Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
File: gO9no9w9cYRemxVVz_WtMbtCOpQ.cer (raw, json)
Hash identifier: rFKiVOlspFgXTEzWL3on16IbVj3oi+RUps2KcjuISqg=
Subject key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9F277372CA168B235A90C8F3B690E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206711
IP: 185.176.36.0/22
IP: 2a07:ee00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f2:77:37:2c:a1:68:b2:35:a9:0c:8f:3b:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:29:a6:8f:18:9d:b7:07:78:d9:bb:63:2f:
2a:ae:64:82:4d:de:5e:cb:45:db:c4:9a:53:92:34:
d3:53:76:b6:f1:70:d7:1e:98:ec:5f:43:77:a5:41:
b7:ac:94:ba:35:ce:81:f0:34:ec:2a:9b:57:ac:e3:
ec:f5:c3:d3:42:98:5e:6c:56:f7:4a:74:fc:f9:16:
95:de:a1:13:f4:8d:51:21:1d:e8:2d:1b:bd:08:6e:
ff:41:b5:4b:61:02:47:16:5b:94:3e:09:bc:f7:3a:
8c:5a:9b:97:fb:33:8a:7e:4a:0d:b3:06:bc:47:30:
3e:83:b1:fc:d8:c3:b3:c6:52:1c:ba:a8:d7:0d:50:
3b:ab:97:b7:44:49:cd:c7:77:0b:d8:6c:90:38:77:
cc:2a:7d:ed:6c:73:1c:1d:f3:45:52:0e:e8:6a:a3:
b5:0d:ee:c9:a8:68:f1:78:88:d0:c0:ee:7b:22:05:
ec:0d:d4:68:39:7e:8f:46:6e:00:ad:72:24:39:2e:
71:ee:6e:b3:cb:07:30:94:24:85:92:c7:22:ef:55:
36:a1:d5:02:99:9a:74:be:1e:e0:9a:3b:3c:7a:9a:
be:2c:89:12:48:30:a5:56:6d:3b:4a:67:30:b6:38:
a3:73:31:70:8c:63:91:71:a7:a3:4b:20:4c:e2:3e:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.36.0/22
IPv6:
2a07:ee00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206711
Signature Algorithm: sha256WithRSAEncryption
11:75:f3:dc:ca:73:fb:f5:e2:43:c8:25:c8:fb:ca:47:44:8c:
70:71:1a:96:22:47:ce:03:3d:3a:05:39:25:70:12:d4:27:6c:
d9:08:1c:c9:0d:f8:fa:93:d5:45:0d:15:85:83:4f:9c:1d:ec:
2a:9e:18:9b:3d:b4:2d:b0:73:7f:90:5f:5b:76:1c:df:21:c9:
de:fa:80:9e:90:ef:b4:71:80:b1:a9:1d:59:de:70:77:fe:74:
47:8f:0e:31:5f:44:80:07:8d:85:81:d9:55:45:a2:b1:e4:0d:
74:9b:2b:85:f5:3e:27:b3:68:08:fa:63:9f:db:49:be:0d:47:
8c:3d:fe:65:9f:b0:a9:7f:1b:ef:18:a4:d2:09:3b:9d:f2:d8:
87:09:b0:75:2a:0b:3e:be:0f:23:78:56:f4:1a:e0:b4:48:4b:
50:53:84:40:d2:67:c8:df:a2:c2:72:24:79:5c:04:00:2e:a2:
e8:74:83:d4:ee:66:36:9d:ef:a5:29:c3:25:a5:98:29:13:ad:
31:23:8b:42:96:c9:90:6f:c8:2a:d3:4e:a4:53:b0:f7:a2:0f:
1e:29:5f:c8:4e:7c:2e:73:83:fc:e7:9d:36:a0:b7:c6:d5:26:
21:3c:4a:ac:b2:8f:7c:74:5f:76:6d:7c:b0:5b:c1:ce:92:e5:
26:3a:3c:6d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2fJ3NyyhaLI1qQyPO2kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGVmNjdhM2RjM2Q3MTg0NWU5YjE1NTVjZmY1YWQzMWJiNDIzYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZoppo8YnbcHeNm7Yy8qrmSCTd5e
y0XbxJpTkjTTU3a28XDXHpjsX0N3pUG3rJS6Nc6B8DTsKptXrOPs9cPTQphebFb3
SnT8+RaV3qET9I1RIR3oLRu9CG7/QbVLYQJHFluUPgm89zqMWpuX+zOKfkoNswa8
RzA+g7H82MOzxlIcuqjXDVA7q5e3REnNx3cL2GyQOHfMKn3tbHMcHfNFUg7oaqO1
De7JqGjxeIjQwO57IgXsDdRoOX6PRm4ArXIkOS5x7m6zywcwlCSFksci71U2odUC
mZp0vh7gmjs8epq+LIkSSDClVm07SmcwtjijczFwjGORcaejSyBM4j751QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIDvZ6PcPXGEXpsVVc/1rTG7QjqUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2UwMTg0
ZC02NGQwLTRhMTUtYTI3Ny03Y2U4MDkzNTNiMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZTAxODRk
LTY0ZDAtNGExNS1hMjc3LTdjZTgwOTM1M2IxOC8xL2dPOW5vOXc5Y1lSZW14VlZ6
X1d0TWJ0Q09wUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubAkMA0EAgACMAcDBQMqB+4AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMndzANBgkqhkiG9w0BAQsFAAOCAQEAEXXz3Mpz+/Xi
Q8glyPvKR0SMcHEaliJHzgM9OgU5JXAS1Cds2QgcyQ34+pPVRQ0VhYNPnB3sKp4Y
mz20LbBzf5BfW3Yc3yHJ3vqAnpDvtHGAsakdWd5wd/50R48OMV9EgAeNhYHZVUWi
seQNdJsrhfU+J7NoCPpjn9tJvg1HjD3+ZZ+wqX8b7xik0gk7nfLYhwmwdSoLPr4P
I3hW9BrgtEhLUFOEQNJnyN+iwnIkeVwEAC6i6HSD1O5mNp3vpSnDJaWYKROtMSOL
QpbJkG/IKtNOpFOw96IPHilfyE58LnOD/OedNqC3xtUmITxKrLKPfHRfdm18sFvB
zpLlJjo8bQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:52 2025 by rpki-client