Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer (raw, json)
Hash identifier: YTov6VBm7FL7eX+h0/t/ztB+k1O5KL+wYz9xf7TtX7I=
Subject key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBAE8F5FDB3D791381D19CF68A26A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209181
AS: 213051
IP: 2.58.192.0/22
IP: 79.143.16.0 -- 79.143.18.255
IP: 89.46.123.0/24
IP: 128.0.38.0/23
IP: 185.252.0.0/22
IP: 193.109.108.0/22
IP: 2a09:e9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ae:8f:5f:db:3d:79:13:81:d1:9c:f6:8a:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:6c:bb:5c:4f:f8:f3:19:da:cf:a1:3c:07:
e7:04:54:09:cb:27:9f:df:47:cb:8c:cb:84:2d:a0:
7b:65:44:0a:42:8c:d1:93:09:06:06:0f:31:59:8b:
11:bd:92:b2:d2:b9:c5:3a:70:1c:9f:6a:dc:c5:af:
18:03:ae:1c:bf:30:e9:99:1d:8f:30:fd:20:aa:71:
67:29:59:d7:26:f1:84:b4:4d:d1:ae:4c:bd:09:b8:
e3:d3:e2:21:4d:e3:67:5a:80:f1:bc:5f:f7:82:a8:
6e:3e:af:44:a2:c0:54:b3:1f:48:85:1d:06:3a:07:
db:17:58:c5:81:09:da:04:e3:b7:8c:a4:d3:60:6f:
d8:1d:2f:4d:b3:b7:d9:34:70:f2:67:3f:38:08:52:
62:95:2f:55:6d:f2:9d:70:4e:73:76:4b:8e:d5:75:
27:35:66:77:ac:3c:30:14:77:99:2d:ed:09:bf:50:
50:a9:c5:a1:b2:82:e9:83:3b:6e:79:65:8d:a9:4d:
5f:64:5b:d7:00:c9:99:ac:a1:46:f2:01:e1:01:54:
bb:2d:3a:13:0c:65:e0:39:24:94:94:d0:63:38:05:
bf:e9:e8:ac:a0:6e:a6:14:7d:85:36:83:01:76:af:
fd:7c:16:71:e9:26:0f:52:a4:c4:0c:6a:5e:d6:b8:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.192.0/22
79.143.16.0-79.143.18.255
89.46.123.0/24
128.0.38.0/23
185.252.0.0/22
193.109.108.0/22
IPv6:
2a09:e9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209181
213051
Signature Algorithm: sha256WithRSAEncryption
25:19:b9:90:59:1a:b6:da:cb:3f:db:61:27:a2:63:f7:29:2b:
32:69:cd:66:fc:cd:30:80:9b:a7:30:61:39:61:68:d8:05:36:
5f:91:3f:68:a5:f7:79:9b:c3:76:ca:14:fe:e9:b9:dd:9a:50:
47:ae:e5:8c:03:92:9a:a6:4a:eb:4d:8d:ec:48:76:f9:3c:dc:
54:cc:19:62:f1:42:52:3a:36:1f:be:3a:bf:15:c6:d5:b1:84:
0d:7d:e9:82:36:9c:0e:e7:c2:81:04:41:7d:a1:2f:c7:9c:d7:
60:d1:5b:20:4c:72:6f:d0:b3:d0:17:67:41:dd:46:28:04:51:
d5:d5:94:c4:3e:50:68:c9:ca:6d:fa:ef:9c:db:16:b3:dc:06:
db:a4:d1:9c:b9:41:14:a5:b2:36:69:a5:cc:1c:e3:c4:57:16:
a4:02:14:7a:60:eb:06:c4:b6:c0:4a:48:5c:72:39:c5:df:23:
03:8a:a9:09:ae:00:4b:ac:7c:b2:67:bc:34:97:df:a1:34:7e:
35:2c:ea:3d:8f:a7:a4:8e:0d:91:7b:e5:79:36:d8:be:e7:0b:
11:84:b2:82:80:43:4d:e5:02:b0:8d:1e:88:ef:5a:9b:76:34:
f9:bd:62:29:4b:5d:fd:7f:66:fc:05:21:1a:10:9d:0e:c6:60:
e5:8c:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:53:03 2025 by rpki-client