Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
File: YbG7REdxjxaz02Z10gXE3qQbugo.cer (raw, json)
Hash identifier: 0cVOrlbnexWqItpea09WTY5Jjilv96XmLLMTfX5NM1U=
Subject key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF41D30D9055C68F1DB52F3DD268BE9C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 16:03:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209526
IP: 2.57.16.0/21
IP: 2.58.28.0/22
IP: 2.58.172.0/22
IP: 5.45.36.0/22
IP: 5.181.124.0 -- 5.181.135.255
IP: 5.182.108.0/22
IP: 5.252.68.0 -- 5.252.83.255
IP: 5.252.160.0/22
IP: 5.253.200.0/22
IP: 37.143.60.0/22
IP: 45.81.0.0/22
IP: 45.87.184.0/22
IP: 45.88.96.0/22
IP: 45.89.240.0/22
IP: 45.89.248.0/21
IP: 45.93.44.0/22
IP: 45.95.12.0/22
IP: 45.95.20.0/22
IP: 45.95.36.0/22
IP: 45.133.168.0 -- 45.133.179.255
IP: 45.137.28.0/22
IP: 45.137.116.0/22
IP: 45.137.124.0/22
IP: 45.137.132.0/22
IP: 45.137.156.0/22
IP: 45.139.180.0/22
IP: 45.231.206.0/23
IP: 85.208.72.0/22
IP: 85.209.176.0/22
IP: 89.19.44.0 -- 89.19.51.255
IP: 92.118.160.0/22
IP: 92.119.32.0/22
IP: 92.242.184.0/22
IP: 109.106.0.0/22
IP: 130.185.124.0/22
IP: 141.98.88.0/22
IP: 149.62.40.0/22
IP: 179.61.128.0/17
IP: 181.41.192.0/19
IP: 181.214.0.0/15
IP: 185.34.40.0/22
IP: 185.130.204.0/22
IP: 185.135.8.0/22
IP: 185.135.156.0/22
IP: 185.137.12.0/22
IP: 185.137.92.0/22
IP: 185.139.0.0/22
IP: 185.139.236.0/22
IP: 185.141.164.0/22
IP: 185.142.24.0/22
IP: 185.143.228.0/22
IP: 185.145.36.0/22
IP: 185.151.56.0/22
IP: 185.158.100.0 -- 185.158.107.255
IP: 185.158.132.0/22
IP: 185.158.148.0/22
IP: 185.170.40.0/22
IP: 185.170.56.0/22
IP: 185.172.56.0/22
IP: 185.172.64.0/22
IP: 185.173.24.0/22
IP: 185.173.32.0/22
IP: 185.174.60.0/22
IP: 191.96.0.0/16
IP: 191.101.0.0/16
IP: 193.7.200.0/22
IP: 193.31.40.0/22
IP: 193.58.104.0/22
IP: 193.107.208.0/22
IP: 194.53.140.0/22
IP: 194.110.12.0/22
IP: 194.110.242.0/24
IP: 213.109.168.0/22
IP: 2a00:d1a0::/32
IP: 2a03:a960::/29
IP: 2a03:fbc0::/29
IP: 2a06:2b80::/29
IP: 2a09:4b40::/29
IP: 2a0a:4e80::/29
IP: 2a0a:7a00::/29
IP: 2a0a:7e00::/29
IP: 2a0a:8600::/29
IP: 2a0a:8e00::/29
IP: 2a0a:9200::/29
IP: 2a0a:9600::/29
IP: 2a0a:9a00::/29
IP: 2a0a:9e00::/29
IP: 2a0a:9f00::/29
IP: 2a0a:a600::/29
IP: 2a0a:a700::/29
IP: 2a0a:b200::/29
IP: 2a0a:b600::/29
IP: 2a0a:ba00::/29
IP: 2a0a:be00::/29
IP: 2a0a:c600::/29
IP: 2a0a:ce00::/29
IP: 2a0a:d200::/29
IP: 2a0b:300::/29
IP: 2a0b:500::/29
IP: 2a0b:3300::/29
IP: 2a0b:3700::/29
IP: 2a0b:8700::/29
IP: 2a0c:fa40::/29
IP: 2a0d:5c0::/29
IP: 2a0d:4b40::/29
IP: 2a0d:4c40::/29
IP: 2a0e:1c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:1d:30:d9:05:5c:68:f1:db:52:f3:dd:26:8b:e9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 16:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:da:79:63:5b:c6:cf:fa:55:17:11:e3:24:
38:c3:ce:d7:32:1a:5d:42:a5:d6:ea:cf:9d:43:1f:
be:82:a7:80:ca:e5:fe:4a:ef:b5:99:05:00:1b:6a:
88:95:c2:54:55:70:c6:5b:9c:1b:b4:3c:93:4d:e7:
af:9e:5a:6e:4c:6a:e3:71:5b:21:1a:4f:6f:84:94:
a0:28:a4:02:45:9f:31:84:c8:a8:92:17:99:5f:26:
54:73:bb:af:3b:2e:bc:41:b2:5c:a0:20:92:37:e6:
4d:fb:7f:10:7e:33:a3:5e:19:fe:53:b2:06:a2:a0:
5c:1e:93:c1:5a:7e:a9:b9:58:08:81:07:a3:43:2d:
ea:f3:94:38:c7:a2:82:8e:00:35:93:ca:53:51:38:
00:86:df:b0:bc:26:b7:59:f0:1d:e3:8b:c7:59:15:
5f:d6:5c:b6:94:a5:d0:d8:77:8c:ac:a4:f2:1d:b7:
3f:5a:a8:d0:20:c1:8e:05:34:39:05:0c:89:45:a1:
18:a8:2a:c9:fc:31:8f:3f:c1:e9:83:ae:df:23:c1:
48:62:ae:0e:0b:1c:3e:87:d4:2b:7c:66:e9:ad:32:
9c:71:fa:ed:b8:06:b9:60:b0:90:ff:c6:39:ef:2c:
6a:c2:b0:76:e3:3e:56:ab:46:3c:6d:5e:97:9c:2c:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.16.0/21
2.58.28.0/22
2.58.172.0/22
5.45.36.0/22
5.181.124.0-5.181.135.255
5.182.108.0/22
5.252.68.0-5.252.83.255
5.252.160.0/22
5.253.200.0/22
37.143.60.0/22
45.81.0.0/22
45.87.184.0/22
45.88.96.0/22
45.89.240.0/22
45.89.248.0/21
45.93.44.0/22
45.95.12.0/22
45.95.20.0/22
45.95.36.0/22
45.133.168.0-45.133.179.255
45.137.28.0/22
45.137.116.0/22
45.137.124.0/22
45.137.132.0/22
45.137.156.0/22
45.139.180.0/22
45.231.206.0/23
85.208.72.0/22
85.209.176.0/22
89.19.44.0-89.19.51.255
92.118.160.0/22
92.119.32.0/22
92.242.184.0/22
109.106.0.0/22
130.185.124.0/22
141.98.88.0/22
149.62.40.0/22
179.61.128.0/17
181.41.192.0/19
181.214.0.0/15
185.34.40.0/22
185.130.204.0/22
185.135.8.0/22
185.135.156.0/22
185.137.12.0/22
185.137.92.0/22
185.139.0.0/22
185.139.236.0/22
185.141.164.0/22
185.142.24.0/22
185.143.228.0/22
185.145.36.0/22
185.151.56.0/22
185.158.100.0-185.158.107.255
185.158.132.0/22
185.158.148.0/22
185.170.40.0/22
185.170.56.0/22
185.172.56.0/22
185.172.64.0/22
185.173.24.0/22
185.173.32.0/22
185.174.60.0/22
191.96.0.0/16
191.101.0.0/16
193.7.200.0/22
193.31.40.0/22
193.58.104.0/22
193.107.208.0/22
194.53.140.0/22
194.110.12.0/22
194.110.242.0/24
213.109.168.0/22
IPv6:
2a00:d1a0::/32
2a03:a960::/29
2a03:fbc0::/29
2a06:2b80::/29
2a09:4b40::/29
2a0a:4e80::/29
2a0a:7a00::/29
2a0a:7e00::/29
2a0a:8600::/29
2a0a:8e00::/29
2a0a:9200::/29
2a0a:9600::/29
2a0a:9a00::/29
2a0a:9e00::/29
2a0a:9f00::/29
2a0a:a600::/29
2a0a:a700::/29
2a0a:b200::/29
2a0a:b600::/29
2a0a:ba00::/29
2a0a:be00::/29
2a0a:c600::/29
2a0a:ce00::/29
2a0a:d200::/29
2a0b:300::/29
2a0b:500::/29
2a0b:3300::/29
2a0b:3700::/29
2a0b:8700::/29
2a0c:fa40::/29
2a0d:5c0::/29
2a0d:4b40::/29
2a0d:4c40::/29
2a0e:1c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209526
Signature Algorithm: sha256WithRSAEncryption
74:c5:00:0e:96:22:43:ce:bf:3a:fe:db:72:a4:55:18:9b:a0:
ee:78:97:a3:b2:0c:71:d7:ba:c8:e5:0a:88:46:80:a6:b5:12:
b3:99:42:4c:f1:0e:ee:de:7f:1c:c9:7a:cc:1c:71:bb:9a:69:
fd:08:95:34:0b:74:ed:31:07:a8:49:9a:e3:9d:0d:0d:65:f9:
ae:1d:df:a2:49:fe:f3:63:4c:76:e2:d4:8a:1d:ed:bb:5f:51:
b5:a5:da:47:d1:09:98:5a:b3:7d:2b:79:a6:15:30:97:54:cf:
6b:c8:4a:b4:5b:8a:16:cd:33:b2:29:98:83:11:b9:cb:1b:cf:
6f:e7:24:02:1b:77:09:a8:ed:76:13:ff:d6:bf:d8:e2:4a:b5:
40:c9:4c:24:7b:42:be:2c:4a:16:bb:18:ad:a1:9a:78:13:1f:
e0:93:f8:95:3c:81:e3:7b:c5:85:0f:06:7d:bb:f1:a7:f7:a3:
c5:d0:bc:d4:d5:f3:08:49:2a:c3:f3:75:b5:35:8c:09:b5:61:
39:45:d8:f3:26:36:2c:9e:c6:04:95:79:13:77:9f:28:88:29:
ad:5f:6a:e8:1c:d7:91:1c:6c:55:89:06:82:a4:8e:03:f5:e9:
e3:f5:63:0a:7c:b6:56:e7:88:c3:7b:87:e9:71:71:be:fe:c9:
e8:19:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:12:26 2024 by rpki-client on console-ams.rpki-client.org