Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
File: YyzYf-q-QHUi4GVT8usFoMFgL78.cer (raw, json)
Hash identifier: aDN/BbNVxbjwzApx39CJ9JMqg+EAWtgAdDakRofU4a0=
Subject key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EE770812381C84CD8B693CE288CF6CE4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Apr 2024 15:04:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.192.0/24
IP: 31.222.243.0/24
IP: 62.68.85.0/24
IP: 80.71.150.0/24
IP: 87.236.150.0/24
IP: 91.213.155.0/24
IP: 91.220.80.0/24
IP: 91.242.226.0/24
IP: 91.247.170.0/24
IP: 95.130.226.0/24
IP: 146.19.51.0/24
IP: 146.19.180.0/24
IP: 176.56.36.0/24
IP: 185.94.67.0/24
IP: 185.251.22.0/24
IP: 194.26.220.0/24
IP: 194.55.170.0/24
IP: 194.104.229.0/24
IP: 212.24.120.0/24
IP: 212.52.18.0/24
IP: 217.28.132.0/24
IP: 2a0d:8b40::/29
IP: 2a11:26c0::/29
IP: 2a11:3d40::/29
IP: 2a11:4080::/29
IP: 2a11:6440::/29
IP: 2a11:8540::/29
IP: 2a11:8c80::/29
IP: 2a11:aa40::/29
IP: 2a11:c080::/29
IP: 2a11:c540::/29
IP: 2a11:c700::/29
IP: 2a12:15c0::/29
IP: 2a12:25c0::/29
IP: 2a12:4500::/29
IP: 2a12:5580::/29
IP: 2a12:6600::/29
IP: 2a12:8800::/29
IP: 2a12:a880::/29
IP: 2a12:e700::/29
IP: 2a12:ed80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:70:81:23:81:c8:4c:d8:b6:93:ce:28:8c:f6:ce:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 15:04:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:6f:a6:55:01:cc:c8:24:c2:33:f9:63:51:
11:3a:9f:2e:68:52:2f:99:d5:94:dd:22:8b:4a:e8:
98:af:4a:f6:7b:d6:0e:26:d7:cf:e1:09:de:04:f7:
b9:25:f3:09:3c:d4:d1:ec:6e:37:50:f8:0a:63:14:
64:05:da:85:83:df:fb:b2:f1:14:2d:dd:4a:28:b8:
9c:00:69:b5:5f:92:75:73:cc:41:0a:fc:f6:7a:db:
88:88:3f:cc:29:f0:75:3e:a1:7e:d1:b4:40:77:28:
e5:7b:49:83:04:24:d7:a2:a0:e6:ad:11:75:0f:c6:
3b:c8:7a:b8:5f:72:5f:27:b8:56:19:1b:3b:6e:5a:
8f:fe:24:8e:f7:a4:25:fd:72:4d:ae:6e:5e:cb:cf:
79:96:6e:94:dc:0e:7f:19:a6:4c:e9:d7:22:a4:2d:
dc:05:4f:fe:a4:4a:7b:fb:7a:86:f5:89:84:ae:2d:
e4:1c:ab:16:c3:5d:7a:16:c2:7f:02:f3:31:a3:87:
a7:03:e8:7d:92:31:59:3a:2f:31:af:93:89:88:b4:
89:9f:ed:31:dd:75:9d:40:5b:e7:a7:86:26:96:d4:
1c:9e:00:9e:f4:59:25:94:a8:ad:40:04:cf:8d:2e:
fb:bf:28:86:78:62:9c:b8:5f:dd:5f:06:12:f9:12:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
31.222.243.0/24
62.68.85.0/24
80.71.150.0/24
87.236.150.0/24
91.213.155.0/24
91.220.80.0/24
91.242.226.0/24
91.247.170.0/24
95.130.226.0/24
146.19.51.0/24
146.19.180.0/24
176.56.36.0/24
185.94.67.0/24
185.251.22.0/24
194.26.220.0/24
194.55.170.0/24
194.104.229.0/24
212.24.120.0/24
212.52.18.0/24
217.28.132.0/24
IPv6:
2a0d:8b40::/29
2a11:26c0::/29
2a11:3d40::/29
2a11:4080::/29
2a11:6440::/29
2a11:8540::/29
2a11:8c80::/29
2a11:aa40::/29
2a11:c080::/29
2a11:c540::/29
2a11:c700::/29
2a12:15c0::/29
2a12:25c0::/29
2a12:4500::/29
2a12:5580::/29
2a12:6600::/29
2a12:8800::/29
2a12:a880::/29
2a12:e700::/29
2a12:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
6d:a7:6a:b1:10:70:75:6f:d3:90:f3:73:5d:c2:d3:2f:9f:e9:
1d:bd:b2:b2:90:bc:7d:84:83:14:32:2e:de:c8:4b:ee:16:82:
6e:02:0b:40:09:9f:3a:05:22:00:db:37:b0:5e:fa:be:9e:f1:
a5:55:6b:33:14:20:f4:f9:a0:41:9b:c9:fa:f8:7e:b8:a2:7f:
0a:e0:07:b3:64:3c:68:09:81:9e:38:e7:b3:5e:45:e7:40:fd:
20:4c:5d:31:a0:d8:94:64:90:36:54:98:91:9f:0c:00:4e:f4:
fb:67:7e:a0:ce:02:72:0a:16:06:b2:5e:58:95:ae:56:f9:48:
9c:4a:c8:85:85:ce:33:39:79:36:d4:ee:1e:3e:66:64:fb:95:
96:6c:a6:3f:68:dd:d1:55:bb:bd:fd:c7:af:19:48:f4:91:95:
bf:45:36:a7:32:73:ca:a6:0e:16:e7:2a:02:c5:85:b0:02:12:
e6:e6:24:3f:82:ad:80:1c:a2:5b:ad:74:7d:b2:29:79:3a:df:
f3:c2:9e:09:e0:67:03:b5:36:7d:dd:ac:c8:62:1b:77:02:a4:
37:e4:59:50:bb:d6:49:d3:91:ed:48:c3:29:72:4a:c6:e0:dc:
a0:ff:55:62:f9:70:16:5a:c5:26:e3:d8:9d:e7:63:7a:24:3a:
e6:fd:17:c6
-----BEGIN CERTIFICATE-----
MIIGjTCCBXWgAwIBAgISAY7ncIEjgchM2LaTziiM9s5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDE2MTUwNDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzJjZDg3ZmVhYmU0MDc1MjJlMDY1NTNmMmViMDVhMGMxNjAyZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gVvplUBzMgkwjP5Y1EROp8uaFIv
mdWU3SKLSuiYr0r2e9YOJtfP4QneBPe5JfMJPNTR7G43UPgKYxRkBdqFg9/7svEU
Ld1KKLicAGm1X5J1c8xBCvz2etuIiD/MKfB1PqF+0bRAdyjle0mDBCTXoqDmrRF1
D8Y7yHq4X3JfJ7hWGRs7blqP/iSO96Ql/XJNrm5ey895lm6U3A5/GaZM6dcipC3c
BU/+pEp7+3qG9YmEri3kHKsWw116FsJ/AvMxo4enA+h9kjFZOi8xr5OJiLSJn+0x
3XWdQFvnp4YmltQcngCe9FkllKitQATPjS77vyiGeGKcuF/dXwYS+RIRgQIDAQAB
o4IDmTCCA5UwHQYDVR0OBBYEFGMs2H/qvkB1IuBlU/LrBaDBYC+/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2ZkZGY0
Ny1mZjY0LTQ0N2EtYjk4Zi01NTEwNDE3M2IxODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZmRkZjQ3
LWZmNjQtNDQ3YS1iOThmLTU1MTA0MTczYjE4MC8xL1l5ellmLXEtUUhVaTRHVlQ4
dXNGb01GZ0w3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBMgYIKwYB
BQUHAQcBAf8EggEhMIIBHTCBhAQCAAEwfgMEAAUqwAMEAB/e8wMEAD5EVQMEAFBH
lgMEAFfslgMEAFvVmwMEAFvcUAMEAFvy4gMEAFv3qgMEAF+C4gMEAJITMwMEAJIT
tAMEALA4JAMEALleQwMEALn7FgMEAMIa3AMEAMI3qgMEAMJo5QMEANQYeAMEANQ0
EgMEANkchDCBkwQCAAIwgYwDBQMqDYtAAwUDKhEmwAMFAyoRPUADBQMqEUCAAwUD
KhFkQAMFAyoRhUADBQMqEYyAAwUDKhGqQAMFAyoRwIADBQMqEcVAAwUDKhHHAAMF
AyoSFcADBQMqEiXAAwUDKhJFAAMFAyoSVYADBQMqEmYAAwUDKhKIAAMFAyoSqIAD
BQMqEucAAwUDKhLtgDANBgkqhkiG9w0BAQsFAAOCAQEAbadqsRBwdW/TkPNzXcLT
L5/pHb2yspC8fYSDFDIu3shL7haCbgILQAmfOgUiANs3sF76vp7xpVVrMxQg9Pmg
QZvJ+vh+uKJ/CuAHs2Q8aAmBnjjns15F50D9IExdMaDYlGSQNlSYkZ8MAE70+2d+
oM4CcgoWBrJeWJWuVvlInErIhYXOMzl5NtTuHj5mZPuVlmymP2jd0VW7vf3HrxlI
9JGVv0U2pzJzyqYOFucqAsWFsAIS5uYkP4KtgByiW610fbIpeTrf88KeCeBnA7U2
fd2syGIbdwKkN+RZULvWSdOR7UjDKXJKxuDcoP9VYvlwFlrFJuPYnedjeiQ65v0X
xg==
-----END CERTIFICATE-----
Generated at Fri May 3 13:48:22 2024 by rpki-client on console-ams.rpki-client.org