Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
File: Vz035lyCKPeT9IuOmiDxLC-AuIM.cer (raw, json)
Hash identifier: sSVzgPrQAhs6q8IGJcRndKizdcWavoSaY2xaZVSD7Eg=
Subject key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB3BA6650542F8A6DF04CDF89EEEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212453
IP: 80.249.133.0/24
IP: 185.192.122.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b3:ba:66:50:54:2f:8a:6d:f0:4c:df:89:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:66:d3:9e:ed:5d:d6:34:49:4f:80:c4:07:
ef:d6:33:ac:c3:28:cf:cf:cd:98:1e:5c:2f:8e:a0:
60:cf:d3:20:5c:c9:a0:ac:a3:8d:08:6b:cc:a7:f8:
3c:db:d5:ef:4c:f1:48:2e:c3:80:87:d1:6a:9b:34:
36:39:1a:8a:de:ab:44:73:02:d6:29:92:1d:e0:62:
aa:c2:0b:df:c6:76:41:34:2f:8e:48:ff:4a:1d:26:
6b:db:32:90:f0:43:9e:7d:ec:5b:a0:f5:2c:23:57:
c0:02:9d:28:59:ed:11:af:a3:c4:3d:93:c3:4b:b7:
3c:88:1b:5d:b1:f5:32:cc:b7:85:52:83:a9:40:ac:
21:63:0a:3a:8a:36:0a:04:f4:e1:61:66:82:2b:eb:
d1:ca:f8:03:da:e2:8e:11:e9:2b:a8:56:cb:30:9c:
73:9b:b6:4c:44:39:64:4b:fb:f2:cc:b6:5c:24:e6:
f0:75:e4:c0:2c:4b:96:0a:fc:cd:a0:17:60:58:b4:
56:8a:3c:6e:e9:c6:36:b8:00:2b:5c:2c:5e:34:9f:
31:71:2b:8f:b1:fe:2e:8a:5f:ee:bc:d5:7c:29:fe:
fb:d5:12:5b:d3:cc:a8:56:ad:13:35:ba:74:38:19:
3c:03:35:7b:89:3f:c3:e4:13:f5:c0:98:ef:51:90:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.133.0/24
185.192.122.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212453
Signature Algorithm: sha256WithRSAEncryption
37:8d:ea:e8:c7:fc:35:15:2a:09:1b:17:bc:10:36:5d:e2:ca:
81:9b:ad:42:67:db:4b:6e:2a:94:76:9c:b9:40:8f:79:a6:e8:
ba:0b:11:9c:37:98:97:c5:6d:19:5d:4d:03:ec:93:79:6f:e2:
d5:66:25:32:f0:45:11:8e:4e:e2:d5:08:a3:9a:40:a7:9d:2a:
19:4b:9c:71:84:2a:10:2a:90:ba:fc:d5:82:00:b1:13:4e:f1:
76:e6:80:f6:17:6c:e1:31:af:b8:d4:aa:4e:24:07:56:ec:a8:
54:c1:fb:c2:11:e8:66:64:54:0c:c6:7e:5c:e3:c1:5e:94:73:
ee:b3:b3:c5:fb:d3:3f:4c:21:e6:a6:f0:da:fb:62:1a:32:01:
83:fe:cd:8c:fc:cb:a4:52:0c:a3:55:0a:f0:6e:e0:ec:60:47:
63:cc:32:c3:1e:79:ce:c7:8d:e6:f4:eb:f7:ba:64:5c:69:78:
cc:41:3a:48:4d:ca:e1:d9:6f:b2:02:51:a1:82:da:a9:33:55:
06:a7:c3:be:35:d7:7f:f8:ef:12:85:9f:28:27:2e:9d:1a:74:
34:22:ff:e4:e8:84:d0:2d:42:e9:0d:fa:31:ea:b6:30:e7:7d:
f5:02:78:df:9a:84:f4:18:84:21:36:5a:15:70:40:4d:45:59:
82:32:99:b0
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQiH7O6ZlBUL4pt8Ezfie7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzNkMzdlNjVjODIyOGY3OTNmNDhiOGU5YTIwZjEyYzJmODBiODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58Bm057tXdY0SU+AxAfv1jOswyjP
z82YHlwvjqBgz9MgXMmgrKONCGvMp/g829XvTPFILsOAh9FqmzQ2ORqK3qtEcwLW
KZId4GKqwgvfxnZBNC+OSP9KHSZr2zKQ8EOefexboPUsI1fAAp0oWe0Rr6PEPZPD
S7c8iBtdsfUyzLeFUoOpQKwhYwo6ijYKBPThYWaCK+vRyvgD2uKOEekrqFbLMJxz
m7ZMRDlkS/vyzLZcJObwdeTALEuWCvzNoBdgWLRWijxu6cY2uAArXCxeNJ8xcSuP
sf4uil/uvNV8Kf771RJb08yoVq0TNbp0OBk8AzV7iT/D5BP1wJjvUZC+8QIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFFc9N+Zcgij3k/SLjpog8SwvgLiDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzdjZDVi
OC04ZGY2LTRjOTktYTYyMy04NGNkMjFmZmI5MWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvN2NkNWI4
LThkZjYtNGM5OS1hNjIzLTg0Y2QyMWZmYjkxYi8xL1Z6MDM1bHlDS1BlVDlJdU9t
aUR4TEMtQXVJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAUPmFAwQBucB6MBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwM95TANBgkqhkiG9w0BAQsFAAOCAQEAN43q6Mf8NRUqCRsXvBA2XeLK
gZutQmfbS24qlHacuUCPeabougsRnDeYl8VtGV1NA+yTeW/i1WYlMvBFEY5O4tUI
o5pAp50qGUuccYQqECqQuvzVggCxE07xduaA9hds4TGvuNSqTiQHVuyoVMH7whHo
ZmRUDMZ+XOPBXpRz7rOzxfvTP0wh5qbw2vtiGjIBg/7NjPzLpFIMo1UK8G7g7GBH
Y8wywx55zseN5vTr97pkXGl4zEE6SE3K4dlvsgJRoYLaqTNVBqfDvjXXf/jvEoWf
KCcunRp0NCL/5OiE0C1C6Q36Meq2MOd99QJ435qE9BiEITZaFXBATUVZgjKZsA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:15 2025 by rpki-client