Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
File: cFG0wveunvgLUwALMquPXS8vQVs.cer (raw, json)
Hash identifier: Lbix+o4+7oZq9l7koG2q4N4yGxX3FyE7mmRm26sUXog=
Subject key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946A49E52E9C84AF01E4D862259A1B682C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 14:06:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.133.100.0/22
IP: 5.133.124.0/22
IP: 31.40.196.0/22
IP: 31.40.204.0/22
IP: 37.221.76.0/22
IP: 62.182.32.0/22
IP: 77.241.72.0/22
IP: 81.90.176.0/22
IP: 83.171.244.0/22
IP: 84.54.0.0/22
IP: 85.8.144.0/22
IP: 85.8.156.0 -- 85.8.163.255
IP: 85.235.72.0/22
IP: 92.249.60.0/22
IP: 93.190.8.0/22
IP: 139.28.32.0/22
IP: 139.28.48.0/22
IP: 139.28.212.0/22
IP: 139.28.240.0/22
IP: 141.98.48.0/22
IP: 141.98.112.0/22
IP: 147.78.68.0/22
IP: 176.53.156.0/22
IP: 176.53.168.0/22
IP: 176.96.128.0/22
IP: 185.231.224.0/22
IP: 185.254.52.0/22
IP: 188.119.68.0/22
IP: 193.17.4.0/22
IP: 193.32.184.0/22
IP: 193.32.204.0/22
IP: 193.38.44.0/22
IP: 193.111.76.0/22
IP: 193.138.172.0/22
IP: 193.187.108.0/22
IP: 193.187.132.0/22
IP: 193.187.140.0/22
IP: 194.56.184.0/22
IP: 194.93.48.0/22
IP: 194.93.60.0/22
IP: 194.169.92.0/22
IP: 212.87.196.0/22
IP: 212.103.36.0/22
IP: 212.107.4.0/22
IP: 212.115.100.0/22
IP: 213.139.224.0/22
IP: 217.18.208.0/22
IP: 2a02:f240::/29
IP: 2a04:3e80::/29
IP: 2a05:13c0::/29
IP: 2a05:b480::/29
IP: 2a06:8240::/29
IP: 2a06:9ec0::/29
IP: 2a07:e800::/29
IP: 2a09:780::/29
IP: 2a09:c40::/29
IP: 2a09:fc0::/29
IP: 2a09:1e40::/29
IP: 2a09:2400::/29
IP: 2a09:2580::/29
IP: 2a09:2780::/29
IP: 2a09:3880::/29
IP: 2a09:3b80::/29
IP: 2a09:3d80::/29
IP: 2a09:4400::/29
IP: 2a09:7200::/29
IP: 2a09:7c00::/29
IP: 2a09:8200::/29
IP: 2a09:8a00::/29
IP: 2a09:9200::/29
IP: 2a09:d500::/29
IP: 2a09:df00::/29
IP: 2a09:e500::/29
IP: 2a09:e600::/29
IP: 2a09:e800::/29
IP: 2a09:f480::/29
IP: 2a09:fa80::/29
IP: 2a0c:47c0::/29
IP: 2a0c:7dc0::/29
IP: 2a0c:9ac0::/29
IP: 2a0c:d7c0::/29
IP: 2a0c:f9c0::/29
IP: 2a0d:50c0::/29
IP: 2a0d:6740::/29
IP: 2a0d:93c0::/29
IP: 2a0d:d540::/29
IP: 2a0d:f1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:49:e5:2e:9c:84:af:01:e4:d8:62:25:9a:1b:68:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 14:06:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:50:a5:e4:a9:63:99:9f:aa:52:a7:2e:8a:
78:38:6d:ba:5f:58:db:d6:4b:86:74:2c:42:b3:b3:
bf:82:e4:19:98:4d:6c:f5:e3:11:e4:12:2b:94:d2:
af:35:54:ff:8b:c5:c0:1e:6e:ef:1e:1a:63:aa:31:
77:57:ed:17:7f:ab:fc:1d:53:f5:09:71:ef:75:c4:
8b:bb:fa:75:9a:74:5e:7d:d1:4e:c8:65:f3:dd:5a:
cf:3d:bc:33:22:24:29:dd:9d:d5:a9:f2:66:37:57:
26:2e:47:e5:e8:8e:c9:99:a8:7c:63:b5:d0:ff:28:
9c:56:12:99:4e:b2:67:4f:13:22:c3:c0:f6:ab:3f:
b0:66:8b:66:df:04:c4:94:e1:15:73:b7:ab:e6:2d:
4a:49:96:79:b7:2a:01:e6:e9:85:86:83:77:77:9a:
2d:4b:9e:1f:a9:d0:f4:7b:58:f7:50:9e:2a:28:3f:
7a:f4:36:ba:d6:f9:08:55:7b:20:ac:dc:0c:11:d3:
13:16:45:8e:a9:cb:85:1c:19:ec:28:5a:2f:49:66:
06:c4:0f:67:2e:48:f3:c5:42:f4:cf:21:37:e5:6f:
0f:a1:ec:d7:60:a5:a2:31:70:09:08:52:c6:cb:cb:
12:ad:10:b4:1d:a1:a2:c4:74:a6:48:ac:c6:c4:e2:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
5.133.124.0/22
31.40.196.0/22
31.40.204.0/22
37.221.76.0/22
62.182.32.0/22
77.241.72.0/22
81.90.176.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
85.8.156.0-85.8.163.255
85.235.72.0/22
92.249.60.0/22
93.190.8.0/22
139.28.32.0/22
139.28.48.0/22
139.28.212.0/22
139.28.240.0/22
141.98.48.0/22
141.98.112.0/22
147.78.68.0/22
176.53.156.0/22
176.53.168.0/22
176.96.128.0/22
185.231.224.0/22
185.254.52.0/22
188.119.68.0/22
193.17.4.0/22
193.32.184.0/22
193.32.204.0/22
193.38.44.0/22
193.111.76.0/22
193.138.172.0/22
193.187.108.0/22
193.187.132.0/22
193.187.140.0/22
194.56.184.0/22
194.93.48.0/22
194.93.60.0/22
194.169.92.0/22
212.87.196.0/22
212.103.36.0/22
212.107.4.0/22
212.115.100.0/22
213.139.224.0/22
217.18.208.0/22
IPv6:
2a02:f240::/29
2a04:3e80::/29
2a05:13c0::/29
2a05:b480::/29
2a06:8240::/29
2a06:9ec0::/29
2a07:e800::/29
2a09:780::/29
2a09:c40::/29
2a09:fc0::/29
2a09:1e40::/29
2a09:2400::/29
2a09:2580::/29
2a09:2780::/29
2a09:3880::/29
2a09:3b80::/29
2a09:3d80::/29
2a09:4400::/29
2a09:7200::/29
2a09:7c00::/29
2a09:8200::/29
2a09:8a00::/29
2a09:9200::/29
2a09:d500::/29
2a09:df00::/29
2a09:e500::/29
2a09:e600::/29
2a09:e800::/29
2a09:f480::/29
2a09:fa80::/29
2a0c:47c0::/29
2a0c:7dc0::/29
2a0c:9ac0::/29
2a0c:d7c0::/29
2a0c:f9c0::/29
2a0d:50c0::/29
2a0d:6740::/29
2a0d:93c0::/29
2a0d:d540::/29
2a0d:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:12:11:5f:ba:90:05:4f:55:6f:0e:e0:1d:a9:11:e1:27:45:
40:59:cf:32:23:29:1a:66:49:87:73:2d:ca:75:6b:6f:8e:95:
9e:6d:ab:72:33:9c:3b:32:9f:24:d9:89:04:f2:79:25:d6:cc:
87:57:3e:72:31:cc:20:dd:20:b5:8d:3b:a4:df:c5:69:19:aa:
2b:54:68:db:ef:0e:82:4b:08:99:ff:68:5a:78:88:42:21:c3:
24:70:86:93:95:e1:0b:d9:78:7a:83:65:9f:73:b0:05:94:f8:
ad:30:b9:b6:83:34:de:95:ab:0f:0e:47:ae:e0:2d:6a:60:84:
2c:f9:bf:00:07:3f:52:0d:a4:0d:20:46:89:f2:30:45:c7:04:
73:41:48:f1:68:73:8f:8b:4c:ff:50:88:60:a2:4b:bd:7b:d6:
c2:38:93:2f:66:10:c2:92:e8:2c:c2:34:e3:e2:6d:76:81:8b:
f8:bd:94:c6:ce:3c:01:5f:1b:0f:8b:c4:a3:59:6f:c3:fc:b0:
36:4c:56:08:cf:72:fd:b1:bb:a4:43:5c:a3:2a:c7:a1:6b:46:
24:ec:5d:b9:30:c4:44:a8:15:99:57:f2:dd:e9:a2:50:d4:42:
24:e9:02:9c:ac:0e:79:a7:5d:a7:d1:df:c2:80:73:77:59:7d:
dd:15:75:5f
-----BEGIN CERTIFICATE-----
MIIH3jCCBsagAwIBAgISAZRqSeUunISvAeTYYiWaG2gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTE1MTQwNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDUxYjRjMmY3YWU5ZWY4MGI1MzAwMGIzMmFiOGY1ZDJmMmY0MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXJQpeSpY5mfqlKnLop4OG26X1jb
1kuGdCxCs7O/guQZmE1s9eMR5BIrlNKvNVT/i8XAHm7vHhpjqjF3V+0Xf6v8HVP1
CXHvdcSLu/p1mnRefdFOyGXz3VrPPbwzIiQp3Z3VqfJmN1cmLkfl6I7Jmah8Y7XQ
/yicVhKZTrJnTxMiw8D2qz+wZotm3wTElOEVc7er5i1KSZZ5tyoB5umFhoN3d5ot
S54fqdD0e1j3UJ4qKD969Da61vkIVXsgrNwMEdMTFkWOqcuFHBnsKFovSWYGxA9n
LkjzxUL0zyE35W8PoezXYKWiMXAJCFLGy8sSrRC0HaGixHSmSKzGxOK5KQIDAQAB
o4IE6jCCBOYwHQYDVR0OBBYEFHBRtML3rp74C1MACzKrj10vL0FbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNl
OWZhLTlhNmYtNGUwYy05ODA5LTdhNDc4ODc0NDg5My8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWM1
Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0ODkzLzAvNzA1MUI0QzJGN0FF
OUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjCCAmcGCCsGAQUFBwEHAQH/BIICVjCCAlIwggEq
BAIAATCCASIDBAIFhWQDBAIFhXwDBAIfKMQDBAIfKMwDBAIl3UwDBAI+tiADBAJN
8UgDBAJRWrADBAJTq/QDBAJUNgADBAJVCJAwDAMEAlUInAMEAlUIoAMEAlXrSAME
Alz5PAMEAl2+CAMEAoscIAMEAoscMAMEAosc1AMEAosc8AMEAo1iMAMEAo1icAME
ApNORAMEArA1nAMEArA1qAMEArBggAMEArnn4AMEArn+NAMEArx3RAMEAsERBAME
AsEguAMEAsEgzAMEAsEmLAMEAsFvTAMEAsGKrAMEAsG7bAMEAsG7hAMEAsG7jAME
AsI4uAMEAsJdMAMEAsJdPAMEAsKpXAMEAtRXxAMEAtRnJAMEAtRrBAMEAtRzZAME
AtWL4AMEAtkS0DCCASAEAgACMIIBGAMFAyoC8kADBQMqBD6AAwUDKgUTwAMFAyoF
tIADBQMqBoJAAwUDKgaewAMFAyoH6AADBQMqCQeAAwUDKgkMQAMFAyoJD8ADBQMq
CR5AAwUDKgkkAAMFAyoJJYADBQMqCSeAAwUDKgk4gAMFAyoJO4ADBQMqCT2AAwUD
KglEAAMFAyoJcgADBQMqCXwAAwUDKgmCAAMFAyoJigADBQMqCZIAAwUDKgnVAAMF
AyoJ3wADBQMqCeUAAwUDKgnmAAMFAyoJ6AADBQMqCfSAAwUDKgn6gAMFAyoMR8AD
BQMqDH3AAwUDKgyawAMFAyoM18ADBQMqDPnAAwUDKg1QwAMFAyoNZ0ADBQMqDZPA
AwUDKg3VQAMFAyoN8cAwDQYJKoZIhvcNAQELBQADggEBAJkSEV+6kAVPVW8O4B2p
EeEnRUBZzzIjKRpmSYdzLcp1a2+OlZ5tq3IznDsynyTZiQTyeSXWzIdXPnIxzCDd
ILWNO6TfxWkZqitUaNvvDoJLCJn/aFp4iEIhwyRwhpOV4QvZeHqDZZ9zsAWU+K0w
ubaDNN6Vqw8OR67gLWpghCz5vwAHP1INpA0gRonyMEXHBHNBSPFoc4+LTP9QiGCi
S7171sI4ky9mEMKS6CzCNOPibXaBi/i9lMbOPAFfGw+LxKNZb8P8sDZMVgjPcv2x
u6RDXKMqx6FrRiTsXbkwxESoFZlX8t3polDUQiTpApysDnmnXafR38KAc3dZfd0V
dV8=
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:50 2025 by rpki-client