Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer (raw, json)
Hash identifier: A30FPgLVmjqba1A44EAalfEaqMDJ1CS532erj8lkLOo=
Subject key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB551EA3EB7EBF34874766AF5EC9BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.28.116.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:55:1e:a3:eb:7e:bf:34:87:47:66:af:5e:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce3fb867861daafd781279897fe25a8eb371468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:96:56:90:d7:d6:0a:4a:5d:03:25:19:e4:
38:a7:b4:0f:16:70:ae:86:b5:55:46:b0:47:6e:f7:
2c:53:94:da:7c:e8:9d:cc:20:69:a1:99:49:0c:0e:
4f:10:0f:d9:68:ef:19:1e:d3:49:ab:36:8a:2b:56:
e6:85:2f:17:ee:7f:1e:14:05:80:d1:95:61:16:c7:
ee:0c:97:19:18:bd:5f:30:50:6c:4b:0a:20:ca:9a:
70:3a:0f:a8:94:02:0a:a1:93:99:9e:a4:71:8e:63:
28:e7:7e:9f:53:be:06:47:49:a2:48:17:f3:ff:3d:
f5:da:f9:17:51:13:c7:b9:f1:e2:e7:be:be:d7:8e:
14:5f:26:9a:6d:23:b1:6c:37:d5:97:40:83:43:15:
a7:88:2b:a1:cb:8a:19:3d:75:3b:14:33:32:70:ae:
fd:45:70:6a:bc:58:81:0f:21:2e:82:e4:bd:43:f1:
77:fe:fe:51:ca:bc:70:d1:ab:a3:d5:8b:69:8f:3f:
fc:73:eb:5e:f8:66:d6:3b:26:c8:2d:d3:79:34:42:
19:2b:c6:9e:b9:fa:93:5f:bb:b3:24:39:07:1d:12:
e5:73:1e:45:4b:3a:21:b2:20:db:ac:69:1a:ee:c2:
ff:95:5c:b8:ff:32:ba:86:0d:e5:16:9e:7d:e2:21:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.116.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fd:2b:f2:29:3b:e0:78:df:b9:34:53:a3:14:53:86:78:c6:
1b:6f:a9:4e:fc:f3:3b:f6:ca:c1:54:8a:ad:08:3b:91:fe:ce:
18:99:c6:83:66:0e:5b:43:73:55:e0:5e:f0:ee:c2:c7:7e:52:
d9:dd:5b:fe:2e:9d:64:81:42:a3:15:83:c1:c3:81:27:55:58:
44:5e:d6:f4:2c:f0:cd:ee:f0:3b:62:1d:4c:33:b3:c6:c8:ef:
ec:42:e1:dd:c3:e4:35:7d:0a:b0:94:fe:89:6e:a2:64:bd:d8:
1c:69:8a:54:26:b2:9a:45:c3:40:57:4d:45:92:53:14:6c:c1:
7f:2e:81:b2:8e:75:70:be:91:ba:1d:a7:ba:2b:b9:5e:1b:03:
40:09:98:09:97:a6:09:2f:b0:bd:18:c2:12:69:0e:22:29:96:
d9:33:2b:7c:23:3b:d9:81:5d:7a:09:69:c5:de:d0:50:72:d3:
82:2c:b2:83:15:db:75:3f:9c:da:bc:75:91:cc:6a:d1:e6:04:
da:94:fb:f1:d4:6d:de:47:fe:5e:27:c9:06:3b:28:08:a8:49:
00:fc:10:73:29:b7:65:c2:2d:da:a9:07:09:13:69:4d:af:c8:
29:af:6e:27:25:49:40:b3:0f:e5:d4:cc:0d:8d:34:7f:09:54:
f3:5d:6c:20
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQi+1Ueo+t+vzSHR2avXsm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2UzZmI4Njc4NjFkYWFmZDc4MTI3OTg5N2ZlMjVhOGViMzcxNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV6WVpDX1gpKXQMlGeQ4p7QPFnCu
hrVVRrBHbvcsU5TafOidzCBpoZlJDA5PEA/ZaO8ZHtNJqzaKK1bmhS8X7n8eFAWA
0ZVhFsfuDJcZGL1fMFBsSwogyppwOg+olAIKoZOZnqRxjmMo536fU74GR0miSBfz
/z312vkXURPHufHi576+144UXyaabSOxbDfVl0CDQxWniCuhy4oZPXU7FDMycK79
RXBqvFiBDyEuguS9Q/F3/v5Ryrxw0auj1Ytpjz/8c+te+GbWOybILdN5NEIZK8ae
ufqTX7uzJDkHHRLlcx5FSzohsiDbrGka7sL/lVy4/zK6hg3lFp594iF5fwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGzj+4Z4Ydqv14EnmJf+JajrNxRoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2MzZjk5
NS04NmVmLTRhNjctYWNhYy1lNDM5MWZiY2FmMTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvYzNmOTk1
LTg2ZWYtNGE2Ny1hY2FjLWU0MzkxZmJjYWYxNC8xL2JPUDdobmhoMnFfWGdTZVls
XzRscU9zM0ZHZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuRx0MA0GCSqGSIb3DQEBCwUAA4IBAQBh/Svy
KTvgeN+5NFOjFFOGeMYbb6lO/PM79srBVIqtCDuR/s4YmcaDZg5bQ3NV4F7w7sLH
flLZ3Vv+Lp1kgUKjFYPBw4EnVVhEXtb0LPDN7vA7Yh1MM7PGyO/sQuHdw+Q1fQqw
lP6JbqJkvdgcaYpUJrKaRcNAV01FklMUbMF/LoGyjnVwvpG6Hae6K7leGwNACZgJ
l6YJL7C9GMISaQ4iKZbZMyt8IzvZgV16CWnF3tBQctOCLLKDFdt1P5zavHWRzGrR
5gTalPvx1G3eR/5eJ8kGOygIqEkA/BBzKbdlwi3aqQcJE2lNr8gpr24nJUlAsw/l
1MwNjTR/CVTzXWwg
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:34 2025 by rpki-client