Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
File: YbG7REdxjxaz02Z10gXE3qQbugo.cer (raw, json)
Hash identifier: /EXzUfFgqOU0QwII4QJljEyoXuLy4S3M71yn41V+ODA=
Subject key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4869625D4115EF2088B69F6BB5FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209526
IP: 2.57.16.0/21
IP: 2.58.28.0/22
IP: 2.58.172.0/22
IP: 5.45.36.0/22
IP: 5.181.124.0 -- 5.181.135.255
IP: 5.182.108.0/22
IP: 5.252.68.0 -- 5.252.83.255
IP: 5.252.160.0/22
IP: 5.253.200.0/22
IP: 37.143.60.0/22
IP: 45.81.0.0/22
IP: 45.87.184.0/22
IP: 45.88.96.0/22
IP: 45.89.240.0/22
IP: 45.89.248.0/21
IP: 45.93.44.0/22
IP: 45.95.12.0/22
IP: 45.95.20.0/22
IP: 45.95.36.0/22
IP: 45.133.168.0 -- 45.133.179.255
IP: 45.137.28.0/22
IP: 45.137.116.0/22
IP: 45.137.124.0/22
IP: 45.137.132.0/22
IP: 45.137.156.0/22
IP: 45.139.180.0/22
IP: 45.231.206.0/23
IP: 85.208.72.0/22
IP: 85.209.176.0/22
IP: 89.19.44.0 -- 89.19.51.255
IP: 92.118.160.0/22
IP: 92.119.32.0/22
IP: 92.242.184.0/22
IP: 103.141.68.0/23
IP: 109.106.0.0/22
IP: 130.185.124.0/22
IP: 141.98.88.0/22
IP: 149.62.40.0/22
IP: 179.61.128.0/17
IP: 181.41.192.0/19
IP: 181.214.0.0/15
IP: 185.34.40.0/22
IP: 185.130.204.0/22
IP: 185.135.8.0/22
IP: 185.135.156.0/22
IP: 185.137.12.0/22
IP: 185.137.92.0/22
IP: 185.139.0.0/22
IP: 185.139.236.0/22
IP: 185.141.164.0/22
IP: 185.142.24.0/22
IP: 185.143.228.0/22
IP: 185.145.36.0/22
IP: 185.151.56.0/22
IP: 185.158.100.0 -- 185.158.107.255
IP: 185.158.132.0/22
IP: 185.158.148.0/22
IP: 185.170.40.0/22
IP: 185.170.56.0/22
IP: 185.172.56.0/22
IP: 185.172.64.0/22
IP: 185.173.24.0/22
IP: 185.173.32.0/22
IP: 185.174.60.0/22
IP: 191.96.0.0/16
IP: 191.101.0.0/16
IP: 193.7.200.0/22
IP: 193.31.40.0/22
IP: 193.58.104.0/22
IP: 193.107.208.0/22
IP: 194.53.140.0/22
IP: 194.110.12.0/22
IP: 194.110.242.0/24
IP: 213.109.168.0/22
IP: 2a00:d1a0::/32
IP: 2a03:a960::/29
IP: 2a03:fbc0::/29
IP: 2a06:2b80::/29
IP: 2a09:4b40::/29
IP: 2a0a:4e80::/29
IP: 2a0a:7a00::/29
IP: 2a0a:7e00::/29
IP: 2a0a:8600::/29
IP: 2a0a:8e00::/29
IP: 2a0a:9200::/29
IP: 2a0a:9600::/29
IP: 2a0a:9a00::/29
IP: 2a0a:9e00::/29
IP: 2a0a:9f00::/29
IP: 2a0a:a600::/29
IP: 2a0a:a700::/29
IP: 2a0a:b200::/29
IP: 2a0a:b600::/29
IP: 2a0a:ba00::/29
IP: 2a0a:be00::/29
IP: 2a0a:c600::/29
IP: 2a0a:ce00::/29
IP: 2a0a:d200::/29
IP: 2a0b:300::/29
IP: 2a0b:500::/29
IP: 2a0b:3300::/29
IP: 2a0b:3700::/29
IP: 2a0b:8700::/29
IP: 2a0c:fa40::/29
IP: 2a0d:5c0::/29
IP: 2a0d:4b40::/29
IP: 2a0d:4c40::/29
IP: 2a0e:1c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jan 2025 14:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:69:62:5d:41:15:ef:20:88:b6:9f:6b:b5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:da:79:63:5b:c6:cf:fa:55:17:11:e3:24:
38:c3:ce:d7:32:1a:5d:42:a5:d6:ea:cf:9d:43:1f:
be:82:a7:80:ca:e5:fe:4a:ef:b5:99:05:00:1b:6a:
88:95:c2:54:55:70:c6:5b:9c:1b:b4:3c:93:4d:e7:
af:9e:5a:6e:4c:6a:e3:71:5b:21:1a:4f:6f:84:94:
a0:28:a4:02:45:9f:31:84:c8:a8:92:17:99:5f:26:
54:73:bb:af:3b:2e:bc:41:b2:5c:a0:20:92:37:e6:
4d:fb:7f:10:7e:33:a3:5e:19:fe:53:b2:06:a2:a0:
5c:1e:93:c1:5a:7e:a9:b9:58:08:81:07:a3:43:2d:
ea:f3:94:38:c7:a2:82:8e:00:35:93:ca:53:51:38:
00:86:df:b0:bc:26:b7:59:f0:1d:e3:8b:c7:59:15:
5f:d6:5c:b6:94:a5:d0:d8:77:8c:ac:a4:f2:1d:b7:
3f:5a:a8:d0:20:c1:8e:05:34:39:05:0c:89:45:a1:
18:a8:2a:c9:fc:31:8f:3f:c1:e9:83:ae:df:23:c1:
48:62:ae:0e:0b:1c:3e:87:d4:2b:7c:66:e9:ad:32:
9c:71:fa:ed:b8:06:b9:60:b0:90:ff:c6:39:ef:2c:
6a:c2:b0:76:e3:3e:56:ab:46:3c:6d:5e:97:9c:2c:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.16.0/21
2.58.28.0/22
2.58.172.0/22
5.45.36.0/22
5.181.124.0-5.181.135.255
5.182.108.0/22
5.252.68.0-5.252.83.255
5.252.160.0/22
5.253.200.0/22
37.143.60.0/22
45.81.0.0/22
45.87.184.0/22
45.88.96.0/22
45.89.240.0/22
45.89.248.0/21
45.93.44.0/22
45.95.12.0/22
45.95.20.0/22
45.95.36.0/22
45.133.168.0-45.133.179.255
45.137.28.0/22
45.137.116.0/22
45.137.124.0/22
45.137.132.0/22
45.137.156.0/22
45.139.180.0/22
45.231.206.0/23
85.208.72.0/22
85.209.176.0/22
89.19.44.0-89.19.51.255
92.118.160.0/22
92.119.32.0/22
92.242.184.0/22
103.141.68.0/23
109.106.0.0/22
130.185.124.0/22
141.98.88.0/22
149.62.40.0/22
179.61.128.0/17
181.41.192.0/19
181.214.0.0/15
185.34.40.0/22
185.130.204.0/22
185.135.8.0/22
185.135.156.0/22
185.137.12.0/22
185.137.92.0/22
185.139.0.0/22
185.139.236.0/22
185.141.164.0/22
185.142.24.0/22
185.143.228.0/22
185.145.36.0/22
185.151.56.0/22
185.158.100.0-185.158.107.255
185.158.132.0/22
185.158.148.0/22
185.170.40.0/22
185.170.56.0/22
185.172.56.0/22
185.172.64.0/22
185.173.24.0/22
185.173.32.0/22
185.174.60.0/22
191.96.0.0/16
191.101.0.0/16
193.7.200.0/22
193.31.40.0/22
193.58.104.0/22
193.107.208.0/22
194.53.140.0/22
194.110.12.0/22
194.110.242.0/24
213.109.168.0/22
IPv6:
2a00:d1a0::/32
2a03:a960::/29
2a03:fbc0::/29
2a06:2b80::/29
2a09:4b40::/29
2a0a:4e80::/29
2a0a:7a00::/29
2a0a:7e00::/29
2a0a:8600::/29
2a0a:8e00::/29
2a0a:9200::/29
2a0a:9600::/29
2a0a:9a00::/29
2a0a:9e00::/29
2a0a:9f00::/29
2a0a:a600::/29
2a0a:a700::/29
2a0a:b200::/29
2a0a:b600::/29
2a0a:ba00::/29
2a0a:be00::/29
2a0a:c600::/29
2a0a:ce00::/29
2a0a:d200::/29
2a0b:300::/29
2a0b:500::/29
2a0b:3300::/29
2a0b:3700::/29
2a0b:8700::/29
2a0c:fa40::/29
2a0d:5c0::/29
2a0d:4b40::/29
2a0d:4c40::/29
2a0e:1c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209526
Signature Algorithm: sha256WithRSAEncryption
11:6d:0e:ba:ff:ed:24:9e:5a:d9:18:50:64:d2:3b:cc:e5:9c:
9f:53:17:e3:8e:bf:99:f7:ad:86:2a:71:0a:da:3a:4c:1c:9a:
f2:14:13:63:2c:37:a5:1e:0f:19:a6:cd:f4:ef:fd:67:85:32:
35:66:6e:cf:7f:49:f6:41:d7:cc:01:b7:b3:21:9a:8d:37:5f:
dd:c9:bb:d7:77:40:c1:d2:ec:f6:3a:da:38:12:08:59:54:64:
e7:97:5b:67:68:37:08:73:a1:12:2b:c9:3a:d7:0a:45:76:11:
e0:fd:b4:68:9d:5f:71:6a:7a:72:31:a8:94:c0:79:70:ae:12:
f6:2b:78:b6:23:40:78:b6:8d:e7:25:4e:d8:f7:5d:89:cd:80:
e7:50:bf:82:64:ba:01:b2:98:86:75:d9:84:76:54:3c:0b:f9:
30:c9:1d:26:d5:18:26:e6:b5:71:a3:7b:82:d7:d4:b7:4f:36:
8c:f1:71:34:f5:e7:07:47:95:f0:9e:46:88:5e:c9:5a:71:20:
30:44:4d:ca:3b:2d:fb:31:76:5d:34:ae:75:7e:39:a9:82:d8:
f4:9b:ca:18:fb:56:71:df:da:60:46:fa:26:9d:34:f1:c7:9e:
ff:b8:5c:e5:67:3e:83:7b:9f:d5:c6:55:3c:90:bd:d8:25:fa:
c3:8a:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 18:04:03 2025 by rpki-client on console-fra.rpki-client.org