Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer (raw, json)
Hash identifier: BYV0gORB9FFd450CUGt0trSfNC00wOjCaOqPEqAobBY=
Subject key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420680D7286795F3AC53013C3CEDF3046
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51021
IP: 195.182.42.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0d:72:86:79:5f:3a:c5:30:13:c3:ce:df:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aae19678aa37525512229a94e7890147183273c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:ba:c2:0a:6d:a9:37:ee:8f:d6:ae:d9:c9:
a4:2b:ca:db:2e:57:0c:1f:96:ae:7e:99:ea:17:97:
78:fa:2d:67:e5:5c:76:35:77:82:81:f7:d3:05:92:
f1:39:d5:40:1a:02:2e:54:4b:22:a4:f6:72:17:85:
b7:bf:9b:69:d1:45:19:3d:33:aa:6f:fa:f6:91:2d:
1e:aa:02:38:cc:51:2e:5d:a3:3b:bf:7e:79:8a:a5:
87:16:fa:70:ca:d1:f1:bd:35:50:58:a1:b4:ed:e3:
cf:42:d9:11:3e:e9:69:ef:41:03:37:4b:1e:c3:b9:
28:f2:42:e4:52:0a:7b:e1:02:ea:fa:11:81:23:52:
14:1d:6e:db:27:c6:6c:7f:69:52:70:f7:bf:2f:00:
b7:87:83:d1:8d:3c:10:93:56:57:d5:c3:c5:c7:10:
ec:76:ac:27:78:52:9d:da:9b:e7:45:00:a5:34:af:
bb:68:20:7b:75:04:96:dc:dc:77:94:ad:07:64:44:
29:a1:df:0e:fb:5e:64:96:fa:1b:d1:29:97:85:fe:
7b:a4:87:37:ac:00:f5:91:39:a8:b6:ee:d4:db:9d:
cb:43:20:70:55:0b:3a:f1:b1:f7:07:1f:52:8e:10:
d0:ac:54:79:dd:b8:d9:56:ea:22:72:f1:47:d7:51:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.42.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51021
Signature Algorithm: sha256WithRSAEncryption
2d:ae:6a:48:97:2f:8b:bb:e4:89:1f:c6:6f:4a:a2:6f:21:6f:
48:4e:fc:4e:10:0d:51:e8:6d:42:ce:4b:94:05:68:5e:2a:16:
50:68:8f:d4:ba:eb:d0:cf:eb:1b:25:2a:0a:71:0d:c1:b5:2d:
fe:15:0c:f9:6c:47:4a:e1:b1:3c:4e:f2:71:1f:44:0d:52:94:
15:76:33:70:65:0d:3b:e1:75:94:c5:3d:4a:7e:10:2d:00:ef:
d4:64:e6:4b:26:2d:d0:fe:91:99:82:ed:cc:db:aa:f8:25:b4:
1b:53:a4:2c:80:87:8e:7d:6a:59:0d:e8:46:a9:ef:b1:79:aa:
2c:20:f1:5d:4f:ca:30:8f:5d:e7:be:59:e6:e5:34:3b:b8:1e:
60:1d:08:9c:48:64:e7:1e:60:2d:2d:05:ec:8c:ab:b0:af:42:
e7:4e:62:e1:63:02:0f:1f:23:db:af:70:a3:4e:a9:a5:81:be:
ea:02:12:21:c7:ae:a7:c8:c5:eb:fb:59:b4:07:83:10:0f:38:
9d:cd:19:1c:03:b6:99:b6:32:a4:36:da:10:35:5d:1e:7b:d1:
8d:2b:45:57:42:c9:0a:ee:10:91:3b:a3:87:a1:4b:76:cb:a6:
0f:49:5e:31:4d:22:a1:e4:f5:04:21:43:b8:0c:8a:f8:71:46:
97:1f:1f:13
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQgaA1yhnlfOsUwE8PO3zBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWFlMTk2NzhhYTM3NTI1NTEyMjI5YTk0ZTc4OTAxNDcxODMyNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjni6wgptqTfuj9au2cmkK8rbLlcM
H5aufpnqF5d4+i1n5Vx2NXeCgffTBZLxOdVAGgIuVEsipPZyF4W3v5tp0UUZPTOq
b/r2kS0eqgI4zFEuXaM7v355iqWHFvpwytHxvTVQWKG07ePPQtkRPulp70EDN0se
w7ko8kLkUgp74QLq+hGBI1IUHW7bJ8Zsf2lScPe/LwC3h4PRjTwQk1ZX1cPFxxDs
dqwneFKd2pvnRQClNK+7aCB7dQSW3Nx3lK0HZEQpod8O+15klvob0SmXhf57pIc3
rAD1kTmotu7U253LQyBwVQs68bH3Bx9SjhDQrFR53bjZVuoicvFH11FSsQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFquGWeKo3UlUSIpqU54kBRxgyc8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzhhOTBk
OS05NDhhLTQ2YzItOTc3YS02NDNmMDJkYWViOWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOGE5MGQ5
LTk0OGEtNDZjMi05NzdhLTY0M2YwMmRhZWI5ZS8xL1dxNFpaNHFqZFNWUklpbXBU
bmlRRkhHREp6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw7YqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDHTTANBgkqhkiG9w0BAQsFAAOCAQEALa5qSJcvi7vkiR/Gb0qibyFvSE78ThAN
UehtQs5LlAVoXioWUGiP1Lrr0M/rGyUqCnENwbUt/hUM+WxHSuGxPE7ycR9EDVKU
FXYzcGUNO+F1lMU9Sn4QLQDv1GTmSyYt0P6RmYLtzNuq+CW0G1OkLICHjn1qWQ3o
RqnvsXmqLCDxXU/KMI9d575Z5uU0O7geYB0InEhk5x5gLS0F7IyrsK9C505i4WMC
Dx8j269wo06ppYG+6gISIceup8jF6/tZtAeDEA84nc0ZHAO2mbYypDbaEDVdHnvR
jStFV0LJCu4QkTujh6FLdsumD0leMU0ioeT1BCFDuAyK+HFGlx8fEw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:50 2025 by rpki-client