Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer (raw, json)
Hash identifier: LpQQDviTozgsJYDnmsSShQ6FRiA+Cm0ah89AvspWZ60=
Subject key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B27CFE6C326BFA14D3072A4305EBB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207029
IP: 185.85.24.0/22
IP: 185.134.8.0/22
IP: 185.210.112.0/22
IP: 213.226.104.0/22
IP: 2a05:a580::/29
IP: 2a06:ea00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7c:fe:6c:32:6b:fa:14:d3:07:2a:43:05:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:41:29:06:57:c4:ee:87:b3:2e:7d:00:f9:
f4:bb:e6:15:d4:c5:c8:f8:09:3b:b4:38:29:65:f8:
9a:bf:1b:0d:5e:a0:7c:04:0c:de:32:df:78:91:ec:
2e:1e:a8:17:7e:6a:b8:55:77:87:b5:99:1c:24:21:
4f:12:bf:bc:d8:1e:a8:d4:b3:25:30:a5:70:9b:6e:
54:fe:2f:26:f6:9d:2c:61:9d:0e:b1:32:d1:da:0d:
40:71:69:24:67:46:3a:a6:54:e6:ce:de:27:08:9d:
10:29:da:a6:76:4d:c6:b1:ae:9b:aa:43:c5:38:39:
d0:b9:2f:44:0a:5c:9a:cf:8e:b0:6f:cd:9b:6b:0a:
7d:ca:c3:b5:24:1d:67:ac:77:24:9a:66:b7:0e:a0:
8c:08:d8:5f:af:bb:5d:3e:00:11:cb:47:ff:bc:08:
97:2c:77:88:05:98:b6:2e:2d:0c:17:a8:2d:43:eb:
65:3f:00:ed:98:45:88:bd:7f:4a:08:2c:5e:03:3b:
cc:36:81:27:67:d4:82:ae:97:3c:6c:5c:db:44:fc:
85:2a:84:6d:04:a4:2d:fe:16:24:7f:02:d7:fb:12:
ca:42:df:10:26:ab:3d:98:ef:87:1b:a8:b3:c0:c0:
23:ae:9b:67:dc:95:b7:be:ef:29:db:61:2b:35:04:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.24.0/22
185.134.8.0/22
185.210.112.0/22
213.226.104.0/22
IPv6:
2a05:a580::/29
2a06:ea00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207029
Signature Algorithm: sha256WithRSAEncryption
4c:e8:9d:14:41:f0:1a:9a:ad:96:85:c0:a5:38:36:f2:08:66:
58:d3:89:f9:a8:fa:e8:6b:32:7f:44:63:0c:40:06:7f:19:75:
df:29:46:80:e2:42:1b:81:47:3e:1a:bd:6d:c5:15:f3:97:25:
4f:c0:a3:f5:1b:2a:09:8f:6f:42:b1:68:0f:28:c3:bc:4b:1f:
87:f5:d1:5f:66:15:ff:f5:b3:66:dd:d4:b6:86:b2:43:f6:2d:
85:18:18:f0:fd:5d:d9:19:d8:d7:25:5d:35:3f:ce:11:bd:e4:
71:e7:11:88:18:ff:16:08:ff:04:64:a7:d5:07:d0:ba:1c:df:
62:53:08:93:35:36:13:37:46:fc:36:e4:77:fd:22:73:e1:27:
86:37:45:fc:cb:45:ae:94:97:08:26:05:6c:8a:c5:7b:a6:e5:
64:6e:fc:ae:5f:09:f3:af:d6:ed:67:fa:61:74:d1:8f:52:19:
e4:0e:2f:5b:5e:7e:2f:7b:54:f3:77:9b:c9:67:0a:ca:46:13:
78:76:e5:bf:98:af:f0:41:e6:6f:0f:f9:a7:b6:53:6e:87:1f:
a7:f7:ff:8e:b1:11:6a:8f:b5:72:30:ab:6b:30:2c:ec:b2:28:
ff:1b:e5:62:22:da:5d:14:29:72:8d:0b:49:71:2c:a4:36:7f:
13:09:64:4a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZQksnz+bDJr+hTTBypDBeuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjI3MTExNTA5MTBkY2QxYjFjN2FiNTMxNDQ4YmQ4MzIxZmMxYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueFBKQZXxO6Hsy59APn0u+YV1MXI
+Ak7tDgpZfiavxsNXqB8BAzeMt94kewuHqgXfmq4VXeHtZkcJCFPEr+82B6o1LMl
MKVwm25U/i8m9p0sYZ0OsTLR2g1AcWkkZ0Y6plTmzt4nCJ0QKdqmdk3Gsa6bqkPF
ODnQuS9EClyaz46wb82bawp9ysO1JB1nrHckmma3DqCMCNhfr7tdPgARy0f/vAiX
LHeIBZi2Li0MF6gtQ+tlPwDtmEWIvX9KCCxeAzvMNoEnZ9SCrpc8bFzbRPyFKoRt
BKQt/hYkfwLX+xLKQt8QJqs9mO+HG6izwMAjrptn3JW3vu8p22ErNQREGwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFHsnERUJENzRscerUxRIvYMh/Bw2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2IxMTc2
NC1iZTY1LTQ5ZjEtYjQyYy1iN2E4YjdjMTJlZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYjExNzY0
LWJlNjUtNDlmMS1iNDJjLWI3YThiN2MxMmVlZS8xL2V5Y1JGUWtRM05HeHg2dFRG
RWk5Z3lIOEhEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF
BwEHAQH/BDgwNjAeBAIAATAYAwQCuVUYAwQCuYYIAwQCudJwAwQC1eJoMBQEAgAC
MA4DBQMqBaWAAwUDKgbqADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDKLUwDQYJ
KoZIhvcNAQELBQADggEBAEzonRRB8BqarZaFwKU4NvIIZljTifmo+uhrMn9EYwxA
Bn8Zdd8pRoDiQhuBRz4avW3FFfOXJU/Ao/UbKgmPb0KxaA8ow7xLH4f10V9mFf/1
s2bd1LaGskP2LYUYGPD9XdkZ2NclXTU/zhG95HHnEYgY/xYI/wRkp9UH0Loc32JT
CJM1NhM3Rvw25Hf9InPhJ4Y3RfzLRa6UlwgmBWyKxXum5WRu/K5fCfOv1u1n+mF0
0Y9SGeQOL1tefi97VPN3m8lnCspGE3h25b+Yr/BB5m8P+ae2U26HH6f3/46xEWqP
tXIwq2swLOyyKP8b5WIi2l0UKXKNC0lxLKQ2fxMJZEo=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:59 2025 by rpki-client