97:b1:6c:48:20:02:da:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.32.0/21
37.152.8.0/21
45.10.228.0/22
45.88.48.0/22
45.131.200.0/22
45.157.108.0/22
46.102.224.0/21
46.231.80.0/21
62.212.128.0/19
81.28.80.0/20
84.243.192.0/18
86.107.200.0/21
89.184.160.0/19
89.255.0.0/18
91.219.108.0/22
94.247.0.0/21
141.0.24.0/21
141.98.20.0/22
146.255.48.0/21
178.132.208.0/21
178.238.96.0/20
185.2.240.0/22
185.10.232.0/22
185.19.56.0/22
185.22.192.0/22
185.31.228.0/22
185.54.204.0/22
185.60.252.0/22
185.67.60.0/22
185.112.44.0/22
185.157.60.0/22
185.160.72.0/23
185.176.140.0/22
185.181.72.0/22
185.189.104.0/22
185.232.184.0/22
185.233.88.0/22
185.243.88.0/22
185.247.144.0/22
185.253.208.0/22
188.213.224.0/21
188.240.24.0/21
193.22.132.0/22
193.84.188.0/22
193.107.220.0/22
194.53.204.0/22
194.76.128.0/22
195.134.168.0/21
217.67.224.0/19
217.148.132.0/23
217.171.224.0/21
IPv6:
2001:1be8::/32
2a00:1950::/29
2a03:1a00::/32
2a07:a380::/29
2a0a:1880::/29
2a0a:c580::/29
2a0b:e280::/29
2a0c:bb00::/29
2a0c:bd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15426
16131
39647
49713
56943
Signature Algorithm: sha256WithRSAEncryption
80:1f:15:90:d2:8f:6e:aa:20:7c:f6:6b:78:0d:66:6a:03:77:
74:34:85:62:72:6a:e2:c2:f7:7a:37:94:1b:fe:71:d8:7e:5e:
e9:74:4b:b3:de:5f:16:15:c3:2b:e6:04:7c:67:51:fe:e1:ef:
a7:47:17:1d:3b:f8:6e:9f:74:cc:36:a7:7d:4f:da:b4:d4:fc:
fb:d3:01:8c:c8:5c:f8:01:4f:75:09:79:8c:4d:c6:f4:f9:5f:
93:f2:77:37:3d:ac:28:43:fc:00:17:82:87:42:bf:8b:81:36:
42:9b:54:88:27:06:6d:5f:eb:62:1a:80:c5:45:70:12:d0:6e:
57:01:73:53:6d:84:df:95:4c:bc:33:82:16:2e:5e:b7:01:d0:
71:d7:0f:4a:a0:ee:fe:57:64:00:39:11:6d:e1:b9:46:c0:e0:
8a:e0:08:7b:43:c9:8e:3b:f8:bb:84:e4:6e:4f:d0:d5:4d:75:
29:18:a1:49:05:4f:90:05:a1:24:ef:51:f6:5a:6f:bc:3b:46:
f0:3b:c1:7f:52:04:cf:9d:45:c3:c3:a9:0e:d8:88:2a:70:79:
60:42:ae:c8:4c:cc:12:f1:2d:a9:40:d5:c9:cf:8e:c2:9a:e0:
c6:33:9b:12:a3:2f:b7:35:db:ef:da:58:b8:6a:ac:3a:a7:57:
36:cd:44:bf
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgISAYzKmcOeEmU2LP5QQaQd5UYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTJhZDNhMGI0Yjc0ZTg1YWY1NGY1OGFkNzVhMzAyNmI3ZGY3MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHfIpURpmh5gq7tOf3OnsHFio61P
NtcLftlYVTYPZroqlNs6J03uuEWtg0OURCFxe6KHjZYYUbjxvtMAm7o/9jguyksC
PjEcqsKqf6C/yZy+nR3O4nJfapQS079GS3u3gj9gIjEjY2joqOkxLzobC7SUQJy7
M2CwuKP6bQjNwNR5N7srPaUS0kzzLwLsGr62vpWZ460WJ3D12H77hQ0vM1zHaDqp
uDNNUPwuMW0xCTlvzKT08/0BfpX0fy7GwHDWDF9lQSzkoOJ4N1swsux1H14Y62Q2
X6AiwfypEMw93mwnhwb3tHPpkMAthCODNr2QpGXo6p6FRZexbEggAtoz3wIDAQAB
o4IELzCCBCswHQYDVR0OBBYEFFUq06C0t06Fr1T1itdaMCa333GBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzE2ZmNm
MS02NDEyLTRkYjItYjNhZS00OWEzYzQ5ZjM5M2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMTZmY2Yx
LTY0MTItNGRiMi1iM2FlLTQ5YTNjNDlmMzkzYy8xL1ZTclRvTFMzVG9XdlZQV0sx
MW93SnJmZmNZRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBmgYIKwYB
BQUHAQcBAf8EggGJMIIBhTCCAToEAgABMIIBMgMEAwWyIAMEAyWYCAMEAi0K5AME
Ai1YMAMEAi2DyAMEAi2dbAMEAy5m4AMEAy7nUAMEBT7UgAMEBFEcUAMEBlTzwAME
A1ZryAMEBVm4oAMEBln/AAMEAlvbbAMEA173AAMEA40AGAMEAo1iFAMEA5L/MAME
A7KE0AMEBLLuYAMEArkC8AMEArkK6AMEArkTOAMEArkWwAMEArkf5AMEArk2zAME
Ark8/AMEArlDPAMEArlwLAMEArmdPAMEAbmgSAMEArmwjAMEArm1SAMEArm9aAME
ArnouAMEArnpWAMEArnzWAMEArn3kAMEArn90AMEA7zV4AMEA7zwGAMEAsEWhAME
AsFUvAMEAsFr3AMEAsI1zAMEAsJMgAMEA8OGqAMEBdlD4AMEAdmUhAMEA9mr4DBF
BAIAAjA/AwUAIAEb6AMFAyoAGVADBQAqAxoAAwUDKgejgAMFAyoKGIADBQMqCsWA
AwUDKgvigAMFAyoMuwADBQMqDL0AMCwGCCsGAQUFBwEIAQH/BB0wG6AZMBcCAjxC
AgI/AwIDAJrfAgMAwjECAwDebzANBgkqhkiG9w0BAQsFAAOCAQEAgB8VkNKPbqog
fPZreA1magN3dDSFYnJq4sL3ejeUG/5x2H5e6XRLs95fFhXDK+YEfGdR/uHvp0cX
HTv4bp90zDanfU/atNT8+9MBjMhc+AFPdQl5jE3G9Plfk/J3Nz2sKEP8ABeCh0K/
i4E2QptUiCcGbV/rYhqAxUVwEtBuVwFzU22E35VMvDOCFi5etwHQcdcPSqDu/ldk
ADkRbeG5RsDgiuAIe0PJjjv4u4Tkbk/Q1U11KRihSQVPkAWhJO9R9lpvvDtG8DvB
f1IEz51Fw8OpDtiIKnB5YEKuyEzMEvEtqUDVyc+OwprgxjObEqMvtzXb79pYuGqs
OqdXNs1Evw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:31:05 2024 by rpki-client on console-fra.rpki-client.org