Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
File: b1xXEvu82DJBnUxYhK47w8Shbns.cer (raw, json)
Hash identifier: YZ/SAsDd5SIEP62ck11wi8WQIcVZQXi7YCaFPt/g8M0=
Subject key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143784881562DCDA7ED626852E8BF17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38917
AS: 198541
IP: 81.162.0.0 -- 81.162.23.255
IP: 87.255.224.0/19
IP: 91.219.72.0/22
IP: 91.233.28.0/22
IP: 91.236.60.0/22
IP: 109.111.64.0/19
IP: 149.255.16.0/22
IP: 176.110.160.0 -- 176.110.215.255
IP: 185.24.112.0/22
IP: 185.86.112.0/20
IP: 188.0.192.0/19
IP: 194.32.156.0/22
IP: 217.175.32.0/20
IP: 2a04:2cc0::/29
IP: 2a07:3cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:78:48:81:56:2d:cd:a7:ed:62:68:52:e8:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:9b:43:cf:ef:9c:77:b2:03:1e:6c:29:9b:
a2:32:46:f3:a2:ce:2a:b6:b7:f8:1b:72:2a:49:91:
7c:f5:67:5c:c2:ba:ff:92:44:62:25:18:0d:1c:79:
64:a2:b9:4d:6b:61:37:cf:dd:ab:e0:f2:d5:3d:e0:
4b:b2:48:b0:d0:0c:b6:37:ee:5a:d5:e9:3c:11:3e:
4f:45:ec:14:59:97:03:ce:03:37:75:03:a3:e2:e0:
0f:da:f1:9e:f9:0c:7b:32:84:30:62:b3:a6:a7:e2:
53:bc:96:87:b9:08:dc:18:ee:f5:9d:81:59:17:4e:
ac:0f:e8:70:59:af:7d:36:1f:2c:ba:b0:4a:7d:79:
e7:4d:ea:91:53:9b:91:f3:26:8b:b1:9c:83:d7:22:
11:83:b9:a8:0a:7a:7e:e7:83:40:e7:b6:72:5b:88:
76:12:ff:61:0c:bd:12:63:13:d4:ff:ea:12:b8:a1:
8f:9f:2c:60:b4:60:3d:14:57:94:8e:ef:72:91:f2:
d6:5b:03:d6:b2:25:c3:f0:5a:d9:9b:bd:f7:85:ae:
38:91:15:1c:64:c1:93:2c:44:f5:93:f4:61:08:ec:
74:68:26:a5:5c:33:f2:8b:99:32:bc:0d:cd:05:15:
0f:96:21:85:57:e1:ac:15:71:ee:32:b1:0e:ae:c6:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.0.0-81.162.23.255
87.255.224.0/19
91.219.72.0/22
91.233.28.0/22
91.236.60.0/22
109.111.64.0/19
149.255.16.0/22
176.110.160.0-176.110.215.255
185.24.112.0/22
185.86.112.0/20
188.0.192.0/19
194.32.156.0/22
217.175.32.0/20
IPv6:
2a04:2cc0::/29
2a07:3cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38917
198541
Signature Algorithm: sha256WithRSAEncryption
aa:b9:e8:f6:8d:9f:58:08:d7:03:65:f5:fc:4c:21:91:10:7b:
5d:5f:4d:fc:31:a6:20:fc:7b:5e:53:43:2b:7e:10:88:36:1e:
86:3d:cb:30:f4:7c:57:9d:53:da:33:1e:aa:e8:f6:46:9f:36:
73:7a:40:a9:f4:e7:1a:9a:f1:a3:ea:a0:a8:0c:71:cb:32:bd:
b0:01:d9:ad:09:b8:99:53:9a:21:a6:24:18:14:25:61:62:dd:
0e:cf:a7:96:81:3f:f7:80:2d:bf:01:1e:98:04:4c:7e:41:3f:
e9:76:c2:d6:76:35:b0:d9:d9:31:4f:dc:82:36:1f:9c:2a:c6:
6e:49:85:0c:d9:64:4e:fa:92:02:77:34:37:03:1a:ac:b4:1c:
8e:92:a0:72:05:05:37:91:10:c6:25:f6:50:6d:6f:0b:0c:d1:
f9:3d:9f:ec:d2:46:79:2a:83:3f:12:db:b3:2f:7c:f4:f8:19:
d8:21:83:51:17:7a:43:4f:e6:7f:4f:d8:5c:0e:f0:82:aa:b7:
9f:ad:1c:48:bf:62:78:98:18:e1:0d:94:53:0f:a5:9f:37:9d:
a7:b2:ef:e6:88:c2:fa:6b:28:b4:22:0b:bc:73:d6:4d:e3:37:
b0:de:de:cb:ac:e6:f7:34:b2:b1:87:43:a7:83:1d:8d:ef:df:
c9:2d:fc:ed
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgISAZQhQ3hIgVYtzaftYmhS6L8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjVjNTcxMmZiYmNkODMyNDE5ZDRjNTg4NGFlM2JjM2M0YTE2ZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtibQ8/vnHeyAx5sKZuiMkbzos4q
trf4G3IqSZF89Wdcwrr/kkRiJRgNHHlkorlNa2E3z92r4PLVPeBLskiw0Ay2N+5a
1ek8ET5PRewUWZcDzgM3dQOj4uAP2vGe+Qx7MoQwYrOmp+JTvJaHuQjcGO71nYFZ
F06sD+hwWa99Nh8surBKfXnnTeqRU5uR8yaLsZyD1yIRg7moCnp+54NA57ZyW4h2
Ev9hDL0SYxPU/+oSuKGPnyxgtGA9FFeUju9ykfLWWwPWsiXD8FrZm733ha44kRUc
ZMGTLET1k/RhCOx0aCalXDPyi5kyvA3NBRUPliGFV+GsFXHuMrEOrsYv2QIDAQAB
o4IDEzCCAw8wHQYDVR0OBBYEFG9cVxL7vNgyQZ1MWISuO8PEoW57MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2I0MDNj
Yy00ZTZjLTRmZTktODNhMS03NTUwNTI5ZDg0N2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYjQwM2Nj
LTRlNmMtNGZlOS04M2ExLTc1NTA1MjlkODQ3YS8xL2IxeFhFdnU4MkRKQm5VeFlo
SzQ3dzhTaGJucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGMBggrBgEF
BQcBBwEB/wR9MHswYwQCAAEwXTALAwMBUaIDBANRohADBAVX/+ADBAJb20gDBAJb
6RwDBAJb7DwDBAVtb0ADBAKV/xAwDAMEBbBuoAMEA7Bu0AMEArkYcAMEBLlWcAME
BbwAwAMEAsIgnAMEBNmvIDAUBAIAAjAOAwUDKgQswAMFAyoHPMAwHwYIKwYBBQUH
AQgBAf8EEDAOoAwwCgIDAJgFAgMDB40wDQYJKoZIhvcNAQELBQADggEBAKq56PaN
n1gI1wNl9fxMIZEQe11fTfwxpiD8e15TQyt+EIg2HoY9yzD0fFedU9ozHqro9kaf
NnN6QKn05xqa8aPqoKgMccsyvbAB2a0JuJlTmiGmJBgUJWFi3Q7Pp5aBP/eALb8B
HpgETH5BP+l2wtZ2NbDZ2TFP3II2H5wqxm5JhQzZZE76kgJ3NDcDGqy0HI6SoHIF
BTeREMYl9lBtbwsM0fk9n+zSRnkqgz8S27MvfPT4Gdghg1EXekNP5n9P2FwO8IKq
t5+tHEi/YniYGOENlFMPpZ83naey7+aIwvprKLQiC7xz1k3jN7De3sus5vc0srGH
Q6eDHY3v38kt/O0=
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:36:22 2025 by rpki-client