Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer (raw, json)
Hash identifier: Y6rVgH2uXA7BE9qpjLI5Yk399PVCMwWqWDBgempSrq0=
Subject key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAF6C27370BEC2D7A391B60DB2DA85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207017
IP: 185.168.196.0/22
IP: 2a0a:1f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f6:c2:73:70:be:c2:d7:a3:91:b6:0d:b2:da:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:dd:84:d5:40:7a:85:4c:42:6f:7a:cf:c0:
d9:d6:3c:7b:36:7f:22:1e:3c:9e:63:02:b3:5f:94:
f3:dc:3e:fa:17:d6:8f:7c:c1:6b:18:a3:73:25:2c:
de:6d:b6:98:b9:df:76:97:c2:df:29:ea:48:e0:1a:
67:8a:70:91:1b:55:68:52:09:a4:eb:8a:73:e6:84:
72:97:cb:b3:d4:52:2d:9d:42:b1:4f:b2:5a:75:84:
af:c4:40:c8:d7:19:b9:ee:1a:24:0a:1b:a4:1d:55:
f9:ff:70:18:45:72:38:d3:2a:6b:a8:e6:c0:28:fb:
27:59:e6:a4:13:43:26:73:fe:58:bd:55:40:81:33:
fd:f3:ee:ac:5f:65:a2:73:94:57:a4:c5:56:20:d2:
89:74:c2:46:ae:39:4b:8e:99:6a:a9:3f:48:f1:d3:
6e:86:1b:01:94:c0:2d:a3:e6:13:b8:aa:df:08:9f:
24:2a:27:d0:88:41:50:07:d6:21:31:e8:43:55:15:
da:e4:be:a8:c4:f6:ef:fa:5d:e5:f3:48:de:ef:1e:
0e:70:7a:43:d7:c2:58:bd:73:6b:b1:ba:c6:60:82:
9e:a9:71:35:8e:c4:4b:c7:31:b9:38:db:c8:10:6c:
eb:87:c5:1a:40:f8:67:fd:d1:39:61:75:e9:49:a6:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.196.0/22
IPv6:
2a0a:1f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207017
Signature Algorithm: sha256WithRSAEncryption
56:fd:54:c3:5c:8f:92:f4:f7:28:d0:6c:fb:f3:41:0b:4d:a0:
87:9f:80:a4:20:6b:47:e9:2a:5d:c3:dd:4a:5f:07:ca:aa:4a:
3f:d6:0d:4a:df:b7:67:cb:5b:aa:49:4a:b5:d9:c4:3f:66:7a:
36:57:b2:91:3a:b6:8c:7a:6d:db:18:8a:8d:a4:74:7d:b5:3e:
20:fa:d5:99:51:ae:bb:b3:cf:c6:4a:4e:4b:c7:2f:5b:e1:da:
8f:d4:60:d2:e5:ff:2d:c6:9e:b5:a2:05:f5:f7:1b:43:ef:44:
e8:b4:10:9d:42:c2:4e:59:e3:31:a5:f7:24:58:ec:8c:0f:ed:
10:23:a8:52:d2:47:c6:b6:7e:25:87:d3:b3:4e:f9:11:be:57:
7d:f4:6e:16:19:9a:7d:c1:52:f1:85:72:17:41:e7:f9:dc:c5:
fb:41:c1:4b:0a:9a:d5:77:6c:e4:c9:90:36:83:ea:93:6c:5a:
29:ea:3d:66:1b:2e:d4:dd:60:b7:ec:02:f4:ba:99:a7:f3:b6:
7f:83:d3:4d:8a:58:ce:b0:b4:31:f0:06:18:01:fa:ce:3e:64:
14:bc:e5:0a:35:ac:fc:82:9c:04:45:e4:b0:4c:10:07:1a:2a:
c9:9e:b0:01:70:5e:ab:83:1b:f4:47:46:7e:27:45:4b:70:fb:
70:0a:3f:7b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi+vbCc3C+wtejkbYNstqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQyNTZlZDM4ZmIxZTk2OTQ0OTI2ZGI0YzY2YzRkMDg4YWNmYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkDdhNVAeoVMQm96z8DZ1jx7Nn8i
HjyeYwKzX5Tz3D76F9aPfMFrGKNzJSzebbaYud92l8LfKepI4BpninCRG1VoUgmk
64pz5oRyl8uz1FItnUKxT7JadYSvxEDI1xm57hokChukHVX5/3AYRXI40yprqObA
KPsnWeakE0Mmc/5YvVVAgTP98+6sX2Wic5RXpMVWINKJdMJGrjlLjplqqT9I8dNu
hhsBlMAto+YTuKrfCJ8kKifQiEFQB9YhMehDVRXa5L6oxPbv+l3l80je7x4OcHpD
18JYvXNrsbrGYIKeqXE1jsRLxzG5ONvIEGzrh8UaQPhn/dE5YXXpSaacdwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGFCVu04+x6WlEkm20xmxNCIrPvWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2ZjYTM2
OS02Yjg1LTRlMDMtYWI3MS02OGJhNmM1NGVmOWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvZmNhMzY5
LTZiODUtNGUwMy1hYjcxLTY4YmE2YzU0ZWY5YS8xL1lVSlc3VGo3SHBhVVNTYmJU
R2JFMElpcy05WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuajEMA0EAgACMAcDBQMqCh8AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMoqTANBgkqhkiG9w0BAQsFAAOCAQEAVv1Uw1yPkvT3
KNBs+/NBC02gh5+ApCBrR+kqXcPdSl8HyqpKP9YNSt+3Z8tbqklKtdnEP2Z6Nley
kTq2jHpt2xiKjaR0fbU+IPrVmVGuu7PPxkpOS8cvW+Haj9Rg0uX/LcaetaIF9fcb
Q+9E6LQQnULCTlnjMaX3JFjsjA/tECOoUtJHxrZ+JYfTs075Eb5XffRuFhmafcFS
8YVyF0Hn+dzF+0HBSwqa1Xds5MmQNoPqk2xaKeo9Zhsu1N1gt+wC9LqZp/O2f4PT
TYpYzrC0MfAGGAH6zj5kFLzlCjWs/IKcBEXksEwQBxoqyZ6wAXBeq4Mb9EdGfidF
S3D7cAo/ew==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:16 2025 by rpki-client