Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
File: dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer (raw, json)
Hash identifier: 4JOFtem6KPQYQl/cUnZFUWKvq2HjdlcQV7Jcl4WzpBY=
Subject key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2AB3BCB8D7B05F8036690CCE918101
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8919
AS: 9015
IP: 31.5.0.0/16
IP: 31.14.35.0/24
IP: 62.121.64.0/18
IP: 77.81.16.0/20
IP: 78.96.0.0/15
IP: 81.89.0.0/20
IP: 82.208.128.0/18
IP: 82.210.128.0/18
IP: 83.103.128.0/17
IP: 84.117.0.0/16
IP: 85.186.0.0/16
IP: 85.204.0.0/20
IP: 85.204.184.0/21
IP: 86.104.136.0/21
IP: 86.105.64.0/20
IP: 86.106.32.0/19
IP: 89.33.72.0/21
IP: 89.38.72.0/22
IP: 89.38.237.0/24
IP: 89.42.248.0/21
IP: 89.43.80.0/22
IP: 89.44.78.0/23
IP: 89.44.208.0/24
IP: 89.136.0.0/15
IP: 93.113.32.0/23
IP: 93.113.241.0 -- 93.113.243.255
IP: 93.114.32.0/21
IP: 93.114.190.0/23
IP: 93.114.216.0/21
IP: 93.117.66.0/23
IP: 93.117.138.0/23
IP: 93.117.154.0/23
IP: 93.118.46.0/23
IP: 93.119.126.0/23
IP: 93.119.137.0 -- 93.119.139.255
IP: 93.119.224.0 -- 93.119.226.255
IP: 94.176.144.0/23
IP: 94.177.108.0/22
IP: 95.76.0.0/15
IP: 185.63.136.0/22
IP: 188.208.117.0 -- 188.208.119.255
IP: 188.214.92.0/24
IP: 188.214.153.0 -- 188.214.154.255
IP: 188.214.195.0 -- 188.214.197.255
IP: 188.215.3.0/24
IP: 188.240.64.0/22
IP: 193.178.165.0/24
IP: 194.102.99.0/24
IP: 194.102.146.0/24
IP: 194.102.248.0/21
IP: 194.105.17.0/24
IP: 194.105.24.0/21
IP: 195.20.107.0/24
IP: 195.234.172.0/24
IP: 213.164.224.0/19
IP: 2a04:2400::/27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b3:bc:b8:d7:b0:5f:80:36:69:0c:ce:91:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:af:73:0b:82:a1:f9:7a:e0:f5:5f:d4:7b:
de:02:3b:49:90:8a:5b:8e:c8:83:a1:c8:ad:b1:a2:
a3:cf:19:e6:38:f9:76:b2:16:92:f5:87:0f:2d:df:
ed:d0:2c:79:81:6d:04:e2:f1:e9:b1:eb:2a:8a:ec:
b4:a4:0f:04:33:6d:9a:59:93:01:ed:8d:2f:0f:37:
d5:00:4a:5f:47:53:95:f5:57:e3:08:9b:02:63:b4:
17:94:f7:a8:9b:0f:6c:f6:50:ff:1b:37:0d:1b:8b:
7e:bb:e8:df:bb:7d:6a:f7:d4:4b:ee:b5:a9:b1:55:
00:7a:ad:48:f9:74:04:56:00:65:de:25:dc:67:4f:
95:c2:7a:62:6c:3d:9d:53:3b:56:ed:fb:8c:2d:f2:
7d:22:df:22:7d:6e:ff:1e:05:22:f7:99:d9:14:63:
24:b1:cc:c1:79:83:de:cf:53:5a:ef:fa:44:7d:b4:
c6:45:a9:3a:93:91:6e:ef:c2:ee:75:47:66:96:74:
5e:56:01:be:ea:b5:fa:08:37:6b:8e:fe:5d:1c:87:
ad:7c:04:d8:bc:06:06:c0:6a:e9:d6:42:09:b7:7f:
be:44:c2:e9:82:00:4d:cb:3e:ef:e9:c2:54:e0:5c:
76:26:47:1e:95:f2:0c:64:79:7d:29:96:dc:84:0a:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.5.0.0/16
31.14.35.0/24
62.121.64.0/18
77.81.16.0/20
78.96.0.0/15
81.89.0.0/20
82.208.128.0/18
82.210.128.0/18
83.103.128.0/17
84.117.0.0/16
85.186.0.0/16
85.204.0.0/20
85.204.184.0/21
86.104.136.0/21
86.105.64.0/20
86.106.32.0/19
89.33.72.0/21
89.38.72.0/22
89.38.237.0/24
89.42.248.0/21
89.43.80.0/22
89.44.78.0/23
89.44.208.0/24
89.136.0.0/15
93.113.32.0/23
93.113.241.0-93.113.243.255
93.114.32.0/21
93.114.190.0/23
93.114.216.0/21
93.117.66.0/23
93.117.138.0/23
93.117.154.0/23
93.118.46.0/23
93.119.126.0/23
93.119.137.0-93.119.139.255
93.119.224.0-93.119.226.255
94.176.144.0/23
94.177.108.0/22
95.76.0.0/15
185.63.136.0/22
188.208.117.0-188.208.119.255
188.214.92.0/24
188.214.153.0-188.214.154.255
188.214.195.0-188.214.197.255
188.215.3.0/24
188.240.64.0/22
193.178.165.0/24
194.102.99.0/24
194.102.146.0/24
194.102.248.0/21
194.105.17.0/24
194.105.24.0/21
195.20.107.0/24
195.234.172.0/24
213.164.224.0/19
IPv6:
2a04:2400::/27
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8919
9015
Signature Algorithm: sha256WithRSAEncryption
aa:b2:70:cf:ff:02:c5:4e:b3:41:a7:79:4d:b5:16:b4:e3:35:
52:ca:67:52:f6:7b:1f:58:43:5d:d4:03:b4:11:3c:17:7c:99:
f0:2d:6a:11:9f:3c:63:1a:e1:b0:14:25:b5:7d:23:4c:49:74:
f4:8e:ce:ea:f5:93:73:8c:c1:ef:49:13:9c:11:b9:1e:35:bb:
09:f2:ce:98:c9:84:55:b9:57:c4:48:64:27:73:d3:ed:a9:31:
df:d1:e0:0e:66:b4:26:59:ee:2a:55:6d:46:b3:0a:20:30:f4:
8d:e6:8c:4a:ce:1a:91:a4:cd:ee:9d:39:bb:30:1d:7b:01:4f:
dc:06:08:fa:ce:9a:b6:5b:39:d2:95:59:43:fa:a0:44:a6:b9:
75:29:17:3f:85:95:c8:9b:6d:24:95:a4:4d:c6:ea:f8:31:3f:
fb:6b:a7:3b:b3:9c:1a:0b:1b:9b:bc:72:9d:e3:2c:ce:d4:e0:
dc:7a:9e:ff:22:f7:2a:40:ef:17:6a:8a:f3:ea:c8:16:d4:e2:
28:e0:d2:6a:c3:31:02:a6:29:60:b9:0b:14:ba:c4:4e:67:3b:
01:61:3f:43:e4:0a:92:da:13:5c:da:19:cc:6f:e9:fa:2b:eb:
49:96:4a:a5:ca:96:2a:23:7b:4a:4b:18:73:d7:c1:45:01:f8:
99:f4:a6:d9
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgISAYzKKrO8uNewX4A2aQzOkYEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzNDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTc5MGM3ZWNmMjRkMjhiZTJlMTNmZTA2OTExOGNlZTI3ZDU4MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQivcwuCofl64PVf1HveAjtJkIpb
jsiDocitsaKjzxnmOPl2shaS9YcPLd/t0Cx5gW0E4vHpsesqiuy0pA8EM22aWZMB
7Y0vDzfVAEpfR1OV9VfjCJsCY7QXlPeomw9s9lD/GzcNG4t+u+jfu31q99RL7rWp
sVUAeq1I+XQEVgBl3iXcZ0+VwnpibD2dUztW7fuMLfJ9It8ifW7/HgUi95nZFGMk
sczBeYPez1Na7/pEfbTGRak6k5Fu78LudUdmlnReVgG+6rX6CDdrjv5dHIetfATY
vAYGwGrp1kIJt3++RMLpggBNyz7v6cJU4Fx2JkcelfIMZHl9KZbchAp46wIDAQAB
o4IEKjCCBCYwHQYDVR0OBBYEFHV5DH7PJNKL4uE/4GkRjO4n1YACMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzQ5NmQ1
Ni04NmZmLTQ4YmUtYmRlMy0yNzFmZGUyZGM2NTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNDk2ZDU2
LTg2ZmYtNDhiZS1iZGUzLTI3MWZkZTJkYzY1NS8xL2RYa01mczhrMG92aTRUX2dh
UkdNN2lmVmdBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBpAYIKwYB
BQUHAQcBAf8EggGTMIIBjzCCAXwEAgABMIIBdAMDAB8FAwQAHw4jAwQGPnlAAwQE
TVEQAwMBTmADBARRWQADBAZS0IADBAZS0oADBAdTZ4ADAwBUdQMDAFW6AwQEVcwA
AwQDVcy4AwQDVmiIAwQEVmlAAwQFVmogAwQDWSFIAwQCWSZIAwQAWSbtAwQDWSr4
AwQCWStQAwQBWSxOAwQAWSzQAwMBWYgDBAFdcSAwDAMEAF1x8QMEAl1x8AMEA11y
IAMEAV1yvgMEA11y2AMEAV11QgMEAV11igMEAV11mgMEAV12LgMEAV13fjAMAwQA
XXeJAwQCXXeIMAwDBAVdd+ADBABdd+IDBAFesJADBAJesWwDAwFfTAMEArk/iDAM
AwQAvNB1AwQDvNBwAwQAvNZcMAwDBAC81pkDBAC81powDAMEALzWwwMEAbzWxAME
ALzXAwMEArzwQAMEAMGypQMEAMJmYwMEAMJmkgMEA8Jm+AMEAMJpEQMEA8JpGAME
AMMUawMEAMPqrAMEBdWk4DANBAIAAjAHAwUFKgQkADAdBggrBgEFBQcBCAEB/wQO
MAygCjAIAgIi1wICIzcwDQYJKoZIhvcNAQELBQADggEBAKqycM//AsVOs0GneU21
FrTjNVLKZ1L2ex9YQ13UA7QRPBd8mfAtahGfPGMa4bAUJbV9I0xJdPSOzur1k3OM
we9JE5wRuR41uwnyzpjJhFW5V8RIZCdz0+2pMd/R4A5mtCZZ7ipVbUazCiAw9I3m
jErOGpGkze6dObswHXsBT9wGCPrOmrZbOdKVWUP6oESmuXUpFz+FlcibbSSVpE3G
6vgxP/trpzuznBoLG5u8cp3jLM7U4Nx6nv8i9ypA7xdqivPqyBbU4ijg0mrDMQKm
KWC5CxS6xE5nOwFhP0PkCpLaE1zaGcxv6for60mWSqXKlioje0pLGHPXwUUB+Jn0
ptk=
-----END CERTIFICATE-----
Generated at Fri May 3 03:24:00 2024 by rpki-client on console-fra.rpki-client.org