Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
File: WDMpShzcE1ivxDnApyczsGWob4s.cer (raw, json)
Hash identifier: kdFGSThouzlyic1Jb+Iz/kSD3m2LyF/p7SnKQDqafAw=
Subject key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019518B690FCBAE6B0E842EA2DB372011E97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 10:59:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39561
AS: 43146
AS: 49352
AS: 197695
AS: 201972
AS: 206812
IP: 5.63.152.0/21
IP: 31.31.192.0/20
IP: 37.140.192.0/21
IP: 46.183.160.0/24
IP: 46.183.163.0/24
IP: 46.183.165.0/24
IP: 62.113.91.0 -- 62.113.94.255
IP: 62.213.65.0 -- 62.213.68.255
IP: 62.213.87.0/24
IP: 62.213.92.0/24
IP: 62.213.100.0/24
IP: 62.213.106.0/24
IP: 62.213.108.0/24
IP: 62.213.111.0/24
IP: 62.213.114.0/24
IP: 62.213.122.0/24
IP: 62.213.125.0 -- 62.213.126.255
IP: 80.78.240.0/20
IP: 83.166.244.0/22
IP: 89.108.64.0/18
IP: 91.197.96.0/22
IP: 92.242.60.0/23
IP: 95.163.220.0 -- 95.163.247.255
IP: 134.0.112.0/21
IP: 151.248.112.0/20
IP: 176.99.0.0/20
IP: 178.21.8.0/21
IP: 185.10.60.0 -- 185.10.62.255
IP: 185.20.224.0/22
IP: 185.38.16.0/22
IP: 185.46.8.0/22
IP: 185.182.109.0 -- 185.182.111.255
IP: 188.93.208.0/21
IP: 193.227.240.0/23
IP: 194.58.88.0 -- 194.58.127.255
IP: 194.67.64.0 -- 194.67.68.255
IP: 194.67.71.0 -- 194.67.79.255
IP: 194.67.84.0 -- 194.67.94.255
IP: 194.67.96.0/19
IP: 212.24.32.0/23
IP: 212.24.35.0 -- 212.24.36.255
IP: 212.24.38.0/24
IP: 212.24.41.0/24
IP: 212.24.44.0/24
IP: 212.24.47.0 -- 212.24.48.255
IP: 212.24.55.0 -- 212.24.56.255
IP: 212.24.58.0/24
IP: 212.24.60.0/22
IP: 212.158.160.0/21
IP: 212.158.169.0/24
IP: 212.158.172.0/24
IP: 213.189.193.0 -- 213.189.195.255
IP: 213.189.199.0/24
IP: 213.189.201.0 -- 213.189.205.255
IP: 217.23.128.0/24
IP: 217.23.132.0 -- 217.23.138.255
IP: 217.23.140.0/23
IP: 217.23.143.0 -- 217.23.145.255
IP: 217.23.147.0 -- 217.23.148.255
IP: 217.23.150.0/24
IP: 2a00:1b48::/32
IP: 2a00:f940::/32
IP: 2a02:f20::/32
IP: 2a03:4900::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:b6:90:fc:ba:e6:b0:e8:42:ea:2d:b3:72:01:1e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 10:59:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:17:da:9d:e3:fa:3b:41:8b:e9:ea:7a:7e:
14:cd:18:2a:f4:da:b1:6f:6e:6d:ea:2f:9c:95:ec:
a5:8b:e6:4b:53:d7:af:0f:01:39:c6:3c:c6:a5:97:
fd:5f:fb:6f:aa:d0:f0:25:aa:16:7a:81:28:ae:91:
01:bf:84:4e:12:ee:7d:76:d2:04:01:e7:75:88:f4:
6e:8e:55:d9:91:63:ff:5d:a9:0f:f1:f1:eb:45:bb:
f4:f2:75:80:08:21:c0:46:6b:bd:d2:c0:36:8c:b9:
02:40:37:68:21:05:9c:09:3c:5c:e5:cb:68:31:2d:
22:74:f4:4c:53:0a:35:56:b3:37:dc:2e:08:01:c3:
dc:6f:dc:1c:01:6d:da:f6:4f:3e:44:4d:88:76:74:
a6:44:44:ff:6b:23:c3:e1:15:7d:1f:bb:93:4f:36:
1b:48:d8:0b:22:29:a8:92:45:8d:f3:e4:01:8f:91:
c3:25:1a:52:32:71:bc:3c:e3:28:9c:59:f2:28:05:
54:bf:08:e0:2e:96:d4:fc:2a:3d:f5:4f:36:e6:9c:
6b:c5:f9:fa:0a:7f:5a:b5:4a:6d:1c:27:a5:64:b6:
e6:63:72:dc:93:30:44:bf:cd:63:4d:48:34:29:46:
b3:ce:9f:5a:4a:f6:76:0a:93:16:f6:ba:12:89:92:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.152.0/21
31.31.192.0/20
37.140.192.0/21
46.183.160.0/24
46.183.163.0/24
46.183.165.0/24
62.113.91.0-62.113.94.255
62.213.65.0-62.213.68.255
62.213.87.0/24
62.213.92.0/24
62.213.100.0/24
62.213.106.0/24
62.213.108.0/24
62.213.111.0/24
62.213.114.0/24
62.213.122.0/24
62.213.125.0-62.213.126.255
80.78.240.0/20
83.166.244.0/22
89.108.64.0/18
91.197.96.0/22
92.242.60.0/23
95.163.220.0-95.163.247.255
134.0.112.0/21
151.248.112.0/20
176.99.0.0/20
178.21.8.0/21
185.10.60.0-185.10.62.255
185.20.224.0/22
185.38.16.0/22
185.46.8.0/22
185.182.109.0-185.182.111.255
188.93.208.0/21
193.227.240.0/23
194.58.88.0-194.58.127.255
194.67.64.0-194.67.68.255
194.67.71.0-194.67.79.255
194.67.84.0-194.67.94.255
194.67.96.0/19
212.24.32.0/23
212.24.35.0-212.24.36.255
212.24.38.0/24
212.24.41.0/24
212.24.44.0/24
212.24.47.0-212.24.48.255
212.24.55.0-212.24.56.255
212.24.58.0/24
212.24.60.0/22
212.158.160.0/21
212.158.169.0/24
212.158.172.0/24
213.189.193.0-213.189.195.255
213.189.199.0/24
213.189.201.0-213.189.205.255
217.23.128.0/24
217.23.132.0-217.23.138.255
217.23.140.0/23
217.23.143.0-217.23.145.255
217.23.147.0-217.23.148.255
217.23.150.0/24
IPv6:
2a00:1b48::/32
2a00:f940::/32
2a02:f20::/32
2a03:4900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39561
43146
49352
197695
201972
206812
Signature Algorithm: sha256WithRSAEncryption
1e:01:16:90:d6:85:fc:2e:07:eb:02:a5:52:90:e3:9d:91:d5:
1d:7a:37:e6:fa:19:b4:a8:23:64:1b:6e:3a:94:58:59:c4:0d:
79:fd:5f:2f:8a:df:f5:1d:8b:41:44:00:4e:4d:62:4d:8a:35:
9e:8c:67:a0:b9:e6:f9:3c:e6:3d:70:f8:48:49:6d:f5:ce:85:
9e:0a:18:24:15:60:41:f1:97:9d:03:bb:12:c8:aa:bf:60:49:
8c:f4:98:67:3f:4d:80:9c:26:95:ed:ac:96:af:e9:f5:ef:e6:
85:c3:84:0e:99:59:ca:34:2f:02:bb:7a:bd:5b:af:db:c3:3a:
b2:14:6c:4e:e2:56:82:fb:5a:f1:52:db:86:88:20:71:cb:0b:
7e:86:b4:d4:ee:5f:b0:15:30:26:b0:85:b9:97:e5:77:dd:ce:
f6:b3:13:31:95:d6:6a:f5:db:95:84:27:4b:41:ef:e2:f9:a8:
d8:03:c4:48:32:11:25:70:98:91:d1:63:20:a3:02:6d:b3:02:
36:6c:d0:c4:9b:ee:70:88:82:0e:3d:56:36:74:38:99:81:40:
44:88:6f:b0:9a:90:ab:f0:14:d7:e6:bc:42:ec:63:01:ba:c4:
82:2e:0d:82:a0:a0:51:a2:78:94:71:3b:0a:0e:6f:29:1e:46:
1b:82:e1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:00:51 2025 by rpki-client