Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
File: aA4gzPstWJjCFikA0UaAcKcCSVY.cer (raw, json)
Hash identifier: nz7k5diR83ZmKD7fuLwHPZacU1QKkkoxWu15/zgsyUM=
Subject key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4D1AB5B03C375FE75A3225D62101
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.95.44.0/22
IP: 2a01:4520::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4d:1a:b5:b0:3c:37:5f:e7:5a:32:25:d6:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680e20ccfb2d5898c2162900d1468070a7024956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:d7:99:25:82:8b:0c:5b:89:f4:80:b5:3f:
bd:b9:8a:8a:d9:0b:fb:76:d0:97:9e:3c:b5:dd:64:
6e:bb:cb:ee:d6:ab:41:70:16:fd:b0:93:b5:cc:12:
d3:df:fe:20:dc:3e:33:5d:33:68:42:0a:6c:e9:d5:
ce:15:fd:a2:12:98:79:c0:a0:cf:cd:0d:05:40:48:
1a:48:0a:cc:43:68:b8:dc:40:3e:4f:25:2a:78:f3:
75:85:05:28:c9:84:da:26:ac:5f:98:a1:e7:9b:85:
20:95:f9:44:3c:72:22:2f:19:40:ae:8d:af:b7:93:
01:bf:ec:6c:a6:7b:68:34:7e:f2:f3:fc:70:72:37:
ff:3c:a8:db:59:d2:e3:f1:c0:c2:5b:8e:30:29:0f:
dd:fc:ad:a0:77:9e:99:52:c7:7b:cb:b9:25:87:09:
d3:da:fe:c6:8d:0d:f1:b5:fc:d4:31:b9:04:d6:3f:
d6:c3:75:a1:4b:45:75:38:e9:b0:ad:d0:48:21:21:
90:22:d1:15:e5:e1:12:7a:2b:43:46:2f:7a:2b:26:
73:23:60:66:fa:12:d6:7c:3a:95:44:12:cd:c3:60:
9b:a0:e1:bf:df:c3:89:63:2c:ba:2a:5a:d6:ad:6d:
79:11:3b:73:88:c7:bf:3a:43:bb:63:94:59:ee:91:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.44.0/22
IPv6:
2a01:4520::/32
Signature Algorithm: sha256WithRSAEncryption
4f:d3:fb:d7:c1:f7:68:df:76:28:a6:05:35:ee:0c:37:cc:6b:
5f:85:85:98:fc:1a:4c:95:6f:2a:38:af:a8:b1:af:08:bb:25:
5f:9f:31:23:73:b6:f0:45:02:fe:cd:fe:94:35:14:61:e1:14:
16:22:30:7e:62:b2:d7:99:91:ef:81:7f:73:79:05:66:39:b4:
bf:cf:e3:18:c9:c4:a8:ef:83:ec:20:02:8f:9e:54:a1:2e:92:
b0:8d:cb:de:01:4b:ba:d5:cd:43:1e:53:8c:ed:7f:a7:0e:35:
36:f8:63:2a:9a:bc:61:6b:00:36:ca:5c:f1:02:af:91:98:b4:
57:aa:7d:8c:d6:93:c1:30:7e:22:1c:15:c8:76:ab:8a:c8:7c:
28:fd:47:3d:14:50:9c:78:03:74:87:27:9a:b7:05:f7:3d:bc:
20:1d:3a:9b:b3:7e:0c:53:f1:7e:d6:02:c5:87:f6:09:0c:d0:
c9:d3:d0:e9:74:e4:43:5b:a7:66:de:c2:29:76:4e:20:ac:a9:
d3:a8:00:dd:9d:84:ea:61:3b:3f:51:12:e1:69:44:c2:e5:8a:
ca:6d:08:18:4f:59:98:bd:46:a3:40:d0:97:dc:ef:45:9f:17:
7a:91:ed:51:27:4e:ad:c8:0e:6d:8d:fc:e7:99:cd:e8:a7:08:
1b:0f:a0:43
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQfjE0atbA8N1/nWjIl1iEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODBlMjBjY2ZiMmQ1ODk4YzIxNjI5MDBkMTQ2ODA3MGE3MDI0OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzofXmSWCiwxbifSAtT+9uYqK2Qv7
dtCXnjy13WRuu8vu1qtBcBb9sJO1zBLT3/4g3D4zXTNoQgps6dXOFf2iEph5wKDP
zQ0FQEgaSArMQ2i43EA+TyUqePN1hQUoyYTaJqxfmKHnm4UglflEPHIiLxlAro2v
t5MBv+xspntoNH7y8/xwcjf/PKjbWdLj8cDCW44wKQ/d/K2gd56ZUsd7y7klhwnT
2v7GjQ3xtfzUMbkE1j/Ww3WhS0V1OOmwrdBIISGQItEV5eESeitDRi96KyZzI2Bm
+hLWfDqVRBLNw2CboOG/38OJYyy6KlrWrW15ETtziMe/OkO7Y5RZ7pG0lwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGgOIMz7LViYwhYpANFGgHCnAklWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3Lzc5NmY4
Yy1iZGI3LTQ0MWYtYmRiYi0wMzU0MWQyMzE1NzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNzk2Zjhj
LWJkYjctNDQxZi1iZGJiLTAzNTQxZDIzMTU3NC8xL2FBNGd6UHN0V0pqQ0Zpa0Ew
VWFBY0tjQ1NWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuV8sMA0EAgACMAcDBQAqAUUgMA0GCSqGSIb3
DQEBCwUAA4IBAQBP0/vXwfdo33YopgU17gw3zGtfhYWY/BpMlW8qOK+osa8IuyVf
nzEjc7bwRQL+zf6UNRRh4RQWIjB+YrLXmZHvgX9zeQVmObS/z+MYycSo74PsIAKP
nlShLpKwjcveAUu61c1DHlOM7X+nDjU2+GMqmrxhawA2ylzxAq+RmLRXqn2M1pPB
MH4iHBXIdquKyHwo/Uc9FFCceAN0hyeatwX3PbwgHTqbs34MU/F+1gLFh/YJDNDJ
09DpdORDW6dm3sIpdk4grKnTqADdnYTqYTs/URLhaUTC5YrKbQgYT1mYvUajQNCX
3O9Fnxd6ke1RJ06tyA5tjfznmc3opwgbD6BD
-----END CERTIFICATE-----
Generated at Mon Apr 14 07:18:30 2025 by rpki-client