Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
File: fcSs7cuGzd_tf23oyt_KAEabvI4.cer (raw, json)
Hash identifier: pbj4M3E0IeuVIMlYNDZY1gH73WzohQOJ/caSTLgaQv4=
Subject key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBFB2A450D7CC209798D7D4221F95D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2116
AS: 3307
AS: 5381
AS: 6709
AS: 8896
AS: 9173
AS: 13052
AS: 13069
AS: 13212
AS: 25351
AS: 35094
AS: 41572
AS: 57963
AS: 212642
IP: 31.185.24.0/21
IP: 37.191.128.0/17
IP: 45.138.236.0/22
IP: 62.63.0.0/18
IP: 62.101.192.0/18
IP: 64.28.0.0/19
IP: 77.40.128.0/17
IP: 77.88.64.0/18
IP: 77.234.48.0/21
IP: 77.241.96.0/20
IP: 78.24.144.0/21
IP: 79.135.0.0/19
IP: 80.64.192.0/20
IP: 80.241.80.0/20
IP: 81.0.128.0/18
IP: 81.175.0.0/20
IP: 81.175.20.0 -- 81.175.63.255
IP: 81.191.0.0/16
IP: 82.196.192.0/19
IP: 84.20.96.0/19
IP: 85.112.128.0/19
IP: 85.196.64.0/18
IP: 85.221.0.0/17
IP: 85.252.0.0/16
IP: 86.62.128.0/18
IP: 87.118.0.0/18
IP: 88.84.160.0/19
IP: 89.191.0.0/19
IP: 89.221.96.0/20
IP: 91.135.32.0/20
IP: 91.202.80.0/22
IP: 109.199.192.0/19
IP: 178.74.0.0/18
IP: 185.8.16.0/22
IP: 185.15.216.0/22
IP: 185.35.80.0/22
IP: 185.67.116.0/22
IP: 185.92.52.0/22
IP: 185.126.184.0/22
IP: 185.129.156.0/22
IP: 193.69.0.0/16
IP: 193.71.0.0/16
IP: 193.75.0.0/17
IP: 193.90.0.0/16
IP: 193.91.128.0/17
IP: 194.19.0.0/17
IP: 194.29.200.0/22
IP: 194.54.96.0/19
IP: 195.0.128.0 -- 195.1.255.255
IP: 195.18.128.0/17
IP: 195.139.0.0/16
IP: 195.159.0.0/16
IP: 195.204.0.0/16
IP: 212.33.128.0/19
IP: 212.62.224.0/19
IP: 212.71.64.0/19
IP: 213.52.0.0/17
IP: 213.151.128.0/19
IP: 213.158.224.0/19
IP: 213.160.224.0 -- 213.160.247.255
IP: 213.172.192.0/19
IP: 213.239.64.0/18
IP: 217.8.128.0/19
IP: 217.14.0.0/20
IP: 217.77.32.0/20
IP: 217.118.32.0/19
IP: 217.144.224.0/19
IP: 2001:840::/29
IP: 2001:8c0::/29
IP: 2001:4dd8::/29
IP: 2a00:1e18::/29
IP: 2a00:c440::/29
IP: 2a01:520::/29
IP: 2a02:270::/29
IP: 2a03:c000::/29
IP: 2a04:6340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fb:2a:45:0d:7c:c2:09:79:8d:7d:42:21:f9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:b3:31:7c:e6:72:30:1c:22:6a:a5:92:0d:
c3:c9:d1:f7:d3:76:b2:77:00:16:c1:49:5c:63:e7:
80:29:7e:48:76:52:9b:25:18:0c:58:33:79:86:13:
86:1a:33:c3:52:48:3b:3a:99:4b:6c:de:28:12:49:
e4:f3:75:55:33:70:57:30:d9:ae:c7:14:2b:6c:96:
87:c7:8a:ff:f1:34:95:ed:7d:d2:d4:f5:dc:66:de:
c9:8f:e7:49:5c:32:40:55:dd:ff:d2:6f:a5:a8:53:
5a:02:79:79:50:c1:ae:90:37:58:20:55:cd:99:22:
18:dc:26:f2:11:26:a7:2c:a6:8e:ca:36:72:dd:f4:
98:62:3b:bb:48:fd:c0:15:44:6a:a1:16:29:c8:68:
9d:32:c4:73:42:0e:30:fd:59:5e:64:70:89:bc:93:
8b:df:cd:0a:93:97:c9:66:ee:35:97:51:11:23:f5:
17:f4:bd:82:35:7d:85:de:43:14:72:f0:e0:be:a9:
41:1e:10:66:84:b5:57:77:98:da:b4:34:6a:b4:0a:
cb:6a:45:fd:10:52:39:c4:44:2d:ff:a8:95:49:2e:
a6:ca:ac:f7:47:ea:55:9d:d9:fe:27:3d:9f:45:03:
03:79:08:c0:2c:b1:d3:f3:3d:fd:cc:58:95:1a:16:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
45.138.236.0/22
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
77.241.96.0/20
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
89.221.96.0/20
91.135.32.0/20
91.202.80.0/22
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.15.216.0/22
185.35.80.0/22
185.67.116.0/22
185.92.52.0/22
185.126.184.0/22
185.129.156.0/22
193.69.0.0/16
193.71.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.33.128.0/19
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:1e18::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2116
3307
5381
6709
8896
9173
13052
13069
13212
25351
35094
41572
57963
212642
Signature Algorithm: sha256WithRSAEncryption
15:14:a9:b7:50:d6:99:05:5a:46:93:10:5e:ff:b3:09:6b:4d:
3b:ac:47:1c:7d:40:1a:f7:79:0a:f2:e9:91:b4:7c:7e:d8:b9:
29:56:1d:28:b5:fe:6d:f6:6c:7d:a6:a8:1a:1b:cd:b8:ac:8e:
a3:db:06:d5:bb:0f:fe:36:f4:b6:90:39:fb:24:2e:5a:36:f0:
3f:74:fe:28:db:04:5d:00:61:ab:fd:c1:13:55:5c:f0:40:b6:
e7:35:ba:1f:e0:0f:e2:74:65:20:9d:cc:22:fb:ed:15:b1:a3:
e9:42:51:15:55:8b:71:e3:99:2b:fb:75:23:99:d8:bf:af:6b:
50:52:5d:fd:47:98:1b:ec:6b:58:b3:f3:95:7e:8c:04:4f:fa:
47:6a:0d:f9:33:01:ad:b6:5b:49:cc:e1:55:2c:f1:3b:7b:57:
1b:39:c0:76:18:52:c2:18:ae:1d:9e:1f:96:08:e4:bf:3b:d7:
6d:4c:50:ee:43:11:55:1d:d2:2f:65:40:b2:c8:30:e6:c4:0a:
a3:b2:e1:e8:ca:bc:05:22:08:a7:ba:25:0b:7e:56:8f:e0:01:
3a:44:2c:d0:1c:cb:5c:f6:39:eb:b9:f9:ab:9b:5e:8d:e9:ec:
5f:f7:71:2a:65:f3:c0:52:fc:2c:3e:11:b5:c7:a0:56:f9:04:
f9:c1:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:33 2025 by rpki-client