Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
File: fQakK7JEblHxkuo3W99-7FpRx38.cer (raw, json)
Hash identifier: QtAxJB1OCbVJtduddEz5hcLgoznL8CXLJOBNmfVkfgY=
Subject key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D799DB06DDED21F8115BA6DFE709
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15723
IP: 5.10.240.0/20
IP: 5.178.0.0/20
IP: 37.128.200.0/21
IP: 46.23.96.0/20
IP: 62.217.128.0/19
IP: 85.158.144.0/21
IP: 88.151.192.0/21
IP: 109.205.208.0/21
IP: 164.215.96.0/21
IP: 185.81.216.0/22
IP: 188.64.8.0/21
IP: 2a00:48c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d7:99:db:06:dd:ed:21:f8:11:5b:a6:df:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:77:cb:10:78:71:be:cc:1f:a0:6e:17:c6:
19:1f:00:79:7c:63:c1:5c:9b:a7:64:97:72:08:a1:
b3:b0:25:6f:e9:4d:ba:e1:3a:48:77:2d:1b:ae:7f:
3b:cc:24:85:c8:82:03:db:61:73:70:0d:c8:27:7f:
01:57:fe:58:c5:65:34:b2:04:95:5f:2f:9e:4e:51:
ef:46:0f:78:d2:23:59:48:2b:d9:b4:00:15:63:31:
a3:6f:ca:10:91:72:91:74:61:cc:24:7e:f1:26:cd:
e9:99:82:56:3d:c9:6e:8c:c0:2d:09:59:04:82:dd:
30:00:92:bb:d4:76:57:40:e2:7f:15:0c:dd:78:88:
d0:67:2c:46:ac:ba:f8:de:c1:26:4c:63:8e:fa:8c:
39:3a:60:bf:8b:9e:80:f2:8f:9d:38:b5:66:9f:eb:
21:76:9b:58:a3:73:bd:21:86:0e:36:f3:42:71:33:
88:dd:a2:a0:97:42:11:aa:08:c4:4a:04:d2:db:e7:
45:52:f6:2b:4c:70:ef:94:98:e1:88:b8:3c:19:7a:
14:92:e2:30:9b:48:22:68:6d:15:6d:c3:f1:02:47:
d7:a6:f0:17:8a:c1:c7:fb:54:26:c8:c1:0a:7c:35:
07:e9:3b:15:bd:36:5c:aa:5a:60:a0:ea:4c:47:7c:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/20
5.178.0.0/20
37.128.200.0/21
46.23.96.0/20
62.217.128.0/19
85.158.144.0/21
88.151.192.0/21
109.205.208.0/21
164.215.96.0/21
185.81.216.0/22
188.64.8.0/21
IPv6:
2a00:48c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15723
Signature Algorithm: sha256WithRSAEncryption
a5:ef:c5:99:0e:72:f2:7b:4c:fc:6e:09:38:3a:45:05:71:fe:
ed:8b:ae:d1:30:fb:e1:fd:44:da:1c:9b:ce:6b:75:94:9f:76:
0b:de:07:d1:19:5c:a2:5b:de:04:d1:f5:5e:ed:06:d3:51:1b:
03:db:3f:61:b0:e4:fa:00:4b:ed:e2:06:28:b5:a6:27:2b:81:
2b:ac:c3:a5:d3:08:4e:84:b7:db:e3:ba:18:9e:33:71:99:e6:
8d:9e:e9:63:b6:31:36:7c:73:89:f6:ea:37:f1:95:79:ba:4e:
10:b6:bb:7b:b5:47:82:18:7d:d1:6f:32:c7:da:3a:de:eb:f4:
57:19:8a:04:f0:5a:98:bb:60:88:0a:cd:44:1d:e8:9f:ae:7a:
bd:a7:43:78:1c:11:17:43:54:00:d5:8c:16:09:3a:a9:bc:e9:
65:05:70:83:92:28:57:e1:f7:05:04:dd:49:42:88:3f:5e:8e:
9c:66:8a:eb:d5:53:50:82:d6:d3:ee:d5:e2:0f:61:5f:59:56:
2b:26:e9:30:5a:c4:cb:71:d6:c6:0d:27:6c:a2:47:f7:9f:c3:
63:9a:f6:5f:78:b5:da:50:d9:7b:b8:20:77:56:c0:a5:0a:3e:
ef:35:51:1b:f1:6a:b5:e0:18:96:e4:92:ac:c6:4f:fa:19:d2:
2a:a3:ae:fc
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAZQg1deZ2wbd7SH4EVum3+cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qp3yxB4cb7MH6BuF8YZHwB5fGPB
XJunZJdyCKGzsCVv6U264TpIdy0brn87zCSFyIID22FzcA3IJ38BV/5YxWU0sgSV
Xy+eTlHvRg940iNZSCvZtAAVYzGjb8oQkXKRdGHMJH7xJs3pmYJWPclujMAtCVkE
gt0wAJK71HZXQOJ/FQzdeIjQZyxGrLr43sEmTGOO+ow5OmC/i56A8o+dOLVmn+sh
dptYo3O9IYYONvNCcTOI3aKgl0IRqgjESgTS2+dFUvYrTHDvlJjhiLg8GXoUkuIw
m0giaG0VbcPxAkfXpvAXisHH+1QmyMEKfDUH6TsVvTZcqlpgoOpMR3wdFQIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFH0GpCuyRG5R8ZLqN1vffuxaUcd/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzc4MDAy
YS00ZmMwLTRkYmYtODU4NS0yY2Y4MDZiMmQwZjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvNzgwMDJh
LTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxIeGt1bzNX
OTktN0ZwUngzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF
BwEHAQH/BFswWTBIBAIAATBCAwQEBQrwAwQEBbIAAwQDJYDIAwQELhdgAwQFPtmA
AwQDVZ6QAwQDWJfAAwQDbc3QAwQDpNdgAwQCuVHYAwQDvEAIMA0EAgACMAcDBQAq
AEjAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj1rMA0GCSqGSIb3DQEBCwUAA4IB
AQCl78WZDnLye0z8bgk4OkUFcf7ti67RMPvh/UTaHJvOa3WUn3YL3gfRGVyiW94E
0fVe7QbTURsD2z9hsOT6AEvt4gYotaYnK4ErrMOl0whOhLfb47oYnjNxmeaNnulj
tjE2fHOJ9uo38ZV5uk4Qtrt7tUeCGH3RbzLH2jre6/RXGYoE8FqYu2CICs1EHeif
rnq9p0N4HBEXQ1QA1YwWCTqpvOllBXCDkihX4fcFBN1JQog/Xo6cZorr1VNQgtbT
7tXiD2FfWVYrJukwWsTLcdbGDSdsokf3n8NjmvZfeLXaUNl7uCB3VsClCj7vNVEb
8Wq14BiW5JKsxk/6GdIqo678
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:09 2025 by rpki-client