Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer (raw, json)
Hash identifier: gJXD0I5eb0gWwpsyaTvSa5UJ575f19SnJGAuYmh1fGM=
Subject key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F6483788C6EB891953EFBAB545AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202419
IP: 194.40.236.0/22
IP: 2a0c:c4c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f6:48:37:88:c6:eb:89:19:53:ef:ba:b5:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:4e:1a:9b:bd:22:5c:85:75:6d:07:bb:a8:
e0:57:a0:53:bf:5f:3d:5e:68:f5:2d:a3:09:39:ae:
66:58:a8:db:f1:36:72:69:d9:a1:27:cd:20:4c:b1:
e3:5c:8e:53:74:38:62:a5:96:f3:f1:66:0d:01:9a:
2b:2c:f7:d5:16:f5:29:73:82:e4:2e:76:4b:2d:56:
00:e8:a9:46:e9:03:68:59:e9:dc:46:c3:04:69:1c:
c1:ec:73:8b:99:4a:d1:5c:f3:29:f6:27:3d:60:f3:
7e:98:9f:a6:ce:9b:ab:c8:6e:09:28:83:21:54:d3:
23:0b:83:4d:57:ea:42:08:eb:c3:3e:c3:1d:34:fa:
13:6b:e2:46:3f:28:9b:33:30:78:06:0f:c8:f3:a3:
b4:d3:3d:48:59:e1:a8:b6:71:3c:d6:b4:1d:d7:e3:
e8:40:d2:7d:9c:50:69:5f:39:ff:e3:58:af:08:f5:
fe:a6:16:1c:f5:c4:51:02:98:d0:40:7c:3b:6d:27:
d1:2f:51:76:86:61:19:40:08:b8:6f:c0:80:40:4a:
35:a9:a6:97:7c:3a:df:fe:4f:aa:2d:ad:ec:02:70:
91:42:07:5d:1a:4a:82:a5:f1:bb:1d:4c:2f:94:7d:
35:30:2b:e2:74:06:cb:3e:6d:88:61:4d:4d:db:49:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.236.0/22
IPv6:
2a0c:c4c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202419
Signature Algorithm: sha256WithRSAEncryption
42:55:6b:c1:d8:cd:0f:a4:e4:8b:f2:12:0f:7a:1f:39:52:32:
be:b9:d7:2e:1b:64:0a:fa:29:a9:98:03:97:5f:14:a3:35:3b:
d4:cb:bd:e5:fe:ee:19:39:af:1f:d8:2d:6a:a8:09:0e:54:0d:
6e:85:7f:d8:ab:df:54:89:e9:5f:6a:d8:d0:bb:c6:6a:c0:b4:
6d:67:c9:17:63:dd:59:c3:70:35:7d:a1:96:98:36:91:2c:07:
b4:78:96:b0:2d:e4:f9:55:04:d0:76:0a:ce:ed:14:ab:f4:5b:
e0:87:ba:60:0d:fd:b4:50:70:0d:c2:b8:a4:b6:cb:c8:9d:89:
bc:d7:db:bc:71:e3:31:f6:3d:c2:54:e6:86:8d:3e:a9:0d:c7:
34:f9:96:7c:6c:f1:ef:63:22:82:bb:33:59:d6:c6:68:1c:1f:
75:e8:37:d5:b5:0b:0c:95:9b:30:5e:9e:0d:3f:cd:74:fd:ce:
43:18:38:67:22:5f:b3:98:02:b7:77:9a:65:b7:c9:3f:37:42:
82:8e:95:eb:da:96:0a:d0:3c:33:78:29:f8:e2:20:80:27:c4:
81:8e:e7:17:02:a6:27:3a:52:f9:8e:1c:39:64:af:80:65:3b:
64:64:e6:1f:a1:2c:8e:f4:de:a8:e2:12:00:79:67:da:1c:20:
20:d7:69:ae
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQj1vZIN4jG64kZU++6tUWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjQ4Yzc1M2Q0NmNkYzllOTgwMDllZTRkYjgxMDcyMzJjMDJlYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1pOGpu9IlyFdW0Hu6jgV6BTv189
Xmj1LaMJOa5mWKjb8TZyadmhJ80gTLHjXI5TdDhipZbz8WYNAZorLPfVFvUpc4Lk
LnZLLVYA6KlG6QNoWencRsMEaRzB7HOLmUrRXPMp9ic9YPN+mJ+mzpuryG4JKIMh
VNMjC4NNV+pCCOvDPsMdNPoTa+JGPyibMzB4Bg/I86O00z1IWeGotnE81rQd1+Po
QNJ9nFBpXzn/41ivCPX+phYc9cRRApjQQHw7bSfRL1F2hmEZQAi4b8CAQEo1qaaX
fDrf/k+qLa3sAnCRQgddGkqCpfG7HUwvlH01MCvidAbLPm2IYU1N20nOBQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFIJIx1PUbNyemACe5NuBByMsAur0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzFmYTQy
Ni00MGQ2LTRlZWEtYmJhYy05MTMzMjI1Yzk0MjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvMWZhNDI2
LTQwZDYtNGVlYS1iYmFjLTkxMzMyMjVjOTQyNS8xL2drakhVOVJzM0o2WUFKN2sy
NEVISXl3QzZ2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCwijsMA0EAgACMAcDBQMqDMTAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMWszANBgkqhkiG9w0BAQsFAAOCAQEAQlVrwdjND6Tk
i/ISD3ofOVIyvrnXLhtkCvopqZgDl18UozU71Mu95f7uGTmvH9gtaqgJDlQNboV/
2KvfVInpX2rY0LvGasC0bWfJF2PdWcNwNX2hlpg2kSwHtHiWsC3k+VUE0HYKzu0U
q/Rb4Ie6YA39tFBwDcK4pLbLyJ2JvNfbvHHjMfY9wlTmho0+qQ3HNPmWfGzx72Mi
grszWdbGaBwfdeg31bULDJWbMF6eDT/NdP3OQxg4ZyJfs5gCt3eaZbfJPzdCgo6V
69qWCtA8M3gp+OIggCfEgY7nFwKmJzpS+Y4cOWSvgGU7ZGTmH6EsjvTeqOISAHln
2hwgINdprg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:28 2025 by rpki-client