Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.cer (raw, json)
Hash identifier: waBVHVOFfagvPAfHxqfNO9nRu5F5wRRUbq7Cs7WAl/Q=
Subject key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444A51AA90749E1BC5248EB1A403D06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8732
AS: 9068
AS: 15582
AS: 51011
IP: 31.13.32.0/19
IP: 46.39.32.0/19
IP: 62.117.64.0/18
IP: 77.108.64.0/18
IP: 77.220.128.0/19
IP: 77.232.0.0/19
IP: 80.92.96.0/20
IP: 80.240.208.0/20
IP: 81.88.112.0/20
IP: 82.138.0.0/18
IP: 83.167.96.0/19
IP: 87.245.128.0/18
IP: 89.19.160.0/19
IP: 89.31.88.0/21
IP: 91.103.200.0/21
IP: 92.243.160.0/19
IP: 94.79.0.0/18
IP: 178.208.128.0/19
IP: 178.217.24.0/21
IP: 185.110.168.0/22
IP: 188.123.224.0/19
IP: 212.45.0.0/19
IP: 212.100.128.0/19
IP: 213.79.64.0/18
IP: 213.171.32.0/19
IP: 217.10.32.0/20
IP: 2a02:290::/32
IP: 2a02:7800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a5:1a:a9:07:49:e1:bc:52:48:eb:1a:40:3d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:e9:5e:9a:a1:46:aa:e6:7f:1c:1b:69:45:
5e:b2:4b:bd:a0:3f:aa:ac:1f:15:3f:d2:e1:fd:2f:
9c:0b:83:dc:72:d9:1f:93:ea:7b:3b:31:2d:20:a6:
6d:b2:b3:b6:98:8b:21:5d:80:61:9f:26:23:72:9d:
22:95:7b:0b:1b:a2:de:62:f9:6d:41:12:8c:6d:80:
39:46:f4:6a:3e:e7:64:10:77:61:44:66:69:c2:cc:
7b:7a:35:31:9d:8a:2c:f6:32:5a:21:f2:05:ad:cb:
47:e8:9c:1f:97:4d:eb:ee:99:c5:b7:a9:17:74:ca:
95:e1:c9:31:9d:92:33:58:70:e0:33:d8:b9:3b:53:
9e:97:9c:36:a2:8e:85:cd:59:03:bd:f8:6c:b6:41:
5c:d5:d3:23:17:26:2e:6e:31:9a:87:46:98:d3:cc:
90:01:ae:15:f7:0b:65:92:b7:80:4f:49:ce:82:c0:
92:f6:14:2a:c5:8f:2c:a0:02:52:68:cf:07:ad:96:
e0:72:64:42:09:d7:a9:86:b6:f2:bd:ed:7d:cd:df:
ea:a1:92:de:74:cf:2f:54:f0:e1:0d:1a:31:79:fa:
e0:7b:63:2b:f4:0b:c5:b0:af:5c:ec:20:1f:fb:80:
e7:5d:2b:d9:bd:18:65:c2:ad:7c:f6:73:5d:7b:a0:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.32.0/19
46.39.32.0/19
62.117.64.0/18
77.108.64.0/18
77.220.128.0/19
77.232.0.0/19
80.92.96.0/20
80.240.208.0/20
81.88.112.0/20
82.138.0.0/18
83.167.96.0/19
87.245.128.0/18
89.19.160.0/19
89.31.88.0/21
91.103.200.0/21
92.243.160.0/19
94.79.0.0/18
178.208.128.0/19
178.217.24.0/21
185.110.168.0/22
188.123.224.0/19
212.45.0.0/19
212.100.128.0/19
213.79.64.0/18
213.171.32.0/19
217.10.32.0/20
IPv6:
2a02:290::/32
2a02:7800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8732
9068
15582
51011
Signature Algorithm: sha256WithRSAEncryption
13:92:01:78:a8:13:8f:4a:c7:56:b8:e8:30:7c:78:59:30:76:
34:85:7a:05:f4:42:73:1b:e5:74:12:1d:7d:c2:9c:bb:e9:49:
8b:50:59:76:33:a3:bc:63:63:6f:29:c8:79:bf:12:f3:62:f2:
89:4c:66:0f:b2:48:af:d8:ec:e7:25:fc:d0:e7:89:35:5e:9b:
8d:9e:d3:ce:a7:6f:9b:05:22:76:ce:d7:42:a0:80:bd:50:19:
9b:b0:dd:76:71:dc:44:4b:d0:e7:c9:ab:c2:9f:ed:b6:79:f0:
58:91:d6:0a:87:0e:9a:d5:e1:8c:ac:92:05:4f:ce:ec:19:b3:
3a:80:dd:1b:95:a3:84:99:80:4c:70:dd:3a:55:08:08:d7:cf:
83:f3:f8:13:52:25:2a:34:e6:79:e5:e3:94:66:fc:9a:71:d0:
34:90:31:6e:47:4a:29:11:4a:19:96:40:a4:52:63:c5:c7:78:
4c:04:6a:19:bb:54:a7:c0:f2:6e:a4:81:95:34:f9:7a:76:cb:
be:c7:70:7f:7d:78:aa:91:83:cc:45:ff:bb:3f:1d:a2:9a:79:
41:04:22:50:0a:df:d8:97:a4:26:df:68:db:95:16:fe:3d:10:
df:a7:8f:61:bf:26:d6:ee:9c:22:bd:13:fd:a0:0a:3b:78:ee:
35:98:a2:cd
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISAZQkRKUaqQdJ4bxSSOsaQD0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzhmZDYzMWVmMmVjNzM3OTQzN2ZkN2M3NmY4ZTI0NWZmMDgyNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bnpXpqhRqrmfxwbaUVesku9oD+q
rB8VP9Lh/S+cC4Pcctkfk+p7OzEtIKZtsrO2mIshXYBhnyYjcp0ilXsLG6LeYvlt
QRKMbYA5RvRqPudkEHdhRGZpwsx7ejUxnYos9jJaIfIFrctH6Jwfl03r7pnFt6kX
dMqV4ckxnZIzWHDgM9i5O1Oel5w2oo6FzVkDvfhstkFc1dMjFyYubjGah0aY08yQ
Aa4V9wtlkreAT0nOgsCS9hQqxY8soAJSaM8HrZbgcmRCCdephrbyve19zd/qoZLe
dM8vVPDhDRoxefrge2Mr9AvFsK9c7CAf+4DnXSvZvRhlwq189nNde6AUQQIDAQAB
o4IDXTCCA1kwHQYDVR0OBBYEFIeP1jHvLsc3lDf9fHb44kX/CCS7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2FhM2Rj
Yi1kYTY0LTQ5YzgtOThlZC1iYTZjYjQyNTJmZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvYWEzZGNi
LWRhNjQtNDljOC05OGVkLWJhNmNiNDI1MmZkNy8xL2g0X1dNZTh1eHplVU5fMThk
dmppUmY4SUpMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHPBggrBgEF
BQcBBwEB/wSBvzCBvDCBowQCAAEwgZwDBAUfDSADBAUuJyADBAY+dUADBAZNbEAD
BAVN3IADBAVN6AADBARQXGADBARQ8NADBARRWHADBAZSigADBAVTp2ADBAZX9YAD
BAVZE6ADBANZH1gDBANbZ8gDBAVc86ADBAZeTwADBAWy0IADBAOy2RgDBAK5bqgD
BAW8e+ADBAXULQADBAXUZIADBAbVT0ADBAXVqyADBATZCiAwFAQCAAIwDgMFACoC
ApADBQAqAngAMCYGCCsGAQUFBwEIAQH/BBcwFaATMBECAiIcAgIjbAICPN4CAwDH
QzANBgkqhkiG9w0BAQsFAAOCAQEAE5IBeKgTj0rHVrjoMHx4WTB2NIV6BfRCcxvl
dBIdfcKcu+lJi1BZdjOjvGNjbynIeb8S82LyiUxmD7JIr9js5yX80OeJNV6bjZ7T
zqdvmwUids7XQqCAvVAZm7DddnHcREvQ58mrwp/ttnnwWJHWCocOmtXhjKySBU/O
7BmzOoDdG5WjhJmATHDdOlUICNfPg/P4E1IlKjTmeeXjlGb8mnHQNJAxbkdKKRFK
GZZApFJjxcd4TARqGbtUp8DybqSBlTT5enbLvsdwf314qpGDzEX/uz8dopp5QQQi
UArf2JekJt9o25UW/j0Q36ePYb8m1u6cIr0T/aAKO3juNZiizQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:30 2025 by rpki-client