Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer (raw, json)
Hash identifier: 9vQpQLcygvU34ElrPrZYs54YZYgROJCQpFm+GS5GF3w=
Subject key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC2F7C1FF83AA7708CF52EF3983E54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2130
AS: 22683
IP: 130.138.0.0 -- 130.141.255.255
IP: 130.143.0.0 -- 130.145.255.255
IP: 130.147.0.0/16
IP: 144.54.0.0/16
IP: 149.59.0.0/16
IP: 161.83.0.0 -- 161.85.255.255
IP: 161.88.0.0/16
IP: 161.92.0.0/16
IP: 167.81.0.0/16
IP: 192.33.131.0/24
IP: 192.68.31.0 -- 192.68.39.255
IP: 192.68.48.0 -- 192.68.50.255
IP: 192.92.108.0/24
IP: 192.101.81.0 -- 192.101.90.255
IP: 192.109.128.0/24
IP: 193.25.48.0/20
IP: 2a02:20e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2f:7c:1f:f8:3a:a7:70:8c:f5:2e:f3:98:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7015ed275005408d2a86a2303701744430eda34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:38:e0:74:f5:8d:e8:6a:6f:2e:ce:12:57:
bf:25:0c:0c:4d:2e:0d:d2:a1:b6:30:3c:8e:17:18:
37:98:c5:ac:fb:b6:d8:d2:bb:1e:33:c9:16:69:05:
a2:21:e4:cc:07:4d:28:c7:43:cb:c6:3e:a5:f8:8e:
a4:b8:ad:d9:01:11:58:cf:a3:a5:76:fe:f6:6e:5b:
a1:54:cd:8f:eb:e9:d6:25:87:38:89:20:b7:2d:79:
5f:59:0f:e0:4e:11:ad:c4:f1:48:e3:91:a1:e1:e1:
f3:6d:49:2e:b0:c7:a8:e6:11:6d:d0:a5:79:1c:3c:
42:ab:f5:18:e0:be:bf:9e:3a:02:37:6c:d1:5c:c8:
b9:eb:48:a3:0c:7a:40:65:16:54:30:e8:b6:8b:a0:
5f:79:68:07:c2:ce:02:8c:f4:c6:59:57:e3:11:31:
da:24:9b:02:62:db:0e:6e:f5:bc:bd:79:6c:4d:26:
78:13:62:95:d2:8e:18:5b:23:b1:8c:cb:5a:99:94:
f4:ec:d5:9b:ee:21:48:0b:cb:c3:d3:71:7b:26:0c:
5f:6a:e7:34:46:fa:d6:4f:83:61:c6:46:31:76:60:
d9:f5:4d:bd:58:55:4c:c6:42:c3:96:89:f0:05:b7:
99:c2:4e:8e:83:78:db:d0:c5:bf:18:01:03:80:01:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.138.0.0-130.141.255.255
130.143.0.0-130.145.255.255
130.147.0.0/16
144.54.0.0/16
149.59.0.0/16
161.83.0.0-161.85.255.255
161.88.0.0/16
161.92.0.0/16
167.81.0.0/16
192.33.131.0/24
192.68.31.0-192.68.39.255
192.68.48.0-192.68.50.255
192.92.108.0/24
192.101.81.0-192.101.90.255
192.109.128.0/24
193.25.48.0/20
IPv6:
2a02:20e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2130
22683
Signature Algorithm: sha256WithRSAEncryption
32:2c:29:09:16:39:c6:8e:5b:0b:7f:13:b5:6b:67:c8:14:1f:
6d:dd:bd:bd:95:7a:c3:78:ad:f2:a2:fa:e6:8b:6b:85:2e:08:
6a:b6:04:7f:2e:b6:07:c3:ac:b1:ce:cd:d1:84:bf:c7:9a:bc:
4a:80:8c:a9:b0:ac:54:77:47:3e:4d:2a:0a:ed:62:aa:71:3d:
c6:13:b6:4e:f3:38:fc:14:77:ae:f7:bb:a2:f7:e1:91:e4:d1:
62:ea:7a:33:0a:09:e0:c9:ba:61:67:a9:82:a3:1a:e3:94:af:
43:0a:08:6b:bc:9d:be:f1:d2:a1:c8:1a:bb:f7:d2:4a:52:35:
d5:e3:bb:b0:b6:50:25:80:55:41:a1:66:ca:af:d5:c4:e5:00:
58:fd:38:96:c1:92:d3:b0:28:2b:63:1b:89:87:2f:bf:d5:85:
77:9a:46:2f:8a:58:5f:31:ed:c3:62:7d:99:10:e4:43:f0:fe:
19:6f:03:92:d0:bc:aa:0c:19:ac:4b:92:c2:93:0b:4f:0f:7c:
d7:c2:23:be:5b:da:f9:e9:2d:9e:43:e0:a9:f1:c9:6d:18:56:
8c:ea:e3:96:03:7f:8d:11:40:aa:83:77:cf:32:17:67:8f:b8:
64:6b:1e:b8:1d:30:8d:c9:b2:00:74:41:0b:73:87:c2:e5:42:
07:29:d4:ba
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgISAZQi/C98H/g6p3CM9S7zmD5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDE1ZWQyNzUwMDU0MDhkMmE4NmEyMzAzNzAxNzQ0NDMwZWRhMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X444HT1jehqby7OEle/JQwMTS4N
0qG2MDyOFxg3mMWs+7bY0rseM8kWaQWiIeTMB00ox0PLxj6l+I6kuK3ZARFYz6Ol
dv72bluhVM2P6+nWJYc4iSC3LXlfWQ/gThGtxPFI45Gh4eHzbUkusMeo5hFt0KV5
HDxCq/UY4L6/njoCN2zRXMi560ijDHpAZRZUMOi2i6BfeWgHws4CjPTGWVfjETHa
JJsCYtsObvW8vXlsTSZ4E2KV0o4YWyOxjMtamZT07NWb7iFIC8vD03F7Jgxfauc0
RvrWT4NhxkYxdmDZ9U29WFVMxkLDlonwBbeZwk6Og3jb0MW/GAEDgAG4fQIDAQAB
o4IDNTCCAzEwHQYDVR0OBBYEFHAV7SdQBUCNKoaiMDcBdEQw7aNKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2RkZjUy
OS0xNTM2LTQ0ZjAtOWVkYS00ZGFkNDhhMTZlNDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGRmNTI5
LTE1MzYtNDRmMC05ZWRhLTRkYWQ0OGExNmU0Mi8xL2NCWHRKMUFGUUkwcWhxSXdO
d0YwUkREdG8wby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF
BQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQwCgMDAYKKAwMBgowwCgMDAIKPAwMBgpAD
AwCCkwMDAJA2AwMAlTswCgMDAKFTAwMBoVQDAwChWAMDAKFcAwMAp1EDBADAIYMw
DAMEAMBEHwMEA8BEIDAMAwQEwEQwAwQAwEQyAwQAwFxsMAwDBADAZVEDBADAZVoD
BADAbYADBATBGTAwDQQCAAIwBwMFAyoCIOAwHQYIKwYBBQUHAQgBAf8EDjAMoAow
CAICCFICAlibMA0GCSqGSIb3DQEBCwUAA4IBAQAyLCkJFjnGjlsLfxO1a2fIFB9t
3b29lXrDeK3yovrmi2uFLghqtgR/LrYHw6yxzs3RhL/HmrxKgIypsKxUd0c+TSoK
7WKqcT3GE7ZO8zj8FHeu97ui9+GR5NFi6nozCgngybphZ6mCoxrjlK9DCghrvJ2+
8dKhyBq799JKUjXV47uwtlAlgFVBoWbKr9XE5QBY/TiWwZLTsCgrYxuJhy+/1YV3
mkYvilhfMe3DYn2ZEORD8P4ZbwOS0LyqDBmsS5LCkwtPD3zXwiO+W9r56S2eQ+Cp
8cltGFaM6uOWA3+NEUCqg3fPMhdnj7hkax64HTCNybIAdEELc4fC5UIHKdS6
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:17 2025 by rpki-client