Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
File: gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer (raw, json)
Hash identifier: s8PLSIJ1sZZGzJDUtm62Giu7Pe28uoafok/nJML/q3o=
Subject key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01983210EA88448D72E7F2D8F2AA29F0FF98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Jul 2025 12:17:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39150
IP: 79.133.96.0/22
IP: 79.133.104.0/22
IP: 79.133.112.0/21
IP: 91.196.136.0/22
IP: 93.179.64.0 -- 93.179.87.255
IP: 93.179.92.0/22
IP: 93.179.120.0/22
IP: 95.85.80.0/21
IP: 95.181.136.0 -- 95.181.147.255
IP: 95.181.208.0/21
IP: 95.181.240.0/21
IP: 109.196.128.0/20
IP: 128.127.144.0/22
IP: 178.57.71.0/24
IP: 185.13.32.0/22
IP: 185.19.176.0/22
IP: 188.68.4.0/22
IP: 195.182.8.0/24
IP: 2a04:8680::/29
IP: 2a09:d5c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:10:ea:88:44:8d:72:e7:f2:d8:f2:aa:29:f0:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 12:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:a1:f4:7f:81:59:e5:e0:fc:bc:3c:5c:00:
ef:54:1a:fb:fa:eb:61:6c:b0:60:33:e7:d5:6b:5a:
10:b6:41:6b:36:51:fd:19:9f:fd:ae:d4:78:44:a3:
1d:c2:28:ce:5d:90:fe:0e:da:c2:c9:e3:85:f9:d1:
07:2f:8d:0e:9c:e7:3f:1d:5d:c9:8d:c0:ec:af:f0:
81:fd:0c:57:9a:94:b1:7e:a5:09:49:81:e5:4d:0f:
37:eb:e3:6c:96:5f:c6:6c:e5:3a:07:7c:e9:43:2a:
d4:e9:21:3f:ce:a7:e2:23:5e:c2:7a:62:d8:a2:5a:
c3:3d:8e:3b:e7:50:11:78:5f:5a:b7:92:ad:7d:c0:
7a:77:e8:a0:81:a0:7e:bb:87:c4:be:b3:88:e6:05:
aa:b2:41:02:9d:85:b5:96:46:94:8b:23:f9:5a:d0:
06:a4:38:fa:69:81:76:5a:04:9a:9c:41:62:6c:08:
96:29:1f:76:fa:00:11:07:60:2d:02:6e:4d:cb:27:
1a:08:f5:e7:5e:8b:73:fb:ce:9c:78:b7:6d:00:f0:
29:8a:ba:09:2c:8b:98:0d:b5:10:76:68:ef:3d:5d:
60:b7:8b:44:9e:2e:ba:40:b7:03:71:85:d1:c8:57:
d5:1a:58:75:de:87:4f:2b:d5:ee:cb:45:23:8b:34:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.96.0/22
79.133.104.0/22
79.133.112.0/21
91.196.136.0/22
93.179.64.0-93.179.87.255
93.179.92.0/22
93.179.120.0/22
95.85.80.0/21
95.181.136.0-95.181.147.255
95.181.208.0/21
95.181.240.0/21
109.196.128.0/20
128.127.144.0/22
178.57.71.0/24
185.13.32.0/22
185.19.176.0/22
188.68.4.0/22
195.182.8.0/24
IPv6:
2a04:8680::/29
2a09:d5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39150
Signature Algorithm: sha256WithRSAEncryption
12:3e:6e:db:4f:7d:b0:7f:56:96:99:03:b5:53:d2:6b:b2:b9:
bf:31:44:f4:5b:04:9a:80:11:7f:a7:51:3b:eb:57:a6:4a:fc:
05:e6:0f:44:1c:7e:99:30:8f:03:40:1f:26:46:5e:45:a9:f1:
44:e4:bf:22:5a:c1:b6:38:f5:d7:82:a8:5e:6e:3e:60:33:d8:
6b:f0:64:52:1c:8a:46:c7:29:a5:c4:31:95:20:d7:53:71:eb:
04:5f:4e:c1:52:17:82:88:d2:14:90:a2:57:33:ee:f2:b6:6e:
49:3c:64:73:71:ac:f2:f8:43:db:86:74:7e:ee:03:32:b7:8a:
86:e4:58:be:9c:74:ef:02:83:59:48:13:24:34:51:6d:d7:d4:
6b:f0:80:2e:95:74:83:d7:e3:62:e5:96:1f:43:e6:85:87:e1:
f8:54:ca:7e:06:2c:9a:90:47:6a:a1:d5:84:f4:00:cb:68:a8:
32:9d:0f:14:4f:94:2a:12:23:80:cc:e7:d3:5f:ca:13:5c:02:
1c:0d:72:26:31:81:fd:60:54:8d:04:7f:a5:77:a1:be:c7:b4:
af:6f:c6:ca:28:70:b6:72:5d:9d:52:ce:03:06:7f:81:83:c1:
a1:80:a4:c3:d9:e7:c7:13:ae:af:68:b4:d7:39:e0:e9:d3:88:
a5:2a:74:86
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgISAZgyEOqIRI1y5/LY8qop8P+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzIyMTIxNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqeh9H+BWeXg/Lw8XADvVBr7+uth
bLBgM+fVa1oQtkFrNlH9GZ/9rtR4RKMdwijOXZD+DtrCyeOF+dEHL40OnOc/HV3J
jcDsr/CB/QxXmpSxfqUJSYHlTQ836+Nsll/GbOU6B3zpQyrU6SE/zqfiI17CemLY
olrDPY4751AReF9at5KtfcB6d+iggaB+u4fEvrOI5gWqskECnYW1lkaUiyP5WtAG
pDj6aYF2WgSanEFibAiWKR92+gARB2AtAm5NyycaCPXnXotz+86ceLdtAPApiroJ
LIuYDbUQdmjvPV1gt4tEni66QLcDcYXRyFfVGlh13odPK9Xuy0UjizTPFwIDAQAB
o4IDMDCCAywwHQYDVR0OBBYEFIM470GywBBakcy7nIkzf66xKf+EMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzQwZDk5
Ni1hMmNkLTQxZjEtYTczOC0yOGZjNzc5Njc3NjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvNDBkOTk2
LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZxUnpMdWNp
VE5fcnJFcF80US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGuBggrBgEF
BQcBBwEB/wSBnjCBmzCBggQCAAEwfAMEAk+FYAMEAk+FaAMEA0+FcAMEAlvEiDAM
AwQGXbNAAwQDXbNQAwQCXbNcAwQCXbN4AwQDX1VQMAwDBANftYgDBAJftZADBANf
tdADBANftfADBARtxIADBAKAf5ADBACyOUcDBAK5DSADBAK5E7ADBAK8RAQDBADD
tggwFAQCAAIwDgMFAyoEhoADBQMqCdXAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCY7jANBgkqhkiG9w0BAQsFAAOCAQEAEj5u2099sH9WlpkDtVPSa7K5vzFE9FsE
moARf6dRO+tXpkr8BeYPRBx+mTCPA0AfJkZeRanxROS/IlrBtjj114KoXm4+YDPY
a/BkUhyKRscppcQxlSDXU3HrBF9OwVIXgojSFJCiVzPu8rZuSTxkc3Gs8vhD24Z0
fu4DMreKhuRYvpx07wKDWUgTJDRRbdfUa/CALpV0g9fjYuWWH0PmhYfh+FTKfgYs
mpBHaqHVhPQAy2ioMp0PFE+UKhIjgMzn01/KE1wCHA1yJjGB/WBUjQR/pXehvse0
r2/GyihwtnJdnVLOAwZ/gYPBoYCkw9nnxxOur2i01zng6dOIpSp0hg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:45:14 2025 by rpki-client