Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.cer (raw, json)
Hash identifier: qJ929da1DyWqpcRLrvfd8n/5d/q2yOB1MaxGnmRrvmI=
Subject key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC3154DD43F58096F0C03A8E53670A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50925
IP: 185.188.236.0/22
IP: 2a0b:f680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:31:54:dd:43:f5:80:96:f0:c0:3a:8e:53:67:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:b0:dd:57:5e:df:2a:a2:8e:4c:7a:e0:22:
d7:65:81:c2:80:b1:eb:c3:bc:8f:07:e7:92:29:ac:
9b:fe:84:ef:01:d4:d1:70:07:55:a1:34:50:bb:33:
80:3e:bf:43:21:d1:e8:eb:bf:91:b7:2d:c4:dc:c4:
87:4e:da:08:39:6f:5f:b2:86:c0:ab:7f:41:15:9c:
df:39:a0:17:85:47:04:cb:a6:aa:51:96:5a:82:78:
f2:03:0c:0a:f1:d8:91:3e:93:57:23:c8:9d:3a:ca:
53:8e:7f:0a:d5:56:5e:1c:f3:d9:68:5f:1b:38:44:
78:bd:aa:9e:ba:86:af:f9:d2:a5:aa:04:5a:04:f2:
f4:f2:9b:6f:77:d7:d0:04:1b:c9:34:33:52:75:45:
ac:df:ae:89:dd:32:a0:41:82:a1:f1:a7:e0:be:3d:
d5:b4:da:e9:4b:3e:9f:7a:42:01:47:2e:b9:83:c9:
4a:28:9f:11:a0:cf:41:0f:f6:9b:66:b1:b9:42:b5:
3d:89:94:e5:be:70:a3:87:4a:af:09:6c:11:04:8e:
ba:20:e2:50:21:4b:eb:42:8d:fc:c0:8a:92:73:29:
a6:90:fd:5b:1e:c0:89:0f:01:be:47:0d:3d:65:d7:
60:02:2d:5d:11:8a:73:7b:ac:06:ea:8d:10:a0:30:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.236.0/22
IPv6:
2a0b:f680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50925
Signature Algorithm: sha256WithRSAEncryption
b1:4d:5b:a6:35:51:1d:df:ad:7f:64:63:66:19:4f:c1:bf:f3:
82:29:01:03:c6:f7:2f:a8:f2:6a:7d:aa:e6:ab:62:d4:52:5e:
c4:08:25:25:ba:8f:03:b0:87:ff:a1:b8:d8:97:a0:b2:dd:e2:
8a:cc:06:07:d8:8e:9e:1a:15:54:4b:0a:5b:a1:81:f2:59:a4:
96:7f:6b:ed:0d:5e:7c:93:90:b1:f0:76:61:b7:d6:ec:da:0d:
bc:35:42:bc:d4:12:ae:bd:cd:c9:d9:24:31:40:6d:27:3f:ab:
44:37:54:b0:09:38:d4:73:cb:29:e6:12:61:45:d8:f9:dd:c4:
cd:71:8e:d8:53:76:b4:47:b9:ee:43:73:7b:50:3f:84:1e:d5:
dc:a7:34:d6:3e:05:49:1f:aa:4d:ea:2f:15:07:43:ca:79:b0:
32:8f:33:52:4e:58:a5:3b:c8:55:63:3a:1d:8f:f7:cd:df:ff:
08:87:40:5b:76:60:c4:74:aa:23:df:d2:ca:04:31:77:9d:c3:
81:01:da:d7:5b:3b:e1:aa:ae:ed:24:37:9e:f1:b2:2c:2c:08:
12:c7:1d:fa:98:ae:9f:85:9d:64:e4:bc:65:aa:3c:ce:04:30:
30:5b:7e:74:8f:4a:b0:ff:4c:27:63:78:55:fc:a4:8c:cf:db:
2c:85:0d:99
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQl/DFU3UP1gJbwwDqOU2cKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQ1M2MwOTFmNmMwY2E0YjAyYjFjNGNhMTdiYjY1ZDFkZTE2ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vqw3Vde3yqijkx64CLXZYHCgLHr
w7yPB+eSKayb/oTvAdTRcAdVoTRQuzOAPr9DIdHo67+Rty3E3MSHTtoIOW9fsobA
q39BFZzfOaAXhUcEy6aqUZZagnjyAwwK8diRPpNXI8idOspTjn8K1VZeHPPZaF8b
OER4vaqeuoav+dKlqgRaBPL08ptvd9fQBBvJNDNSdUWs366J3TKgQYKh8afgvj3V
tNrpSz6fekIBRy65g8lKKJ8RoM9BD/abZrG5QrU9iZTlvnCjh0qvCWwRBI66IOJQ
IUvrQo38wIqScymmkP1bHsCJDwG+Rw09ZddgAi1dEYpze6wG6o0QoDCLGQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGxFPAkfbAyksCscTKF7tl0d4WiVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzE5OGRm
Ny03OTkyLTQ0ZGYtYTZjYS1iZWMwZTllZTRhMjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMTk4ZGY3
LTc5OTItNDRkZi1hNmNhLWJlYzBlOWVlNGEyNS8xL2JFVThDUjlzREtTd0t4eE1v
WHUyWFIzaGFKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubzsMA0EAgACMAcDBQMqC/aAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDG7TANBgkqhkiG9w0BAQsFAAOCAQEAsU1bpjVRHd+t
f2RjZhlPwb/zgikBA8b3L6jyan2q5qti1FJexAglJbqPA7CH/6G42Jegst3iiswG
B9iOnhoVVEsKW6GB8lmkln9r7Q1efJOQsfB2YbfW7NoNvDVCvNQSrr3NydkkMUBt
Jz+rRDdUsAk41HPLKeYSYUXY+d3EzXGO2FN2tEe57kNze1A/hB7V3Kc01j4FSR+q
TeovFQdDynmwMo8zUk5YpTvIVWM6HY/3zd//CIdAW3ZgxHSqI9/SygQxd53DgQHa
11s74aqu7SQ3nvGyLCwIEscd+piun4WdZOS8Zao8zgQwMFt+dI9KsP9MJ2N4Vfyk
jM/bLIUNmQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:15 2025 by rpki-client