Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
File: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer (raw, json)
Hash identifier: +hpmZX12czfjvofMITHAu/iiC2P13JrsW8Z8o/lu5p8=
Subject key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B65C5B2A7BA144E1732B2DE49A0B94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57698
AS: 211360
IP: 193.84.108.0/24
IP: 2a10:ba80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5c:5b:2a:7b:a1:44:e1:73:2b:2d:e4:9a:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:36:09:91:ef:74:8b:73:69:bb:d2:99:8a:
40:1c:8f:08:90:89:ab:7c:f9:5e:0d:df:33:6d:24:
74:cc:9b:15:64:8c:c8:c2:33:3c:c1:48:e0:09:86:
d5:f8:6d:72:27:82:69:a8:07:9c:7f:2c:2b:19:1d:
96:5e:cb:e1:24:a9:9b:88:9f:7b:26:0d:16:b7:34:
86:3e:e0:a9:90:2a:0d:69:ce:42:f6:ef:45:c0:2e:
72:8b:30:df:5b:30:21:14:35:b6:2e:71:60:c7:58:
e6:95:27:0f:90:8f:63:9b:3e:05:18:9f:c1:bb:75:
74:0f:b1:4d:aa:ed:a6:f8:87:06:2c:46:aa:2b:1b:
76:ec:36:a4:c4:80:27:a0:0d:8b:c8:a9:7e:7a:06:
72:fe:97:2a:d1:3c:c7:f3:36:61:5d:88:db:46:d5:
8e:a9:2c:df:3f:ff:d2:bb:25:9a:ee:4e:49:c9:97:
5b:9f:3a:36:34:a8:dc:20:ed:0b:8a:b2:5a:cf:0c:
8b:a3:d8:59:b8:63:3f:fd:55:ac:2e:f7:48:5c:bb:
ae:93:34:6e:11:ef:ee:0e:cd:e1:a5:03:b3:67:7d:
5d:0c:3f:dd:d6:11:9e:f6:64:13:93:04:0b:6a:22:
94:32:25:89:01:dd:b9:ae:35:4d:c0:2c:2a:3d:bc:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.108.0/24
IPv6:
2a10:ba80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57698
211360
Signature Algorithm: sha256WithRSAEncryption
ae:88:92:11:bb:04:93:5d:87:ff:1d:9e:68:04:6f:5a:e8:96:
62:1f:94:3d:13:51:b7:10:06:4e:fa:93:e2:b4:7f:9f:5f:4a:
a8:a1:53:48:d4:ed:0b:99:33:d1:56:7b:af:55:05:5f:62:f8:
86:07:4a:1f:5e:43:7a:d9:c4:4c:98:19:56:3d:23:9a:6a:a7:
f2:67:ba:8d:fc:a8:01:9e:1a:12:a1:83:5a:f9:8c:26:a0:7a:
e5:6e:cd:01:de:21:a5:dd:bf:fa:ad:63:4e:cc:6b:8d:0b:81:
16:80:6a:ae:d5:20:eb:f3:02:f6:1f:fd:29:f8:85:e4:dd:ef:
c8:50:8e:fa:7f:5f:d5:3a:ac:ca:a1:95:92:01:e8:35:bc:71:
04:77:2e:7b:4f:53:68:b6:64:93:f8:0f:a7:6c:1c:8f:72:7f:
8e:0f:76:c1:dc:e4:41:03:0b:3e:5e:ea:4f:a1:b1:dd:bf:4c:
0e:4f:f1:1c:0f:1d:e0:6c:9e:f4:38:13:a2:33:f0:a6:27:56:
cb:65:69:da:4e:cd:68:bd:14:da:50:0a:82:e0:2e:ca:78:ee:
9b:82:b8:58:8e:dc:b6:a5:01:ce:dc:55:29:5b:76:91:ab:ea:
a9:8d:aa:eb:6b:b7:0c:f0:c9:f4:40:3c:be:40:1e:33:b3:58:
b0:13:34:88
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQntlxbKnuhROFzKy3kmguUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDIxY2I0YmFhMTU4NjJkMWI1NzczYmYyYmU2MGNhNWY0ZmMyNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzts2CZHvdItzabvSmYpAHI8IkImr
fPleDd8zbSR0zJsVZIzIwjM8wUjgCYbV+G1yJ4JpqAecfywrGR2WXsvhJKmbiJ97
Jg0WtzSGPuCpkCoNac5C9u9FwC5yizDfWzAhFDW2LnFgx1jmlScPkI9jmz4FGJ/B
u3V0D7FNqu2m+IcGLEaqKxt27DakxIAnoA2LyKl+egZy/pcq0TzH8zZhXYjbRtWO
qSzfP//SuyWa7k5JyZdbnzo2NKjcIO0LirJazwyLo9hZuGM//VWsLvdIXLuukzRu
Ee/uDs3hpQOzZ31dDD/d1hGe9mQTkwQLaiKUMiWJAd25rjVNwCwqPbyIEQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFP0hy0uqFYYtG1dzvyvmDKX0/CTUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzMyNjYw
Ni0xNGJhLTQ0MzYtOTk4NS1iZTU1MjBhNWM4MjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMzI2NjA2
LTE0YmEtNDQzNi05OTg1LWJlNTUyMGE1YzgyMS8xL19TSExTNm9WaGkwYlYzT19L
LVlNcGZUOEpOUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwVRsMA0EAgACMAcDBQMqELqAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDhYgIDAzmgMA0GCSqGSIb3DQEBCwUAA4IBAQCuiJIR
uwSTXYf/HZ5oBG9a6JZiH5Q9E1G3EAZO+pPitH+fX0qooVNI1O0LmTPRVnuvVQVf
YviGB0ofXkN62cRMmBlWPSOaaqfyZ7qN/KgBnhoSoYNa+YwmoHrlbs0B3iGl3b/6
rWNOzGuNC4EWgGqu1SDr8wL2H/0p+IXk3e/IUI76f1/VOqzKoZWSAeg1vHEEdy57
T1NotmST+A+nbByPcn+OD3bB3ORBAws+XupPobHdv0wOT/EcDx3gbJ70OBOiM/Cm
J1bLZWnaTs1ovRTaUAqC4C7KeO6bgrhYjty2pQHO3FUpW3aRq+qpjarra7cM8Mn0
QDy+QB4zs1iwEzSI
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:53:29 2025 by rpki-client