Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
File: hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer (raw, json)
Hash identifier: FN7gu96j9MqkprqkGCCc4ve2areRo+DC8XACFKQnWoE=
Subject key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649E851C955EF91233A137AF64AF786
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.14.180.0 -- 31.14.182.255
IP: 37.156.69.0 -- 37.156.70.255
IP: 45.81.169.0 -- 45.81.171.255
IP: 84.247.44.0/23
IP: 85.204.109.0/24
IP: 86.105.24.0/24
IP: 86.105.232.0/24
IP: 86.107.186.0/23
IP: 89.32.171.0/24
IP: 89.32.240.0/21
IP: 89.33.17.0/24
IP: 89.33.30.0/24
IP: 89.33.65.0/24
IP: 89.35.34.0/24
IP: 89.35.76.0/24
IP: 89.35.88.0/24
IP: 89.35.91.0/24
IP: 89.35.163.0/24
IP: 89.35.248.0/24
IP: 89.37.40.0/24
IP: 89.46.40.0/23
IP: 89.47.176.0 -- 89.47.178.255
IP: 89.47.180.0 -- 89.47.182.255
IP: 91.132.40.0/22
IP: 93.113.72.0/21
IP: 176.223.144.0/20
IP: 178.239.16.0/22
IP: 185.160.74.0/23
IP: 188.211.172.0/22
IP: 188.212.112.0/22
IP: 188.212.157.0/24
IP: 188.213.86.0 -- 188.213.95.255
IP: 188.240.70.0/24
IP: 193.164.216.0/23
IP: 194.145.194.0/23
IP: 217.148.134.0/23
IP: 2a00:bba0::/32
IP: 2a07:bac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e8:51:c9:55:ef:91:23:3a:13:7a:f6:4a:f7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:4b:4c:db:47:95:39:c5:18:49:f6:46:da:
df:66:9d:aa:c7:54:bb:82:97:ea:39:ae:11:ba:a0:
f4:18:03:3d:f8:c3:67:d9:56:84:20:ce:b5:72:02:
a2:0b:a8:5c:d3:23:37:3b:70:9a:5a:60:76:a2:ea:
c3:fe:d0:e2:8d:a8:e3:0d:4d:22:03:32:77:9c:9f:
58:c2:ee:c3:40:d7:43:d8:b4:96:3b:a5:59:c9:d5:
11:b8:29:8a:c2:dd:1f:95:95:ab:a8:bb:b2:31:ef:
35:1d:44:9f:23:93:c7:81:37:dc:ed:f8:d3:29:7b:
e0:88:b3:e8:de:f1:f4:39:d8:91:7a:51:e5:f8:f1:
51:f6:58:47:a8:6d:d0:94:a6:c0:c3:71:a1:25:31:
8e:ec:f0:e0:95:13:0a:ae:59:71:6f:76:a5:f9:9b:
1e:75:d3:5d:98:36:2e:ad:e0:40:dd:8e:9d:db:c0:
92:3f:27:5b:d8:f0:0e:40:c2:47:0d:8a:cc:df:c7:
47:2b:90:8f:d1:38:38:ff:91:61:40:14:c9:0f:ed:
a6:6a:9f:ce:f4:7f:5b:0d:8f:d3:ec:a3:9d:69:68:
d4:ff:06:e8:b9:a8:42:86:b6:9e:15:8a:ac:74:3b:
7b:71:65:07:60:38:c3:de:c5:88:ba:fc:46:94:75:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.180.0-31.14.182.255
37.156.69.0-37.156.70.255
45.81.169.0-45.81.171.255
84.247.44.0/23
85.204.109.0/24
86.105.24.0/24
86.105.232.0/24
86.107.186.0/23
89.32.171.0/24
89.32.240.0/21
89.33.17.0/24
89.33.30.0/24
89.33.65.0/24
89.35.34.0/24
89.35.76.0/24
89.35.88.0/24
89.35.91.0/24
89.35.163.0/24
89.35.248.0/24
89.37.40.0/24
89.46.40.0/23
89.47.176.0-89.47.178.255
89.47.180.0-89.47.182.255
91.132.40.0/22
93.113.72.0/21
176.223.144.0/20
178.239.16.0/22
185.160.74.0/23
188.211.172.0/22
188.212.112.0/22
188.212.157.0/24
188.213.86.0-188.213.95.255
188.240.70.0/24
193.164.216.0/23
194.145.194.0/23
217.148.134.0/23
IPv6:
2a00:bba0::/32
2a07:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
84:32:75:a7:d3:dd:fc:62:42:58:7d:a7:e8:dc:da:3d:f2:b9:
56:e5:8f:b8:2c:2a:c2:34:65:99:5a:f9:98:d2:cf:33:fb:f6:
31:c3:55:fc:6a:db:99:9a:b0:af:a7:d2:63:a8:31:a7:e1:91:
79:cf:b9:24:7e:7f:a1:ab:f8:20:f4:a7:29:c4:b7:80:ad:92:
c4:a3:2b:07:cc:2d:a5:ec:fb:13:d8:ed:43:dd:61:bf:7a:f0:
11:3b:d4:2d:da:df:17:8f:f8:7c:26:b2:bd:fc:e2:ba:19:a6:
0b:de:89:be:97:4d:80:b3:66:b3:b1:7b:65:b8:ce:92:67:8b:
75:fe:a2:ef:c5:51:aa:dd:9f:ed:2f:67:80:a5:fd:24:40:ec:
b2:e7:38:8c:98:19:c8:9d:49:9d:6a:60:6c:59:75:80:13:e2:
40:5e:44:0b:8a:e1:f6:23:00:42:b3:23:fb:9e:be:97:b6:b3:
7c:97:88:0c:3a:5b:e0:47:89:6a:ff:f3:06:66:f9:15:d0:a1:
1e:87:3a:06:5c:9f:19:de:91:f9:9a:01:2b:f5:be:02:4c:33:
28:3c:2f:16:6d:07:f2:ee:35:25:43:93:04:d4:90:c0:b3:2f:
4e:66:de:f0:82:f3:71:e3:17:78:fe:76:74:05:c9:13:88:5f:
29:f5:17:b2
-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgISAYzGSehRyVXvkSM6E3r2SveGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGJmYzQ1MWZjNGYyNDExYWRkZDAwYTlmYmIxNzM0NmFkNmU4OTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRFLTNtHlTnFGEn2RtrfZp2qx1S7
gpfqOa4RuqD0GAM9+MNn2VaEIM61cgKiC6hc0yM3O3CaWmB2ourD/tDijajjDU0i
AzJ3nJ9Ywu7DQNdD2LSWO6VZydURuCmKwt0flZWrqLuyMe81HUSfI5PHgTfc7fjT
KXvgiLPo3vH0OdiRelHl+PFR9lhHqG3QlKbAw3GhJTGO7PDglRMKrllxb3al+Zse
ddNdmDYureBA3Y6d28CSPydb2PAOQMJHDYrM38dHK5CP0Tg4/5FhQBTJD+2map/O
9H9bDY/T7KOdaWjU/wbouahChraeFYqsdDt7cWUHYDjD3sWIuvxGlHUJ/wIDAQAB
o4IDpjCCA6IwHQYDVR0OBBYEFIS/xFH8TyQRrd0Aqfuxc0atbomWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2I3YmU2
NC04NmQ0LTQ0M2ItOTY4Ni1mNjYzMTc5Nzc5NjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvYjdiZTY0
LTg2ZDQtNDQzYi05Njg2LWY2NjMxNzk3Nzk2OC8xL2hMX0VVZnhQSkJHdDNRQ3At
N0Z6UnExdWlaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBPwYIKwYB
BQUHAQcBAf8EggEuMIIBKjCCARAEAgABMIIBCDAMAwQCHw60AwQAHw62MAwDBAAl
nEUDBAAlnEYwDAMEAC1RqQMEAi1RqAMEAVT3LAMEAFXMbQMEAFZpGAMEAFZp6AME
AVZrugMEAFkgqwMEA1kg8AMEAFkhEQMEAFkhHgMEAFkhQQMEAFkjIgMEAFkjTAME
AFkjWAMEAFkjWwMEAFkjowMEAFkj+AMEAFklKAMEAVkuKDAMAwQEWS+wAwQAWS+y
MAwDBAJZL7QDBABZL7YDBAJbhCgDBANdcUgDBASw35ADBAKy7xADBAG5oEoDBAK8
06wDBAK81HADBAC81J0wDAMEAbzVVgMEBbzVQAMEALzwRgMEAcGk2AMEAcKRwgME
AdmUhjAUBAIAAjAOAwUAKgC7oAMFAyoHusAwDQYJKoZIhvcNAQELBQADggEBAIQy
dafT3fxiQlh9p+jc2j3yuVblj7gsKsI0ZZla+ZjSzzP79jHDVfxq25masK+n0mOo
MafhkXnPuSR+f6Gr+CD0pynEt4CtksSjKwfMLaXs+xPY7UPdYb968BE71C3a3xeP
+Hwmsr384roZpgveib6XTYCzZrOxe2W4zpJni3X+ou/FUardn+0vZ4Cl/SRA7LLn
OIyYGcidSZ1qYGxZdYAT4kBeRAuK4fYjAEKzI/uevpe2s3yXiAw6W+BHiWr/8wZm
+RXQoR6HOgZcnxnekfmaASv1vgJMMyg8LxZtB/LuNSVDkwTUkMCzL05m3vCC83Hj
F3j+dnQFyROIXyn1F7I=
-----END CERTIFICATE-----
Generated at Fri May 3 08:11:33 2024 by rpki-client on console-fra.rpki-client.org