Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
File: _0JvGbpnvIneWubfSHwcjB51Lic.cer (raw, json)
Hash identifier: 8NFX7lWdQOYtHbvBIw63qWO+1hJ86ne34gq0gLzC5jI=
Subject key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195815461923E94F5B21DF30EFA4D89766D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 10 Mar 2025 18:32:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56884
IP: 37.140.223.0/24
IP: 62.122.188.0/24
IP: 62.204.37.0/24
IP: 77.246.240.0/24
IP: 84.246.111.0/24
IP: 89.248.71.0/24
IP: 91.247.178.0/24
IP: 94.124.72.0/24
IP: 176.97.213.0/24
IP: 178.23.188.0/24
IP: 185.251.19.0/24
IP: 188.244.113.0/24
IP: 194.26.223.0/24
IP: 212.23.210.0/24
IP: 213.5.129.0/24
IP: 213.109.198.0/24
IP: 213.232.252.0/24
IP: 2a05:f300::/29
IP: 2a11:a100::/29
IP: 2a12:4b40::/29
IP: 2a13:8e00::/29
IP: 2a13:9200::/29
IP: 2a13:9300::/29
IP: 2a13:a700::/29
IP: 2a13:b100::/29
IP: 2a13:b500::/29
IP: 2a13:b700::/29
IP: 2a13:b900::/29
IP: 2a13:c400::/29
IP: 2a13:c800::/29
IP: 2a13:da00::/29
IP: 2a13:e200::/29
IP: 2a13:e400::/29
IP: 2a13:fe00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 08:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:54:61:92:3e:94:f5:b2:1d:f3:0e:fa:4d:89:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 18:32:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:92:ce:34:54:89:cb:02:cd:9d:34:fd:c8:
ba:5c:b0:d6:c3:34:e2:df:a5:49:be:98:8d:b1:64:
95:1c:1c:ab:8f:3c:7a:36:19:63:ae:1a:f9:e4:8e:
0b:2a:69:6a:63:fd:21:2b:b3:ce:15:42:63:a0:eb:
7d:b0:29:8b:16:24:8c:ae:3c:89:6a:d5:f4:7c:f2:
34:9d:de:12:47:90:43:14:4b:51:b6:9a:c1:fc:85:
61:58:84:7a:e2:43:66:34:7a:a3:3b:04:c2:f7:69:
78:9f:d5:c4:6d:86:1e:2a:56:66:d5:6b:8b:c5:17:
2a:c7:cc:6c:32:61:7a:5d:3e:8a:bd:c1:9c:1c:7d:
97:c0:66:d2:b5:31:44:12:1c:f9:71:59:7f:91:21:
da:64:8b:1a:66:63:2a:ed:a3:50:8d:1f:c8:69:c0:
90:c7:dd:48:c4:2e:4a:97:84:34:49:c7:96:66:9f:
be:f0:56:04:f6:8c:1d:cb:d8:2d:b6:ca:47:9d:4b:
f6:39:a9:0b:91:84:52:43:0e:49:9e:36:8c:9d:95:
a7:d0:6b:7d:b6:42:1d:12:98:c4:45:ea:dd:52:74:
30:d2:5a:f8:c5:b1:27:f6:f0:72:e7:a8:2c:2f:4e:
fb:a8:1d:cb:b5:91:7c:83:34:a7:61:70:03:7d:bf:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.223.0/24
62.122.188.0/24
62.204.37.0/24
77.246.240.0/24
84.246.111.0/24
89.248.71.0/24
91.247.178.0/24
94.124.72.0/24
176.97.213.0/24
178.23.188.0/24
185.251.19.0/24
188.244.113.0/24
194.26.223.0/24
212.23.210.0/24
213.5.129.0/24
213.109.198.0/24
213.232.252.0/24
IPv6:
2a05:f300::/29
2a11:a100::/29
2a12:4b40::/29
2a13:8e00::/29
2a13:9200::/29
2a13:9300::/29
2a13:a700::/29
2a13:b100::/29
2a13:b500::/29
2a13:b700::/29
2a13:b900::/29
2a13:c400::/29
2a13:c800::/29
2a13:da00::/29
2a13:e200::/29
2a13:e400::/29
2a13:fe00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56884
Signature Algorithm: sha256WithRSAEncryption
69:79:24:6e:3c:12:e6:35:98:fc:3a:85:84:7c:7b:d5:49:aa:
9a:c3:ee:9d:44:e0:80:5a:a7:cf:07:f0:f6:f1:c2:f1:ff:86:
a6:b0:77:7c:77:11:c2:1b:c0:b5:cb:ed:0b:74:ec:ef:25:dc:
08:ed:6c:0c:7f:73:68:1a:08:29:ef:d1:64:31:7e:2e:7d:d9:
b7:70:46:8f:6d:6f:0b:34:12:7a:ae:b4:89:62:44:a2:7e:b9:
12:5f:b4:0c:01:c5:b2:71:fd:c3:02:f8:60:97:e6:85:64:44:
cd:fe:b5:08:a2:c2:3c:96:c9:a2:09:6e:70:5a:49:6f:28:46:
01:c4:01:45:ae:33:3c:57:80:a2:aa:62:cd:e7:ac:d2:d0:94:
44:9a:8f:61:5f:c0:7f:b2:23:3c:9f:18:e7:3e:f5:c8:43:3c:
8f:14:21:2c:dc:84:d1:13:9c:f5:bf:12:e8:60:d3:7c:94:d0:
2e:50:ae:f5:dd:bf:f2:96:53:e0:82:28:47:51:79:ac:3e:84:
d8:71:69:12:3c:e4:ff:90:bc:a3:69:47:ce:d8:b5:34:c3:76:
98:80:6b:7b:1f:86:b8:ec:c3:82:5c:4b:e4:70:4d:56:a0:c3:
2b:8c:58:a2:36:c1:08:d3:8a:e2:d8:88:de:44:38:03:8d:36:
0a:18:60:29
-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgISAZWBVGGSPpT1sh3zDvpNiXZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzEwMTgzMjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjQyNmYxOWJhNjdiYzg5ZGU1YWU2ZGY0ODdjMWM4YzFlNzUyZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzSSzjRUicsCzZ00/ci6XLDWwzTi
36VJvpiNsWSVHByrjzx6Nhljrhr55I4LKmlqY/0hK7POFUJjoOt9sCmLFiSMrjyJ
atX0fPI0nd4SR5BDFEtRtprB/IVhWIR64kNmNHqjOwTC92l4n9XEbYYeKlZm1WuL
xRcqx8xsMmF6XT6KvcGcHH2XwGbStTFEEhz5cVl/kSHaZIsaZmMq7aNQjR/IacCQ
x91IxC5Kl4Q0SceWZp++8FYE9owdy9gttspHnUv2OakLkYRSQw5JnjaMnZWn0Gt9
tkIdEpjERerdUnQw0lr4xbEn9vBy56gsL077qB3LtZF8gzSnYXADfb+0bQIDAQAB
o4IDnzCCA5swHQYDVR0OBBYEFP9Cbxm6Z7yJ3lrm30h8HIwedS4nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ2OGIw
ODFlLWJhOTMtNDY1Zi05YjZlLTdmYmQ2M2JkZmY2My8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDY4
YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRmZjYzLzAvRkY0MjZGMTlCQTY3
QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjCCAQAGCCsGAQUFBwEHAQH/BIHwMIHtMGwEAgAB
MGYDBAAljN8DBAA+erwDBAA+zCUDBABN9vADBABU9m8DBABZ+EcDBABb97IDBABe
fEgDBACwYdUDBACyF7wDBAC5+xMDBAC89HEDBADCGt8DBADUF9IDBADVBYEDBADV
bcYDBADV6PwwfQQCAAIwdwMFAyoF8wADBQMqEaEAAwUDKhJLQAMFAyoTjgADBQMq
E5IAAwUDKhOTAAMFAyoTpwADBQMqE7EAAwUDKhO1AAMFAyoTtwADBQMqE7kAAwUD
KhPEAAMFAyoTyAADBQMqE9oAAwUDKhPiAAMFAyoT5AADBQMqE/4AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDeNDANBgkqhkiG9w0BAQsFAAOCAQEAaXkkbjwS5jWY
/DqFhHx71UmqmsPunUTggFqnzwfw9vHC8f+GprB3fHcRwhvAtcvtC3Ts7yXcCO1s
DH9zaBoIKe/RZDF+Ln3Zt3BGj21vCzQSeq60iWJEon65El+0DAHFsnH9wwL4YJfm
hWREzf61CKLCPJbJoglucFpJbyhGAcQBRa4zPFeAoqpizees0tCURJqPYV/Af7Ij
PJ8Y5z71yEM8jxQhLNyE0ROc9b8S6GDTfJTQLlCu9d2/8pZT4IIoR1F5rD6E2HFp
Ejzk/5C8o2lHzti1NMN2mIBrex+GuOzDglxL5HBNVqDDK4xYojbBCNOK4tiI3kQ4
A402ChhgKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 10:35:55 2025 by rpki-client