Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
File: f01ZHCOtLGlHfX96HUzo687pWWw.cer (raw, json)
Hash identifier: lR73lm/omA0gibCqccdey+lNAmCG0OkMZIEOtFIiNEE=
Subject key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9551EA883A61E72B85131D07D0CBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25506
IP: 195.245.213.0/24
IP: 2001:67c:1704::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:55:1e:a8:83:a6:1e:72:b8:51:31:d0:7d:0c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:25:13:84:07:57:ea:fe:64:7c:7c:1e:a9:
8a:55:bd:96:43:7c:a0:41:8f:92:73:76:ed:36:ec:
59:02:fd:bd:a3:8f:7a:02:8b:6a:bd:09:47:92:ff:
bc:89:54:28:fe:22:44:98:28:a7:22:74:03:e7:21:
ab:38:04:bb:5c:f6:01:cd:88:fd:92:cd:3c:af:07:
76:35:a3:d5:b8:3b:29:5a:1f:44:fe:4b:a7:6f:4e:
74:9b:7a:9f:b7:1d:23:ee:87:d8:ff:2a:75:79:5e:
66:35:a3:37:4c:b1:89:d0:98:ec:3f:3a:9b:b4:3a:
d9:08:c1:42:ec:a5:44:8d:0d:94:67:e1:26:62:5a:
1f:80:dc:07:7d:19:95:71:03:cf:f6:5e:e7:91:59:
40:b8:1b:d3:2a:23:ba:9c:83:bc:40:e1:61:47:a2:
ee:38:17:11:1f:76:32:61:56:66:39:f7:3f:56:12:
cf:0b:89:9d:d0:2b:17:38:a4:72:0c:26:9f:bc:d0:
a3:82:86:69:54:fc:e7:7b:4c:ec:c2:05:3f:be:07:
32:d0:2c:07:7d:e1:26:38:29:42:d5:f2:e4:55:6e:
89:e2:dd:cd:e3:9b:51:b3:20:ff:f9:58:ba:6b:e6:
a4:78:18:1b:30:9c:94:e6:95:70:03:53:94:9a:c7:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.213.0/24
IPv6:
2001:67c:1704::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25506
Signature Algorithm: sha256WithRSAEncryption
9b:6f:93:ef:d4:30:cb:38:7f:5d:5a:7d:ba:67:13:e9:83:bc:
d0:21:fb:88:d1:a5:df:42:a8:f9:cb:2b:7e:82:98:1d:e9:66:
11:8b:54:c6:80:70:34:43:f1:86:dc:b7:0c:18:cc:e1:84:8c:
8b:cc:2c:17:c8:0d:5f:b2:fe:2a:c4:9a:0f:c3:9c:68:f5:72:
60:8c:65:75:aa:57:ab:d4:69:64:d1:f6:2b:59:a6:46:cf:dc:
a6:5f:b3:9e:72:4b:6a:43:bc:36:25:f3:f2:25:20:26:1a:c6:
c8:87:f8:9a:db:e1:ab:90:cd:36:b2:50:fc:48:2f:df:db:76:
5d:39:df:84:da:c3:44:34:92:36:7d:60:e9:9f:47:1f:2c:66:
62:b2:e9:4e:69:a6:33:65:ea:a9:ee:56:b8:64:15:5f:a8:4d:
1e:be:79:5f:17:2b:af:5a:2b:4f:6b:88:55:22:1e:81:15:d5:
00:b6:1b:a4:6b:7f:c8:72:e8:37:e9:54:7f:be:a1:52:07:a3:
ed:70:6f:6b:f9:4d:ff:2e:fe:87:d4:cf:ac:7f:e1:e0:29:6b:
23:30:38:78:81:3c:fb:af:26:26:b3:0b:34:f7:14:f2:e3:96:
df:e1:fb:23:17:5b:b6:42:d3:28:ad:15:19:86:ca:e0:42:4a:
33:10:cc:14
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZQm2VUeqIOmHnK4UTHQfQy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjRkNTkxYzIzYWQyYzY5NDc3ZDdmN2ExZDRjZThlYmNlZTk1OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCslE4QHV+r+ZHx8HqmKVb2WQ3yg
QY+Sc3btNuxZAv29o496AotqvQlHkv+8iVQo/iJEmCinInQD5yGrOAS7XPYBzYj9
ks08rwd2NaPVuDspWh9E/kunb050m3qftx0j7ofY/yp1eV5mNaM3TLGJ0JjsPzqb
tDrZCMFC7KVEjQ2UZ+EmYlofgNwHfRmVcQPP9l7nkVlAuBvTKiO6nIO8QOFhR6Lu
OBcRH3YyYVZmOfc/VhLPC4md0CsXOKRyDCafvNCjgoZpVPzne0zswgU/vgcy0CwH
feEmOClC1fLkVW6J4t3N45tRsyD/+Vi6a+akeBgbMJyU5pVwA1OUmsesnwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFH9NWRwjrSxpR31/eh1M6OvO6VlsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzBkNjdh
Mi1iYzM2LTRiOTMtYjYwNC1kNGY1YzkyZDkwOTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMGQ2N2Ey
LWJjMzYtNGI5My1iNjA0LWQ0ZjVjOTJkOTA5NS8xL2YwMVpIQ090TEdsSGZYOTZI
VXpvNjg3cFdXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAw/XVMA8EAgACMAkDBwAgAQZ8FwQwGQYIKwYB
BQUHAQgBAf8ECjAIoAYwBAICY6IwDQYJKoZIhvcNAQELBQADggEBAJtvk+/UMMs4
f11afbpnE+mDvNAh+4jRpd9CqPnLK36CmB3pZhGLVMaAcDRD8YbctwwYzOGEjIvM
LBfIDV+y/irEmg/DnGj1cmCMZXWqV6vUaWTR9itZpkbP3KZfs55yS2pDvDYl8/Il
ICYaxsiH+Jrb4auQzTayUPxIL9/bdl0534Taw0Q0kjZ9YOmfRx8sZmKy6U5ppjNl
6qnuVrhkFV+oTR6+eV8XK69aK09riFUiHoEV1QC2G6Rrf8hy6DfpVH++oVIHo+1w
b2v5Tf8u/ofUz6x/4eApayMwOHiBPPuvJiazCzT3FPLjlt/h+yMXW7ZC0yitFRmG
yuBCSjMQzBQ=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:16 2025 by rpki-client