Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VvgiFPVDedezThoQPWWKEx5wGBs.cer
File: VvgiFPVDedezThoQPWWKEx5wGBs.cer (raw, json)
Hash identifier: BnjhVnFCrjAEYbNMcgbSfxWLoG8oiZ2iFE1gMZPXN9I=
Subject key identifier: 56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FC5608C07D8514D45BAC41147B6E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50367
IP: 109.233.208.0/21
IP: 149.255.0.0/20
IP: 2a0d:f6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c5:60:8c:07:d8:51:4d:45:ba:c4:11:47:b6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f82214f54379d7b34e1a103d658a131e70181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:d4:2a:dc:1f:35:29:c9:f9:f0:09:30:cd:
7e:7e:94:b5:65:82:23:d0:70:27:77:8b:3e:48:31:
45:56:89:d6:12:97:fa:ea:dc:fc:6f:20:42:95:e6:
72:0b:8c:9b:60:93:b0:2f:c2:d6:ae:99:c0:0a:da:
68:81:1b:f9:51:92:e0:95:d9:a5:3a:03:d1:8e:14:
09:07:74:40:3a:d8:2e:62:2d:78:71:1a:34:4b:05:
7f:7c:ab:bf:19:7a:61:9d:8a:2b:92:59:bd:3c:ca:
a8:f6:b9:09:ec:a2:6f:94:ea:62:3f:13:45:e4:e4:
d7:33:3c:37:35:bd:b0:82:47:83:a7:f3:0f:ab:98:
df:64:65:bd:96:27:df:cc:3d:03:41:5d:81:77:d2:
e1:cf:94:a7:9a:2f:78:ef:f1:6d:bc:61:44:8d:69:
49:12:e5:c5:bd:8d:64:26:a6:fe:5d:97:08:8f:18:
d3:90:fc:3f:50:e8:cd:2a:8f:20:d3:7a:e9:5a:3d:
f9:17:a7:74:ec:c4:c8:d1:8d:8a:07:89:fd:c3:64:
9c:81:42:7f:bb:54:da:95:a9:46:3f:90:57:0d:80:
59:66:2e:27:84:ce:d0:f5:bb:29:e1:b9:b4:c2:bc:
ea:9f:eb:5e:b8:21:23:e9:5d:af:1d:f1:18:d9:46:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:22:14:F5:43:79:D7:B3:4E:1A:10:3D:65:8A:13:1E:70:18:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7bb68-1a91-400c-b5a9-e5809ebe2d4b/1/VvgiFPVDedezThoQPWWKEx5wGBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.208.0/21
149.255.0.0/20
IPv6:
2a0d:f6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50367
Signature Algorithm: sha256WithRSAEncryption
48:73:93:5c:af:e3:17:1e:20:63:94:94:f3:8c:22:60:61:03:
2b:8d:e7:50:0a:7b:2c:05:09:cb:40:19:08:df:dc:bf:eb:c5:
29:23:66:71:db:f7:75:d4:7d:6f:e8:a5:1b:5b:6f:4d:31:83:
8b:bc:2d:48:1e:1c:6b:16:b1:6a:c0:c2:4e:c6:d7:c1:4d:a5:
53:f3:2f:84:97:83:b5:d1:39:a5:a6:f7:5c:39:b4:44:2d:80:
e6:b9:ff:34:c8:8f:4d:4d:fc:36:43:1f:ab:fa:fe:2a:92:b1:
93:d4:c3:af:30:bf:18:ae:eb:13:af:42:bd:18:c4:53:9e:53:
1f:1f:46:44:bc:a0:45:ca:c6:3b:ea:18:1a:53:cf:9c:d7:0b:
08:0c:c9:c3:fa:42:e8:4f:37:18:2b:97:ac:ab:e7:36:f5:8c:
48:80:43:b0:9c:a7:34:c1:a8:5e:e1:75:3e:92:51:4a:d7:14:
fd:12:b0:7e:b1:65:e6:0b:41:37:c4:bc:53:c8:a7:c8:e7:72:
8d:5d:6f:ff:64:cd:5d:62:66:6a:b5:85:e6:c4:76:63:62:56:
74:0e:19:17:fc:b5:71:db:67:a8:f2:8d:f8:99:d5:1e:c8:d3:
03:c3:a9:35:ee:25:e8:66:c5:05:f9:4d:a8:d6:33:49:98:fc:
6d:b0:e6:64
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQlj8VgjAfYUU1FusQRR7biMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmY4MjIxNGY1NDM3OWQ3YjM0ZTFhMTAzZDY1OGExMzFlNzAxODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22/UKtwfNSnJ+fAJMM1+fpS1ZYIj
0HAnd4s+SDFFVonWEpf66tz8byBCleZyC4ybYJOwL8LWrpnACtpogRv5UZLgldml
OgPRjhQJB3RAOtguYi14cRo0SwV/fKu/GXphnYorklm9PMqo9rkJ7KJvlOpiPxNF
5OTXMzw3Nb2wgkeDp/MPq5jfZGW9liffzD0DQV2Bd9Lhz5Snmi947/FtvGFEjWlJ
EuXFvY1kJqb+XZcIjxjTkPw/UOjNKo8g03rpWj35F6d07MTI0Y2KB4n9w2ScgUJ/
u1TalalGP5BXDYBZZi4nhM7Q9bsp4bm0wrzqn+teuCEj6V2vHfEY2UbnDQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFFb4IhT1Q3nXs04aED1lihMecBgbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2I3YmI2
OC0xYTkxLTQwMGMtYjVhOS1lNTgwOWViZTJkNGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvYjdiYjY4
LTFhOTEtNDAwYy1iNWE5LWU1ODA5ZWJlMmQ0Yi8xL1Z2Z2lGUFZEZWRlelRob1FQ
V1dLRXg1d0dCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDbenQAwQElf8AMA0EAgACMAcDBQMqDfbAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEvzANBgkqhkiG9w0BAQsFAAOCAQEASHOT
XK/jFx4gY5SU84wiYGEDK43nUAp7LAUJy0AZCN/cv+vFKSNmcdv3ddR9b+ilG1tv
TTGDi7wtSB4caxaxasDCTsbXwU2lU/MvhJeDtdE5pab3XDm0RC2A5rn/NMiPTU38
NkMfq/r+KpKxk9TDrzC/GK7rE69CvRjEU55THx9GRLygRcrGO+oYGlPPnNcLCAzJ
w/pC6E83GCuXrKvnNvWMSIBDsJynNMGoXuF1PpJRStcU/RKwfrFl5gtBN8S8U8in
yOdyjV1v/2TNXWJmarWF5sR2Y2JWdA4ZF/y1cdtnqPKN+JnVHsjTA8OpNe4l6GbF
BflNqNYzSZj8bbDmZA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:30 2025 by rpki-client