Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
File: h0v4BwzuQwXRo4npEPtRArvMGUE.cer (raw, json)
Hash identifier: paOBCsntHinF8o0OKRBSdKynFnOYgL69jkNDrAjo5Y4=
Subject key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B409F2AF916EACD4A0C4C76A5369A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35053
IP: 85.237.64.0/19
IP: 2a03:b380::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:09:f2:af:91:6e:ac:d4:a0:c4:c7:6a:53:69:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:18:58:2f:3a:99:8d:d0:bd:c5:20:8f:3f:
7c:f7:81:09:20:68:47:04:bf:9d:c9:3e:7d:86:3f:
d4:c7:11:6c:a9:b5:2b:13:e2:0d:12:4b:b5:fd:3d:
b6:2d:d4:3e:e5:a1:fb:06:2d:aa:7a:1a:fc:72:94:
c9:fd:6b:b3:6a:09:33:94:47:40:d9:4a:e4:b3:a0:
8f:48:62:67:ea:b8:2b:84:79:ce:97:0d:16:53:1b:
a1:a8:2c:56:a8:93:65:43:2a:fe:63:fe:4a:37:ae:
5d:d9:12:a9:ec:50:2b:40:fe:df:71:d2:f6:cf:db:
98:2e:9c:00:46:04:5f:61:e2:ce:96:43:c6:47:ba:
28:0d:1f:59:dd:1c:f6:72:26:23:c2:34:27:14:d8:
5b:c9:09:b2:b4:22:f9:2b:3b:33:39:21:3f:54:8e:
7b:73:80:13:3a:8a:5a:a6:bd:33:e2:02:14:3f:7f:
53:33:23:bb:2a:95:30:88:94:03:9d:2f:63:82:25:
b5:8a:75:ca:9f:c3:4f:09:ab:d0:39:f2:d8:16:a8:
99:14:82:81:17:af:3f:19:c7:07:5d:3c:38:c8:10:
e5:a2:4b:72:82:3d:83:8a:f2:bf:c4:37:a7:5e:6f:
99:73:33:00:d5:ff:ba:5d:25:94:05:a8:a6:73:23:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0/19
IPv6:
2a03:b380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35053
Signature Algorithm: sha256WithRSAEncryption
09:be:a6:bc:8b:1d:6a:21:79:14:ad:02:35:c5:42:59:2d:1c:
af:09:37:6b:4e:3f:93:3b:03:7c:7e:c9:af:88:8f:5d:b6:7e:
9c:3c:39:88:db:73:4c:75:65:0f:0d:78:4c:b9:d9:f7:24:9c:
d5:8e:cd:d2:0e:c1:28:ce:97:b8:01:c0:22:cc:a9:31:86:5e:
51:79:6f:28:cd:03:7e:55:7b:55:86:81:31:32:ca:16:0d:f2:
43:2b:d2:c0:3d:26:72:34:bd:c8:c1:eb:a4:94:e5:74:cc:4f:
81:9b:39:09:b8:76:d3:80:f7:28:4c:36:20:9f:bc:3c:aa:78:
4c:31:d5:2b:07:11:91:45:57:17:a3:fd:82:d8:ee:98:1b:c0:
6e:99:0f:36:a4:47:f0:c7:0e:88:5f:cb:de:d6:03:d2:ee:72:
c2:7d:db:3e:9b:93:82:2e:74:9f:35:c9:0e:05:35:e1:5a:5c:
f9:e3:84:d7:f9:2e:64:95:74:fb:e1:8d:34:35:9c:36:52:1c:
32:90:bf:f3:f5:bf:71:77:cc:65:f1:fe:29:2b:ec:0c:3c:d0:
d9:c5:cd:31:47:64:6b:29:87:67:f6:e8:03:41:8a:a2:c4:47:
97:e1:e7:f1:e1:86:93:a9:5a:e4:09:b4:68:27:5c:51:8d:9f:
ea:ef:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:42 2025 by rpki-client