Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.cer (raw, json)
Hash identifier: PlyVUYbP59fVX6gkS3cOXRJ9DJMqKxJDiiDQjLdxSk0=
Subject key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067E3729C923F8FF3F141D5FD8BA0EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57869
IP: 5.154.168.0/23
IP: 5.154.228.0/23
IP: 5.154.248.0/22
IP: 82.118.0.0/20
IP: 185.36.68.0/22
IP: 213.91.96.0/20
IP: 2a00:ed60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e3:72:9c:92:3f:8f:f3:f1:41:d5:fd:8b:a0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:80:5d:36:8b:9d:bf:c1:ee:de:9b:ab:2c:
47:4b:d6:89:ff:0b:40:97:c0:3a:e1:6a:45:42:6e:
87:af:f5:e9:36:69:f6:3e:08:8e:2b:8c:4a:37:d1:
94:66:7f:4a:c9:10:3c:bb:f6:3f:4c:e4:51:e0:c2:
48:ac:77:1d:9c:ff:57:a7:2b:a3:f6:7a:d9:32:77:
cd:8a:2f:ff:79:65:d8:e6:6e:87:93:b7:47:a3:b1:
3d:98:4c:41:3a:96:c8:a9:49:bd:34:12:cd:5b:7b:
ec:fe:61:d2:9f:dd:0b:73:c9:5c:0a:85:88:8c:14:
2e:e2:14:ef:b9:c0:89:84:d7:b2:a4:f5:c6:8e:49:
51:f9:66:f7:4b:d2:55:4b:a6:df:1f:ce:cb:9c:7b:
56:7c:e4:b8:6c:ca:6d:da:b8:4f:0f:4e:c6:d2:0f:
6c:08:bd:e3:55:83:b9:57:f4:50:b6:84:17:6f:f4:
8e:04:86:26:64:fa:66:6b:e2:1e:74:62:08:0d:28:
6a:5f:c5:23:8a:a1:28:c6:e6:73:5a:80:e3:8a:58:
13:4d:1b:17:8c:cd:e5:dc:5f:6b:74:2b:05:c9:f0:
81:91:c9:f4:78:5e:91:11:27:cc:f9:b3:4c:86:fc:
ca:f1:d3:47:e2:87:f3:0b:73:79:3c:08:4b:66:fc:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.168.0/23
5.154.228.0/23
5.154.248.0/22
82.118.0.0/20
185.36.68.0/22
213.91.96.0/20
IPv6:
2a00:ed60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57869
Signature Algorithm: sha256WithRSAEncryption
ad:c8:71:11:17:78:6f:71:2a:15:63:2d:e2:cd:54:73:3c:2e:
eb:8f:40:4a:d0:39:3d:59:7e:b2:0e:ed:50:17:68:b7:ce:41:
6f:e0:c7:43:0d:52:2c:cf:e9:63:23:c7:f9:7d:cc:c7:b1:42:
b9:88:69:cb:ba:41:3b:fb:16:1f:e1:aa:e9:df:87:43:36:a5:
83:37:d1:56:6d:92:92:10:8b:37:7e:ce:5d:e0:86:7e:ae:51:
b8:e5:51:cb:f0:c0:04:f9:66:65:ca:63:b9:b8:fe:1e:a7:c3:
da:51:c0:2c:48:25:7f:fb:08:12:ca:4e:f6:db:41:1a:31:89:
2b:28:9d:3d:3b:74:b5:8f:42:0c:f1:c0:e6:95:db:9f:ea:71:
a1:68:36:3b:1b:93:d8:25:c7:be:e5:eb:6d:be:bd:52:90:f3:
62:ad:a9:4f:20:1d:45:27:51:8b:8c:d7:3f:9b:69:f3:8d:86:
55:cc:52:82:7b:d1:be:5f:03:54:b9:b8:9a:75:a4:91:28:d7:
2f:73:46:60:d9:bb:b0:87:70:49:7e:28:b7:45:16:35:c9:71:
72:72:49:30:6f:f9:60:71:6e:2f:6e:99:e0:a5:87:9f:86:2d:
56:52:dc:6e:de:3f:81:23:0f:9f:f4:e6:16:f0:64:e6:d5:8d:
44:e1:36:8a
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAZQgZ+NynJI/j/PxQdX9i6DsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmI1ZjA1ZjEyYjUyMDc2ODY4ZWVmY2QxNGFmY2VjMTkyZmUyY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAWAXTaLnb/B7t6bqyxHS9aJ/wtA
l8A64WpFQm6Hr/XpNmn2PgiOK4xKN9GUZn9KyRA8u/Y/TORR4MJIrHcdnP9Xpyuj
9nrZMnfNii//eWXY5m6Hk7dHo7E9mExBOpbIqUm9NBLNW3vs/mHSn90Lc8lcCoWI
jBQu4hTvucCJhNeypPXGjklR+Wb3S9JVS6bfH87LnHtWfOS4bMpt2rhPD07G0g9s
CL3jVYO5V/RQtoQXb/SOBIYmZPpma+IedGIIDShqX8UjiqEoxuZzWoDjilgTTRsX
jM3l3F9rdCsFyfCBkcn0eF6RESfM+bNMhvzK8dNH4ofzC3N5PAhLZvxMiwIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFFu18F8StSB2ho7vzRSvzsGS/izyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzk4YWRj
MS02ZmY4LTQ5NTktYTM0NC1kYjZjYTZlNGQ0YTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvOThhZGMx
LTZmZjgtNDk1OS1hMzQ0LWRiNmNhNmU0ZDRhMy8xL1c3WHdYeEsxSUhhR2p1X05G
S19Pd1pMLUxQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQBBZqoAwQBBZrkAwQCBZr4AwQEUnYAAwQCuSRE
AwQE1VtgMA0EAgACMAcDBQAqAO1gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDi
DTANBgkqhkiG9w0BAQsFAAOCAQEArchxERd4b3EqFWMt4s1Uczwu649AStA5PVl+
sg7tUBdot85Bb+DHQw1SLM/pYyPH+X3Mx7FCuYhpy7pBO/sWH+Gq6d+HQzalgzfR
Vm2SkhCLN37OXeCGfq5RuOVRy/DABPlmZcpjubj+HqfD2lHALEglf/sIEspO9ttB
GjGJKyidPTt0tY9CDPHA5pXbn+pxoWg2OxuT2CXHvuXrbb69UpDzYq2pTyAdRSdR
i4zXP5tp842GVcxSgnvRvl8DVLm4mnWkkSjXL3NGYNm7sIdwSX4ot0UWNclxcnJJ
MG/5YHFuL26Z4KWHn4YtVlLcbt4/gSMPn/TmFvBk5tWNROE2ig==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:36 2025 by rpki-client