Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer (raw, json)
Hash identifier: K96yRBti8uWOu+8JCaPGV0zjIimTvUygEN3TQFGms2Y=
Subject key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD4CDD1E10F762EB81040705C60672
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212304
IP: 5.183.88.0/22
IP: 62.3.35.0/24
IP: 77.247.116.0/22
IP: 113.30.192.0/21
IP: 146.255.184.0/24
IP: 176.125.236.0/22
IP: 185.5.144.0/24
IP: 185.5.147.0/24
IP: 185.128.226.0/23
IP: 185.140.173.0/24
IP: 185.217.166.0/24
IP: 185.253.1.0/24
IP: 193.111.40.0/24
IP: 194.26.202.0/24
IP: 195.64.115.0/24
IP: 195.64.119.0 -- 195.64.125.255
IP: 195.96.134.0/24
IP: 216.247.232.0/22
IP: 2a10:d500::/29
IP: 2a14:2500::/29
IP: 2a14:2700::/29
IP: 2a14:2b00::/29
IP: 2a14:2d00::/29
IP: 2a14:2f00::/29
IP: 2a14:3300::/29
IP: 2a14:3500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4c:dd:1e:10:f7:62:eb:81:04:07:05:c6:06:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:a5:67:01:73:da:c8:23:8f:44:4d:1f:2b:
ad:23:f7:45:f9:60:2c:d0:81:84:00:b5:57:8c:db:
18:87:5a:60:1e:c2:b1:d0:38:35:22:64:ff:20:87:
9a:63:be:e9:77:da:9b:75:9c:76:28:16:c4:24:09:
8a:39:d3:5f:ca:92:ff:e1:16:d3:98:62:86:3b:7f:
f6:24:3b:62:8b:58:54:a6:dd:71:9b:30:49:86:f6:
61:74:86:f5:f5:40:cd:91:ae:ea:dd:51:ef:39:3d:
f2:06:2a:ab:48:ed:aa:e4:29:d3:83:97:86:e3:ad:
f5:11:9c:0f:5d:88:25:0a:a0:9e:40:7a:f3:ec:85:
f5:0e:26:ac:cd:f8:92:bc:1a:9f:74:08:c4:03:51:
c3:bd:38:4d:2f:01:a4:a9:44:a5:29:c0:0e:78:f7:
3c:11:9f:8d:06:63:75:57:dc:c5:06:16:cc:6a:01:
f6:fa:ba:e7:4e:f7:84:24:dc:98:72:ff:e9:bf:c6:
4b:42:04:48:c2:db:fe:5b:91:24:37:10:49:a1:c6:
17:35:d1:0b:33:04:bc:49:5b:be:07:95:bc:d3:fe:
f3:26:39:f9:9f:d4:6a:ca:2a:5c:18:df:05:40:c5:
ce:ab:6d:00:15:e7:85:68:1a:a7:fd:c6:cb:10:c0:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.88.0/22
62.3.35.0/24
77.247.116.0/22
113.30.192.0/21
146.255.184.0/24
176.125.236.0/22
185.5.144.0/24
185.5.147.0/24
185.128.226.0/23
185.140.173.0/24
185.217.166.0/24
185.253.1.0/24
193.111.40.0/24
194.26.202.0/24
195.64.115.0/24
195.64.119.0-195.64.125.255
195.96.134.0/24
216.247.232.0/22
IPv6:
2a10:d500::/29
2a14:2500::/29
2a14:2700::/29
2a14:2b00::/29
2a14:2d00::/29
2a14:2f00::/29
2a14:3300::/29
2a14:3500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212304
Signature Algorithm: sha256WithRSAEncryption
80:29:26:73:33:8b:6b:f8:0d:6c:d2:91:73:7a:b3:85:5f:d4:
81:32:3c:f8:a6:48:7c:10:c5:55:e7:7a:3d:c2:96:47:df:cd:
b3:26:27:53:49:7a:6a:27:01:99:17:d1:89:66:e6:81:4d:5f:
4e:6b:b6:9f:42:fe:a5:3b:82:81:3a:1e:77:a3:0b:c6:11:60:
5c:28:f0:4f:2b:74:95:57:3c:4f:41:a7:fd:50:ad:e5:b4:70:
96:85:89:22:f0:dd:ec:e1:97:6a:1a:8c:ba:4c:0a:69:7a:26:
03:f6:29:7f:d0:8f:9e:71:7f:c8:28:e3:36:d0:0b:18:f9:7c:
33:a3:70:29:5f:e2:82:e2:b1:fe:ce:ad:7c:3b:54:f5:d1:53:
6c:21:c3:00:12:ff:2c:7b:ed:37:01:46:12:e6:13:b4:50:49:
5e:32:86:47:21:3e:dd:5d:d7:5d:1f:c7:d2:c4:23:d1:0e:20:
6a:f0:7a:66:e4:1c:d8:42:24:7f:3e:34:cc:c3:ea:3b:39:40:
14:eb:bf:4f:a7:3b:18:93:1f:a8:62:81:46:10:67:cc:e2:72:
2e:23:ac:e8:cd:bb:2b:ae:9a:26:da:ea:78:7e:3a:4b:09:18:
f0:0a:d0:0e:93:c4:0f:64:f3:6d:22:e8:b9:1e:0f:41:79:ec:
6b:22:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:19 2025 by rpki-client