Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer (raw, json)
Hash identifier: INxJ4IP9If/ZRulyKqgiLC1RnXBuitZMdUTJzt2xxxg=
Subject key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1CC0CD74EFFE86124544B9739F8C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39150
AS: 209207
IP: 79.133.96.0/22
IP: 79.133.104.0/22
IP: 79.133.112.0/21
IP: 91.196.136.0/22
IP: 93.179.64.0 -- 93.179.87.255
IP: 93.179.92.0/22
IP: 93.179.120.0/22
IP: 95.85.80.0/21
IP: 95.181.136.0 -- 95.181.147.255
IP: 95.181.208.0/21
IP: 95.181.240.0/21
IP: 109.196.128.0/20
IP: 128.127.144.0/22
IP: 178.57.71.0/24
IP: 185.13.32.0/22
IP: 185.19.176.0/22
IP: 188.68.4.0/22
IP: 195.182.8.0/24
IP: 2a04:8680::/29
IP: 2a09:d5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 13:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cc:0c:d7:4e:ff:e8:61:24:54:4b:97:39:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:a1:f4:7f:81:59:e5:e0:fc:bc:3c:5c:00:
ef:54:1a:fb:fa:eb:61:6c:b0:60:33:e7:d5:6b:5a:
10:b6:41:6b:36:51:fd:19:9f:fd:ae:d4:78:44:a3:
1d:c2:28:ce:5d:90:fe:0e:da:c2:c9:e3:85:f9:d1:
07:2f:8d:0e:9c:e7:3f:1d:5d:c9:8d:c0:ec:af:f0:
81:fd:0c:57:9a:94:b1:7e:a5:09:49:81:e5:4d:0f:
37:eb:e3:6c:96:5f:c6:6c:e5:3a:07:7c:e9:43:2a:
d4:e9:21:3f:ce:a7:e2:23:5e:c2:7a:62:d8:a2:5a:
c3:3d:8e:3b:e7:50:11:78:5f:5a:b7:92:ad:7d:c0:
7a:77:e8:a0:81:a0:7e:bb:87:c4:be:b3:88:e6:05:
aa:b2:41:02:9d:85:b5:96:46:94:8b:23:f9:5a:d0:
06:a4:38:fa:69:81:76:5a:04:9a:9c:41:62:6c:08:
96:29:1f:76:fa:00:11:07:60:2d:02:6e:4d:cb:27:
1a:08:f5:e7:5e:8b:73:fb:ce:9c:78:b7:6d:00:f0:
29:8a:ba:09:2c:8b:98:0d:b5:10:76:68:ef:3d:5d:
60:b7:8b:44:9e:2e:ba:40:b7:03:71:85:d1:c8:57:
d5:1a:58:75:de:87:4f:2b:d5:ee:cb:45:23:8b:34:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.96.0/22
79.133.104.0/22
79.133.112.0/21
91.196.136.0/22
93.179.64.0-93.179.87.255
93.179.92.0/22
93.179.120.0/22
95.85.80.0/21
95.181.136.0-95.181.147.255
95.181.208.0/21
95.181.240.0/21
109.196.128.0/20
128.127.144.0/22
178.57.71.0/24
185.13.32.0/22
185.19.176.0/22
188.68.4.0/22
195.182.8.0/24
IPv6:
2a04:8680::/29
2a09:d5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39150
209207
Signature Algorithm: sha256WithRSAEncryption
51:a1:6e:aa:0c:7b:d9:43:8d:3f:f9:20:37:d7:71:99:ad:94:
a6:23:28:98:5e:f5:3a:a1:a0:a0:8b:1a:1e:39:14:c5:6c:54:
7a:f1:f0:8a:60:95:43:5c:9f:93:7f:a8:a8:32:06:f0:0f:d7:
7f:dd:4b:f6:f2:90:7d:87:9c:9c:09:b8:df:63:52:ef:c4:a1:
78:5a:e3:1d:9b:a8:81:1b:f9:07:fe:30:ae:5f:9f:95:d9:20:
9b:62:16:85:35:a3:1c:8a:3b:e0:3c:0c:5a:f7:20:02:f8:1c:
bf:8d:11:1d:d4:30:b1:cd:2d:6e:1a:bb:30:36:c0:af:bb:a3:
92:ee:ff:00:29:14:a9:cd:3a:41:af:a0:20:1a:73:8b:6a:28:
33:0b:05:b5:c5:db:0d:88:e7:53:28:f1:1e:70:83:28:ad:ef:
2d:8f:2b:62:1d:10:4e:62:f6:bf:cf:00:7c:fa:80:df:f1:1c:
05:2c:9c:2e:f3:7d:36:c5:07:5d:81:d7:3f:23:9f:eb:4a:47:
91:ce:85:13:c6:69:c1:ce:21:74:7d:fe:71:35:25:92:7b:2e:
ba:ea:42:a5:c1:30:ef:85:6a:e4:81:33:b6:a3:94:60:8f:1a:
8b:ff:01:06:e4:82:d0:d2:d7:9e:a3:b0:2c:5f:6e:39:6b:04:
dd:b1:fe:1e
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgISAZQhscwM107/6GEkVEuXOfjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqeh9H+BWeXg/Lw8XADvVBr7+uth
bLBgM+fVa1oQtkFrNlH9GZ/9rtR4RKMdwijOXZD+DtrCyeOF+dEHL40OnOc/HV3J
jcDsr/CB/QxXmpSxfqUJSYHlTQ836+Nsll/GbOU6B3zpQyrU6SE/zqfiI17CemLY
olrDPY4751AReF9at5KtfcB6d+iggaB+u4fEvrOI5gWqskECnYW1lkaUiyP5WtAG
pDj6aYF2WgSanEFibAiWKR92+gARB2AtAm5NyycaCPXnXotz+86ceLdtAPApiroJ
LIuYDbUQdmjvPV1gt4tEni66QLcDcYXRyFfVGlh13odPK9Xuy0UjizTPFwIDAQAB
o4IDNTCCAzEwHQYDVR0OBBYEFIM470GywBBakcy7nIkzf66xKf+EMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzQwZDk5
Ni1hMmNkLTQxZjEtYTczOC0yOGZjNzc5Njc3NjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvNDBkOTk2
LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZxUnpMdWNp
VE5fcnJFcF80US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGuBggrBgEF
BQcBBwEB/wSBnjCBmzCBggQCAAEwfAMEAk+FYAMEAk+FaAMEA0+FcAMEAlvEiDAM
AwQGXbNAAwQDXbNQAwQCXbNcAwQCXbN4AwQDX1VQMAwDBANftYgDBAJftZADBANf
tdADBANftfADBARtxIADBAKAf5ADBACyOUcDBAK5DSADBAK5E7ADBAK8RAQDBADD
tggwFAQCAAIwDgMFAyoEhoADBQMqCdXAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC
AwCY7gIDAzE3MA0GCSqGSIb3DQEBCwUAA4IBAQBRoW6qDHvZQ40/+SA313GZrZSm
IyiYXvU6oaCgixoeORTFbFR68fCKYJVDXJ+Tf6ioMgbwD9d/3Uv28pB9h5ycCbjf
Y1LvxKF4WuMdm6iBG/kH/jCuX5+V2SCbYhaFNaMcijvgPAxa9yAC+By/jREd1DCx
zS1uGrswNsCvu6OS7v8AKRSpzTpBr6AgGnOLaigzCwW1xdsNiOdTKPEecIMore8t
jytiHRBOYva/zwB8+oDf8RwFLJwu8302xQddgdc/I5/rSkeRzoUTxmnBziF0ff5x
NSWSey666kKlwTDvhWrkgTO2o5RgjxqL/wEG5ILQ0teeo7AsX245awTdsf4e
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:57:30 2025 by rpki-client