Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer (raw, json)
Hash identifier: Jp1jp5ClfqLhFy/DJSLrwk+liC7T84VaY/K2NIbc+io=
Subject key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCED703BE32B66205EDCCC46183421
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:34:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39312
AS: 201334
AS: 201381 -- 201385
AS: 201387 -- 201388
AS: 201482
AS: 201485 -- 201486
AS: 201490
IP: 77.81.122.0/24
IP: 81.26.156.0/24
IP: 81.26.158.0/23
IP: 84.47.132.0/23
IP: 84.47.146.0/24
IP: 84.47.154.0/23
IP: 84.47.166.0/23
IP: 84.47.179.0 -- 84.47.180.255
IP: 84.47.184.0/23
IP: 84.47.189.0/24
IP: 85.91.105.0/24
IP: 85.91.107.0 -- 85.91.111.255
IP: 85.91.116.0/23
IP: 85.91.123.0 -- 85.91.127.255
IP: 185.89.240.0/22
IP: 188.241.244.0/23
IP: 195.90.110.0/23
IP: 213.208.171.0/24
IP: 2a05:da80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ed:70:3b:e3:2b:66:20:5e:dc:cc:46:18:34:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:73:17:f8:55:d4:53:70:02:45:44:7e:02:
0b:27:52:03:24:40:c5:02:68:4c:88:36:4f:ae:88:
0d:c5:37:81:16:7d:76:30:b3:91:df:e8:5c:d2:f7:
ef:f2:a7:83:84:ef:be:1c:f9:73:74:dd:02:d5:b8:
6b:b1:14:64:3d:99:30:0d:0c:9e:5a:d4:04:3a:88:
a0:13:7b:9c:ce:47:5c:b8:75:ad:35:03:66:75:5a:
2f:c1:ad:60:93:76:97:bf:a5:53:2e:37:04:8b:cd:
51:7c:b8:00:56:13:20:dd:7b:84:89:7b:88:42:57:
bd:9e:e8:26:c5:d5:69:1a:e9:18:b6:6e:5c:68:89:
27:7f:ef:4d:20:63:7f:92:58:18:c8:52:40:02:44:
9d:1e:9c:87:06:0c:91:85:cc:48:17:b3:31:c5:15:
89:50:3f:d6:b0:57:1a:17:ea:bb:a3:fd:d5:c2:3a:
ec:7c:f1:ea:ad:ac:99:82:97:f7:b8:37:5e:e1:db:
5e:2f:66:fb:a5:6f:97:0b:bc:67:38:15:8a:89:53:
0d:4c:ee:cb:99:b8:ce:61:09:78:62:3a:9c:45:7c:
ed:5e:d2:42:bf:66:24:2b:7f:38:09:be:69:b6:4b:
34:6f:59:dc:4d:d6:f7:c4:40:70:c3:4a:ba:ab:7b:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.122.0/24
81.26.156.0/24
81.26.158.0/23
84.47.132.0/23
84.47.146.0/24
84.47.154.0/23
84.47.166.0/23
84.47.179.0-84.47.180.255
84.47.184.0/23
84.47.189.0/24
85.91.105.0/24
85.91.107.0-85.91.111.255
85.91.116.0/23
85.91.123.0-85.91.127.255
185.89.240.0/22
188.241.244.0/23
195.90.110.0/23
213.208.171.0/24
IPv6:
2a05:da80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39312
201334
201381-201385
201387-201388
201482
201485-201486
201490
Signature Algorithm: sha256WithRSAEncryption
04:88:c0:6b:a9:3e:1f:e2:3b:08:87:62:b5:20:b6:8e:74:c4:
ad:c8:e7:e6:0e:52:60:8f:3a:b9:bc:4d:82:20:11:5e:67:a7:
2b:e9:d1:b1:d0:ed:35:66:77:1d:29:2b:74:5a:e2:e6:64:58:
d5:cb:16:e1:36:2c:91:55:ea:2d:78:67:46:ed:1d:d0:74:09:
1e:9e:1b:ff:dd:80:44:41:a8:ee:19:3f:33:b1:22:92:6f:3e:
04:9b:28:30:9c:36:a0:5a:07:aa:97:22:8e:89:a9:32:4a:a5:
dc:75:5a:20:a8:ad:45:fb:ef:68:bb:c4:ce:59:9f:f0:22:01:
6c:0d:64:e2:fe:63:ec:ad:40:db:cf:f2:87:7c:5f:72:e5:c8:
2b:77:83:5d:da:86:e5:d8:34:08:d1:c0:ff:50:e7:09:0c:1d:
28:17:31:76:7f:9c:72:79:45:73:07:8f:23:e5:f8:ef:e7:d7:
2c:67:d2:ae:67:c6:3b:73:eb:5f:ef:0c:c2:87:15:bf:9f:cf:
c7:a4:41:37:d6:ef:e9:41:85:77:14:d4:15:09:07:61:1b:a5:
83:af:b0:d5:87:d4:db:09:f4:6e:79:36:6a:b7:72:b1:a0:8f:
b7:6b:5f:af:5a:6d:ba:e5:3e:34:cc:fb:bf:ec:78:90:13:a3:
16:d5:68:2a
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISAYzJvO1wO+MrZiBe3MxGGDQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWRkNTQyNzgxODUxYzBiY2U1YTNlYTVjYzM4NzY1MGZmYzgyNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9dzF/hV1FNwAkVEfgILJ1IDJEDF
AmhMiDZProgNxTeBFn12MLOR3+hc0vfv8qeDhO++HPlzdN0C1bhrsRRkPZkwDQye
WtQEOoigE3uczkdcuHWtNQNmdVovwa1gk3aXv6VTLjcEi81RfLgAVhMg3XuEiXuI
Qle9nugmxdVpGukYtm5caIknf+9NIGN/klgYyFJAAkSdHpyHBgyRhcxIF7MxxRWJ
UD/WsFcaF+q7o/3VwjrsfPHqrayZgpf3uDde4dteL2b7pW+XC7xnOBWKiVMNTO7L
mbjOYQl4YjqcRXztXtJCv2YkK384Cb5ptks0b1ncTdb3xEBww0q6q3sjQwIDAQAB
o4IDZTCCA2EwHQYDVR0OBBYEFFndVCeBhRwLzlo+pcw4dlD/yCd+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzc5YzRi
YS0zOGUyLTRmNWEtOTU5Zi00N2UwOTM3OTg5YTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNzljNGJh
LTM4ZTItNGY1YS05NTlmLTQ3ZTA5Mzc5ODlhOC8xL1dkMVVKNEdGSEF2T1dqNmx6
RGgyVVBfSUozNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF
BQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQDBABNUXoDBABRGpwDBAFRGp4DBAFUL4QD
BABUL5IDBAFUL5oDBAFUL6YwDAMEAFQvswMEAFQvtAMEAVQvuAMEAFQvvQMEAFVb
aTAMAwQAVVtrAwQEVVtgAwQBVVt0MAwDBABVW3sDBAdVWwADBAK5WfADBAG88fQD
BAHDWm4DBADV0KswDQQCAAIwBwMFAyoF2oAwTQYIKwYBBQUHAQgBAf8EPjA8oDow
OAIDAJmQAgMDEnYwCgIDAxKlAgMDEqkwCgIDAxKrAgMDEqwCAwMTCjAKAgMDEw0C
AwMTDgIDAxMSMA0GCSqGSIb3DQEBCwUAA4IBAQAEiMBrqT4f4jsIh2K1ILaOdMSt
yOfmDlJgjzq5vE2CIBFeZ6cr6dGx0O01ZncdKSt0WuLmZFjVyxbhNiyRVeoteGdG
7R3QdAkenhv/3YBEQajuGT8zsSKSbz4EmygwnDagWgeqlyKOiakySqXcdVogqK1F
++9ou8TOWZ/wIgFsDWTi/mPsrUDbz/KHfF9y5cgrd4Nd2obl2DQI0cD/UOcJDB0o
FzF2f5xyeUVzB48j5fjv59csZ9KuZ8Y7c+tf7wzChxW/n8/HpEE31u/pQYV3FNQV
CQdhG6WDr7DVh9TbCfRueTZqt3KxoI+3a1+vWm265T40zPu/7HiQE6MW1Wgq
-----END CERTIFICATE-----
Generated at Fri May 3 03:03:46 2024 by rpki-client on console-fra.rpki-client.org