Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
File: d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer (raw, json)
Hash identifier: Bi9uAbW9EszhgwA0Cyo+NP8hS3kVPJ2BBWwnaoPRRYo=
Subject key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B372585E20C06EE5D5D23B626A8DF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6656
AS: 8272
AS: 8426
AS: 24976
AS: 199269
AS: 201980
IP: 62.173.64.0/18
IP: 62.231.128.0/19
IP: 79.123.0.0/17
IP: 80.168.0.0/16
IP: 81.171.128.0/17
IP: 89.206.128.0/17
IP: 176.52.208.0/21
IP: 185.22.164.0/22
IP: 185.39.232.0/22
IP: 185.56.4.0/22
IP: 185.77.72.0/22
IP: 185.77.200.0/22
IP: 185.78.204.0/22
IP: 194.88.132.0/23
IP: 194.112.32.0/19
IP: 194.119.128.0/18
IP: 195.8.64.0/19
IP: 195.58.192.0/19
IP: 195.102.0.0/16
IP: 195.157.0.0/16
IP: 195.216.0.0/19
IP: 195.245.201.0/24
IP: 212.49.192.0/18
IP: 212.125.64.0/19
IP: 212.126.128.0/19
IP: 212.169.0.0/18
IP: 212.188.128.0/17
IP: 213.2.0.0/16
IP: 213.165.128.0/19
IP: 213.253.0.0/18
IP: 217.158.0.0/16
IP: 2001:67c:80::/48
IP: 2001:67c:1088::/47
IP: 2001:67c:27dc::/48
IP: 2001:a88::/32
IP: 2a00:ed0::/32
IP: 2a00:62e0::/32
IP: 2a02:4f20::/32
IP: 2a02:e100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:72:58:5e:20:c0:6e:e5:d5:d2:3b:62:6a:8d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:50:78:c6:e0:91:9e:7d:ef:77:2f:fa:e0:
42:b8:60:d6:f3:9e:c4:a2:e9:94:2e:2f:3b:08:3d:
67:fd:13:45:a7:3c:8b:e5:7a:77:2e:49:92:ec:e5:
f5:c7:c1:a2:f7:de:2a:96:e7:a7:90:6c:8e:ea:e0:
aa:a2:94:ad:e8:b4:50:d5:92:ec:c6:22:79:95:a9:
50:7d:40:68:0d:ba:92:eb:42:d3:04:eb:90:45:5b:
cf:19:02:28:c3:93:01:1d:44:51:b5:81:8d:fd:d7:
34:b5:1e:48:58:24:fd:b0:77:75:52:4d:ff:9e:c9:
4c:de:8c:00:9f:f6:0b:d4:3e:e1:f5:5c:ac:ae:37:
5b:23:72:24:65:96:84:fb:4b:f0:95:b8:da:1d:33:
7f:39:27:0a:bc:6a:4a:d6:06:01:30:36:8f:00:9b:
90:01:45:2b:6a:47:43:a0:99:65:ce:e3:a5:3e:86:
60:64:83:71:1b:6b:8f:8b:ed:c5:e3:16:d9:70:6e:
8f:06:f0:9b:16:b4:64:78:a9:e5:f7:c2:04:e4:93:
3f:38:6a:fc:0f:9c:fd:ed:ca:ef:09:1f:09:53:a7:
3c:bf:3f:74:72:2a:22:22:39:47:90:b7:d9:15:97:
6b:b7:27:7a:04:f6:b6:51:42:5c:20:61:db:08:3b:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.64.0/18
62.231.128.0/19
79.123.0.0/17
80.168.0.0/16
81.171.128.0/17
89.206.128.0/17
176.52.208.0/21
185.22.164.0/22
185.39.232.0/22
185.56.4.0/22
185.77.72.0/22
185.77.200.0/22
185.78.204.0/22
194.88.132.0/23
194.112.32.0/19
194.119.128.0/18
195.8.64.0/19
195.58.192.0/19
195.102.0.0/16
195.157.0.0/16
195.216.0.0/19
195.245.201.0/24
212.49.192.0/18
212.125.64.0/19
212.126.128.0/19
212.169.0.0/18
212.188.128.0/17
213.2.0.0/16
213.165.128.0/19
213.253.0.0/18
217.158.0.0/16
IPv6:
2001:67c:80::/48
2001:67c:1088::/47
2001:67c:27dc::/48
2001:a88::/32
2a00:ed0::/32
2a00:62e0::/32
2a02:4f20::/32
2a02:e100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6656
8272
8426
24976
199269
201980
Signature Algorithm: sha256WithRSAEncryption
40:b1:b0:11:30:bb:c1:7a:0f:73:d9:80:f0:9b:69:a2:bd:f0:
58:db:62:a7:d9:4d:ed:f2:5f:c4:b6:83:2b:39:bf:0b:d7:8f:
4c:2f:46:a2:fa:c0:79:f9:0f:04:89:27:9f:7b:c1:b2:c4:9d:
b0:bd:cc:d2:b1:d1:70:3a:6d:a0:f5:55:d9:c7:a5:38:a0:fb:
41:d4:96:b6:48:f4:2d:e2:67:5f:a8:11:20:60:96:be:2d:aa:
4e:d2:bc:80:a2:6e:b3:46:82:08:d6:57:6e:8f:6e:f5:9a:6b:
2c:85:0a:37:08:02:4e:c4:bc:93:3b:d6:83:75:3c:e4:ed:85:
96:49:de:26:26:79:f7:11:7c:38:69:b4:9c:e1:9a:84:5b:6f:
ff:38:16:c8:4a:f5:bd:c2:30:23:bd:8a:82:02:37:20:47:72:
c7:26:42:57:1a:a6:81:4d:02:20:f9:37:00:b9:b5:ff:61:21:
96:94:c5:4f:d9:fb:26:b5:ce:31:c5:95:4a:a7:ef:56:0a:ab:
1e:cb:07:74:e2:76:fe:5e:da:8d:0f:83:33:8d:2a:34:2e:2d:
16:93:6d:10:ef:61:f5:a0:75:e7:1e:54:92:1a:a0:a6:60:51:
a1:07:66:52:c4:dd:e4:31:6d:c3:d6:1c:ad:d7:d3:16:49:28:
56:41:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:09:20 2025 by rpki-client