Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
File: dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer (raw, json)
Hash identifier: g55uW6EhCvFKJhjDEblnViZzrZ2oFSUPM0eGF+Zt6jo=
Subject key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD4F1C72AA829722E3581229F8E982
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8919
AS: 9015
IP: 31.5.0.0/16
IP: 31.14.35.0/24
IP: 62.121.64.0/18
IP: 77.81.16.0/20
IP: 78.96.0.0/15
IP: 81.89.0.0/20
IP: 82.208.128.0/18
IP: 82.210.128.0/18
IP: 83.103.128.0/17
IP: 84.117.0.0/16
IP: 85.186.0.0/16
IP: 85.204.0.0/20
IP: 85.204.184.0/21
IP: 86.104.136.0/21
IP: 86.105.64.0/20
IP: 86.106.32.0/19
IP: 89.33.72.0/21
IP: 89.38.72.0/22
IP: 89.38.237.0/24
IP: 89.42.248.0/21
IP: 89.43.80.0/22
IP: 89.44.78.0/23
IP: 89.44.208.0/24
IP: 89.136.0.0/15
IP: 93.113.32.0/23
IP: 93.113.241.0 -- 93.113.243.255
IP: 93.114.32.0/21
IP: 93.114.190.0/23
IP: 93.114.216.0/21
IP: 93.117.66.0/23
IP: 93.117.138.0/23
IP: 93.117.154.0/23
IP: 93.118.46.0/23
IP: 93.119.126.0/23
IP: 93.119.137.0 -- 93.119.139.255
IP: 93.119.224.0 -- 93.119.226.255
IP: 94.176.144.0/23
IP: 94.177.108.0/22
IP: 95.76.0.0/15
IP: 185.63.136.0/22
IP: 188.208.117.0 -- 188.208.119.255
IP: 188.214.92.0/24
IP: 188.214.153.0 -- 188.214.154.255
IP: 188.214.195.0 -- 188.214.197.255
IP: 188.215.3.0/24
IP: 188.240.64.0/22
IP: 193.178.165.0/24
IP: 194.102.99.0/24
IP: 194.102.146.0/24
IP: 194.102.248.0/21
IP: 194.105.17.0/24
IP: 194.105.24.0/21
IP: 195.20.107.0/24
IP: 195.234.172.0/24
IP: 213.164.224.0/19
IP: 2a04:2400::/27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4f:1c:72:aa:82:97:22:e3:58:12:29:f8:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:af:73:0b:82:a1:f9:7a:e0:f5:5f:d4:7b:
de:02:3b:49:90:8a:5b:8e:c8:83:a1:c8:ad:b1:a2:
a3:cf:19:e6:38:f9:76:b2:16:92:f5:87:0f:2d:df:
ed:d0:2c:79:81:6d:04:e2:f1:e9:b1:eb:2a:8a:ec:
b4:a4:0f:04:33:6d:9a:59:93:01:ed:8d:2f:0f:37:
d5:00:4a:5f:47:53:95:f5:57:e3:08:9b:02:63:b4:
17:94:f7:a8:9b:0f:6c:f6:50:ff:1b:37:0d:1b:8b:
7e:bb:e8:df:bb:7d:6a:f7:d4:4b:ee:b5:a9:b1:55:
00:7a:ad:48:f9:74:04:56:00:65:de:25:dc:67:4f:
95:c2:7a:62:6c:3d:9d:53:3b:56:ed:fb:8c:2d:f2:
7d:22:df:22:7d:6e:ff:1e:05:22:f7:99:d9:14:63:
24:b1:cc:c1:79:83:de:cf:53:5a:ef:fa:44:7d:b4:
c6:45:a9:3a:93:91:6e:ef:c2:ee:75:47:66:96:74:
5e:56:01:be:ea:b5:fa:08:37:6b:8e:fe:5d:1c:87:
ad:7c:04:d8:bc:06:06:c0:6a:e9:d6:42:09:b7:7f:
be:44:c2:e9:82:00:4d:cb:3e:ef:e9:c2:54:e0:5c:
76:26:47:1e:95:f2:0c:64:79:7d:29:96:dc:84:0a:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.5.0.0/16
31.14.35.0/24
62.121.64.0/18
77.81.16.0/20
78.96.0.0/15
81.89.0.0/20
82.208.128.0/18
82.210.128.0/18
83.103.128.0/17
84.117.0.0/16
85.186.0.0/16
85.204.0.0/20
85.204.184.0/21
86.104.136.0/21
86.105.64.0/20
86.106.32.0/19
89.33.72.0/21
89.38.72.0/22
89.38.237.0/24
89.42.248.0/21
89.43.80.0/22
89.44.78.0/23
89.44.208.0/24
89.136.0.0/15
93.113.32.0/23
93.113.241.0-93.113.243.255
93.114.32.0/21
93.114.190.0/23
93.114.216.0/21
93.117.66.0/23
93.117.138.0/23
93.117.154.0/23
93.118.46.0/23
93.119.126.0/23
93.119.137.0-93.119.139.255
93.119.224.0-93.119.226.255
94.176.144.0/23
94.177.108.0/22
95.76.0.0/15
185.63.136.0/22
188.208.117.0-188.208.119.255
188.214.92.0/24
188.214.153.0-188.214.154.255
188.214.195.0-188.214.197.255
188.215.3.0/24
188.240.64.0/22
193.178.165.0/24
194.102.99.0/24
194.102.146.0/24
194.102.248.0/21
194.105.17.0/24
194.105.24.0/21
195.20.107.0/24
195.234.172.0/24
213.164.224.0/19
IPv6:
2a04:2400::/27
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8919
9015
Signature Algorithm: sha256WithRSAEncryption
72:a8:0d:95:d5:f9:d7:33:62:df:08:88:04:ed:f1:93:d1:f7:
cd:d1:e0:91:e6:50:15:11:24:2a:38:f4:fb:6e:22:1b:9f:00:
82:b3:a4:b2:27:c8:1a:87:4f:18:18:ac:5f:85:ba:ee:f4:eb:
fd:27:fe:e1:f5:29:15:8f:ed:1c:bc:eb:ce:0f:03:fc:7e:fe:
b8:90:04:02:fd:0c:0c:02:c0:8a:27:c8:0c:a4:ea:2c:29:3a:
d5:9a:d2:b1:11:c3:d6:c8:46:d3:a2:83:e5:c4:7b:76:4e:53:
31:d4:8d:dc:b2:16:f6:bc:0a:41:70:71:05:48:a5:e6:33:84:
07:9e:4b:af:4a:28:69:17:9a:98:d6:e0:25:af:37:dc:55:e5:
ca:cb:f7:c9:c8:b7:5a:f2:27:bd:f2:a3:f7:dc:b7:41:70:64:
85:df:d2:90:9c:5a:94:e1:2e:3a:48:3b:88:2b:d0:6d:05:5e:
9e:75:84:41:ca:b0:0c:2e:da:09:a2:29:41:96:2a:da:a7:42:
20:c0:00:24:3b:35:a4:44:43:dc:1c:b1:6c:ee:5d:75:8b:92:
69:8e:de:88:c3:50:8a:d6:1e:03:37:28:81:5a:da:df:97:09:
72:5b:8e:01:0a:42:b8:59:84:ec:a0:3a:48:19:a4:75:35:87:
1c:87:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:17 2025 by rpki-client