Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
File: eSf20AYql2a9WPDQdcTw0QJX5gY.cer (raw, json)
Hash identifier: IEv+0DZwhjmpQqI8fUfaYzHs+znY7SPc6xe6FbFz6Gw=
Subject key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194983F3A92D190A3B3E249B2F0BA3108D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 24 Jan 2025 12:17:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198457
IP: 91.234.232.0/24
IP: 2001:678:1004::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:3f:3a:92:d1:90:a3:b3:e2:49:b2:f0:ba:31:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 12:17:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:d6:b2:11:d6:37:2d:9d:bd:b7:51:19:4b:
cd:6c:19:59:a9:2b:1f:be:08:d9:70:89:01:23:e1:
b0:5d:fa:57:72:f7:a5:bb:0e:81:dc:06:0f:23:3c:
91:be:42:e9:97:a6:3d:f2:e8:c6:f5:a2:ef:6b:03:
99:32:5b:d4:c4:84:46:b5:68:c9:a5:eb:19:f4:66:
8c:fc:8f:3a:f4:f2:a8:08:39:d9:5a:1e:42:0d:c5:
d1:2b:ec:d7:35:39:96:54:be:c2:6b:3c:2a:ac:75:
37:ff:30:13:3e:9b:c2:52:e5:70:74:78:ce:a9:34:
39:9e:8f:a1:33:29:3e:a3:56:ab:0b:54:0b:d5:5c:
68:98:af:25:3b:b3:fb:c1:3d:2c:44:7a:6e:11:4a:
f5:e7:d8:24:3d:5f:80:ed:db:ed:d1:cf:97:88:dc:
26:f3:8d:44:26:f6:40:87:b1:e9:e9:1f:00:e1:b9:
01:9f:10:2b:c5:fc:1c:d0:3d:03:34:37:bc:60:5c:
03:d2:12:f5:32:f0:b0:07:d8:54:3d:c9:f4:4c:6e:
34:07:7e:7e:20:0f:1c:ce:d0:52:b6:d5:54:04:46:
2c:3f:09:d7:89:8e:84:c9:a4:43:98:1e:52:62:9d:
45:56:d2:9d:36:ce:f9:61:e0:5a:9a:78:6f:cd:6b:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.232.0/24
IPv6:
2001:678:1004::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198457
Signature Algorithm: sha256WithRSAEncryption
81:18:d9:51:17:d4:2f:76:54:ff:f2:57:ac:0d:b7:d8:2c:61:
38:ea:53:fd:e9:87:c5:97:fe:42:e3:66:16:63:33:31:23:cc:
80:b6:cc:8c:e3:84:e9:e5:29:1b:88:2e:5f:7e:56:8e:0c:80:
fa:0a:ad:eb:d0:86:35:7d:be:1f:1a:78:a0:d2:02:22:07:8b:
31:7f:e4:e5:2f:c8:0d:88:bc:0b:da:f6:fc:fd:1a:a1:1b:77:
20:b1:0d:75:83:24:10:cc:2b:c8:08:04:d2:57:ec:ac:7b:09:
14:fc:5f:81:c7:15:7c:6e:93:b9:37:c3:ad:64:3d:ad:54:61:
c7:6e:cc:a9:14:83:21:4d:a8:0b:f1:f5:3b:ad:42:c6:2c:f4:
aa:ff:9a:74:dd:60:32:3a:25:60:f2:09:fd:bb:cd:a0:b0:97:
8a:12:3c:58:3b:26:e7:98:45:50:13:48:4f:a0:24:b5:f8:c2:
5e:b3:ae:88:60:5b:05:99:5b:aa:0a:41:80:5f:b2:7a:ae:06:
2a:16:aa:b5:20:f0:6c:29:d3:1f:27:d5:d8:44:6a:6b:4d:5c:
52:bc:eb:bc:43:5a:e5:a4:5d:06:6d:50:61:0a:c7:dc:bc:5a:
fe:d6:8b:a4:bc:2c:a8:0c:f9:1a:41:b8:d1:96:29:5e:a5:4c:
c6:fa:ff:50
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZSYPzqS0ZCjs+JJsvC6MQjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTI0MTIxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTI3ZjZkMDA2MmE5NzY2YmQ1OGYwZDA3NWM0ZjBkMTAyNTdlNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RPWshHWNy2dvbdRGUvNbBlZqSsf
vgjZcIkBI+GwXfpXcveluw6B3AYPIzyRvkLpl6Y98ujG9aLvawOZMlvUxIRGtWjJ
pesZ9GaM/I869PKoCDnZWh5CDcXRK+zXNTmWVL7CazwqrHU3/zATPpvCUuVwdHjO
qTQ5no+hMyk+o1arC1QL1VxomK8lO7P7wT0sRHpuEUr159gkPV+A7dvt0c+XiNwm
841EJvZAh7Hp6R8A4bkBnxArxfwc0D0DNDe8YFwD0hL1MvCwB9hUPcn0TG40B35+
IA8cztBSttVUBEYsPwnXiY6EyaRDmB5SYp1FVtKdNs75YeBamnhvzWuzEwIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFHkn9tAGKpdmvVjw0HXE8NECV+YGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2Q2YTli
MS01NTJiLTQ2ZWMtYTMxYi1jNWQwY2I3YjdkZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDZhOWIx
LTU1MmItNDZlYy1hMzFiLWM1ZDBjYjdiN2RmNS8xL2VTZjIwQVlxbDJhOVdQRFFk
Y1R3MFFKWDVnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAW+roMA8EAgACMAkDBwAgAQZ4EAQwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAwc5MA0GCSqGSIb3DQEBCwUAA4IBAQCBGNlRF9Qv
dlT/8lesDbfYLGE46lP96YfFl/5C42YWYzMxI8yAtsyM44Tp5SkbiC5fflaODID6
Cq3r0IY1fb4fGnig0gIiB4sxf+TlL8gNiLwL2vb8/RqhG3cgsQ11gyQQzCvICATS
V+ysewkU/F+BxxV8bpO5N8OtZD2tVGHHbsypFIMhTagL8fU7rULGLPSq/5p03WAy
OiVg8gn9u82gsJeKEjxYOybnmEVQE0hPoCS1+MJes66IYFsFmVuqCkGAX7J6rgYq
Fqq1IPBsKdMfJ9XYRGprTVxSvOu8Q1rlpF0GbVBhCsfcvFr+1oukvCyoDPkaQbjR
lilepUzG+v9Q
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:07 2025 by rpki-client