Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
File: ge7UCROD2e1AVtn07_fSYi3c4gU.cer (raw, json)
Hash identifier: 8/LMqJMArhDmF8bDRBlQjeyscvAh2lxedqfr2soL0jc=
Subject key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA70066013EC723A699ACB170D8E0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3265
AS: 8737
AS: 12871
AS: 39309
AS: 49562
IP: 5.199.144.0/20
IP: 37.188.64.0/20
IP: 37.251.0.0/17
IP: 46.227.232.0/21
IP: 62.131.0.0/16
IP: 62.216.0.0/19
IP: 62.251.0.0/17
IP: 77.160.0.0/12
IP: 80.60.0.0/15
IP: 80.100.0.0/15
IP: 80.126.0.0/15
IP: 81.204.0.0/14
IP: 82.92.0.0/14
IP: 82.136.192.0/18
IP: 82.139.64.0/18
IP: 82.161.0.0/16
IP: 82.168.0.0 -- 82.170.255.255
IP: 83.68.0.0/19
IP: 83.160.0.0/14
IP: 84.39.0.0/19
IP: 84.80.0.0/16
IP: 84.82.0.0 -- 84.87.255.255
IP: 85.113.224.0/19
IP: 86.80.0.0 -- 86.90.255.255
IP: 86.92.0.0/14
IP: 88.159.0.0/16
IP: 94.229.48.0/20
IP: 109.72.32.0/20
IP: 128.127.32.0/20
IP: 141.105.0.0/20
IP: 185.2.172.0/22
IP: 185.94.208.0/22
IP: 185.117.108.0/22
IP: 188.142.0.0/17
IP: 194.109.0.0/16
IP: 195.64.64.0/19
IP: 195.121.0.0/16
IP: 195.240.0.0/15
IP: 212.123.128.0/18
IP: 212.182.128.0/18
IP: 212.238.0.0/16
IP: 213.10.0.0/16
IP: 213.75.0.0/16
IP: 213.84.0.0/16
IP: 213.148.224.0/19
IP: 213.197.0.0/18
IP: 213.222.0.0/19
IP: 217.26.96.0/20
IP: 2001:67c:24f0::/48
IP: 2001:67c:2500::/45
IP: 2001:888::/29
IP: 2001:980::/29
IP: 2a02:80c0::/30
IP: 2a02:a400::/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:06:60:13:ec:72:3a:69:9a:cb:17:0d:8e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:da:b5:2f:ae:87:95:ad:58:c6:d9:00:95:
f9:4a:f8:52:c3:d6:2c:73:0a:05:b8:08:1f:b6:84:
a3:f8:2c:40:26:f5:5e:f9:8c:5c:09:a9:68:15:de:
02:82:de:ed:e5:bc:e6:0a:87:a8:8a:40:8c:e7:2b:
bf:66:c2:7e:91:66:67:f1:11:0c:8a:3a:e1:a6:3f:
23:c8:ed:50:d3:50:64:88:19:43:43:f9:cb:9a:ff:
04:d1:3a:73:5d:84:c9:94:25:3d:73:11:41:a4:88:
1d:05:bf:b9:18:cc:70:89:e2:a9:21:17:d6:ee:3d:
7c:42:3b:66:31:73:86:ae:32:c6:62:d0:0b:be:df:
91:f0:bd:90:5d:2a:2c:c4:41:be:8e:ad:78:93:41:
8c:f2:67:d1:cf:88:e4:85:80:fd:6e:6c:1f:02:a4:
18:59:f8:72:83:d8:66:69:59:69:5f:55:13:25:b4:
65:2c:bf:ab:6d:41:d3:96:f7:c0:6c:fe:56:cd:9e:
42:97:9f:36:16:fd:84:a0:ce:e0:04:6e:f2:57:2d:
f8:96:5a:eb:ac:9e:d9:5b:d1:ee:d3:3c:fc:ce:c2:
bc:cb:2a:79:cc:1c:e7:d9:c7:b5:37:68:45:50:6f:
93:64:c5:c4:f4:de:2d:19:6b:c5:26:d0:12:de:0e:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.144.0/20
37.188.64.0/20
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
80.126.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.139.64.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
83.160.0.0/14
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
94.229.48.0/20
109.72.32.0/20
128.127.32.0/20
141.105.0.0/20
185.2.172.0/22
185.94.208.0/22
185.117.108.0/22
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
217.26.96.0/20
IPv6:
2001:67c:24f0::/48
2001:67c:2500::/45
2001:888::/29
2001:980::/29
2a02:80c0::/30
2a02:a400::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3265
8737
12871
39309
49562
Signature Algorithm: sha256WithRSAEncryption
15:6b:f9:b5:15:54:b9:8e:d4:99:ce:c0:66:ab:08:27:2a:69:
ca:19:a1:13:50:a1:84:e5:84:66:f7:01:3d:13:81:de:4e:08:
dd:9c:a7:b1:ae:b0:91:51:ba:07:8c:38:c1:f2:88:20:a3:a9:
d7:9a:6b:7e:03:ae:4c:2a:2f:4b:87:8f:8d:0f:7a:d6:58:f2:
84:eb:33:1d:84:7e:57:be:4c:46:ed:bb:8a:3a:1b:7d:59:b8:
35:68:ec:51:73:42:2e:05:63:e2:99:db:58:1a:ce:fb:a0:ed:
e1:d5:58:4e:d3:8e:ed:cf:6b:40:04:01:ac:45:94:65:62:2a:
40:13:73:dd:7e:b7:4a:c2:ee:d7:f1:fd:74:db:30:0e:10:be:
c1:b1:28:9e:b9:6d:4c:cb:00:af:f6:a3:19:0f:67:5e:7f:12:
c1:23:71:df:ae:5a:63:bf:03:f6:dc:ea:9a:5a:a9:f2:a8:26:
43:35:14:23:26:8e:b4:86:a8:3f:e5:cb:e4:29:dc:c8:5f:50:
5b:9e:39:f5:78:05:c3:2a:7b:91:ef:e8:4f:08:62:05:da:5d:
62:81:fc:5e:7b:84:a3:6b:99:c3:76:11:77:ab:1f:18:64:57:
54:09:71:54:15:b7:2c:8c:e4:2d:72:c7:e8:1f:ce:75:1a:4c:
ed:2a:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:00 2025 by rpki-client