Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
File: js94ugJ10dO2SSqOnWEGE8Awahc.cer (raw, json)
Hash identifier: GGbYd8sQR+6QJzP1zgpoI+aHkxTpFnyedzGm4LOM+WM=
Subject key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143BEC5185DB26EEFB660EA669F5A6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.34.188.0/22
IP: 2a00:db60::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:be:c5:18:5d:b2:6e:ef:b6:60:ea:66:9f:5a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:36:f6:ee:7d:5d:83:90:76:36:ea:e4:98:
68:49:39:22:e8:46:34:fc:c2:51:a6:64:80:9f:cb:
61:d5:c6:ef:78:b5:71:e1:b1:b1:99:d9:aa:c6:c7:
00:00:33:cc:e5:b1:0a:70:67:9c:74:f7:86:43:7b:
ab:b9:ad:2e:09:f1:ab:a0:94:17:e1:29:11:27:d2:
fe:d7:1d:98:e2:27:51:97:07:5f:08:52:13:7d:62:
45:b2:55:9f:67:84:20:43:34:21:b3:e1:13:0d:f3:
82:4a:15:f7:44:b1:db:c4:aa:e7:f8:21:81:70:9f:
64:cb:1f:02:d9:08:24:6c:ce:99:4f:ed:24:ab:2c:
32:08:7d:9b:41:a2:f0:07:fa:67:e9:ad:7e:91:e6:
ac:f1:7b:fa:22:bc:9d:bc:ce:c6:ff:b8:49:a9:0b:
05:8e:bc:90:45:75:53:5e:bb:20:87:68:4f:b6:05:
b5:a5:fd:cb:45:bf:43:4b:93:86:32:6b:e5:f9:3d:
fa:7d:c5:f0:91:ff:45:e8:e3:ad:f2:f2:b5:13:d7:
94:94:ba:3e:10:a9:af:89:5d:a1:d5:8e:20:c8:de:
f7:91:a0:4f:86:ca:e1:a0:f6:b4:fe:b1:7e:f6:c8:
bc:de:43:16:ab:33:a9:a2:d6:96:c5:df:cc:45:85:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.188.0/22
IPv6:
2a00:db60::/32
Signature Algorithm: sha256WithRSAEncryption
7b:82:c2:be:ae:9b:f1:0f:26:4e:d2:cc:49:98:a3:58:6d:61:
80:08:27:20:31:4c:8b:4e:77:03:a8:b3:5f:75:cb:ca:f4:f5:
49:ec:af:50:58:d1:53:54:98:e8:09:f1:5e:17:ea:14:17:14:
2a:fa:21:7c:a6:b9:f2:7f:4e:38:8e:2c:9b:dd:da:2e:0b:ae:
55:ce:b8:5a:ec:47:ac:71:4a:10:35:e2:d8:af:6a:2e:b2:60:
9f:5a:61:65:65:05:6a:69:4f:fe:bb:71:5b:1e:f3:ac:47:95:
ad:85:24:ac:dc:4d:c6:09:47:9d:a4:40:ec:af:b6:5e:62:17:
04:98:16:03:82:30:c1:f2:23:f0:ca:09:b2:c9:cb:70:d3:e4:
66:e5:e2:38:50:02:e7:12:fb:95:87:21:43:b6:56:d7:2e:f0:
c0:8f:ac:eb:43:2e:0b:49:eb:b7:59:64:8f:52:42:6b:d9:64:
27:2d:9c:59:e5:01:ae:87:17:49:8e:1d:6f:5f:a0:2e:72:5f:
4b:78:3b:e3:8a:80:f0:b0:b4:0a:3b:82:5c:b1:ac:95:ca:11:
63:5e:73:b1:2d:5c:31:7a:b7:11:0f:f5:e1:0c:e6:32:90:92:
0f:3d:c8:46:35:1e:42:28:e1:7f:2a:46:36:3b:98:77:16:3c:
b9:05:2f:98
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhQ77FGF2ybu+2YOpmn1puMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWNmNzhiYTAyNzVkMWQzYjY0OTJhOGU5ZDYxMDYxM2MwMzA2YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fc29u59XYOQdjbq5JhoSTki6EY0
/MJRpmSAn8th1cbveLVx4bGxmdmqxscAADPM5bEKcGecdPeGQ3urua0uCfGroJQX
4SkRJ9L+1x2Y4idRlwdfCFITfWJFslWfZ4QgQzQhs+ETDfOCShX3RLHbxKrn+CGB
cJ9kyx8C2QgkbM6ZT+0kqywyCH2bQaLwB/pn6a1+keas8Xv6IrydvM7G/7hJqQsF
jryQRXVTXrsgh2hPtgW1pf3LRb9DS5OGMmvl+T36fcXwkf9F6OOt8vK1E9eUlLo+
EKmviV2h1Y4gyN73kaBPhsrhoPa0/rF+9si83kMWqzOpotaWxd/MRYUqswIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFI7PeLoCddHTtkkqjp1hBhPAMGoXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2IyYTJk
Yy1jMDc2LTQ1ZTEtYmVjNC0yYmJmOGZhYTAwY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYjJhMmRj
LWMwNzYtNDVlMS1iZWM0LTJiYmY4ZmFhMDBjYS8xL2pzOTR1Z0oxMGRPMlNTcU9u
V0VHRThBd2FoYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSK8MA0EAgACMAcDBQAqANtgMA0GCSqGSIb3
DQEBCwUAA4IBAQB7gsK+rpvxDyZO0sxJmKNYbWGACCcgMUyLTncDqLNfdcvK9PVJ
7K9QWNFTVJjoCfFeF+oUFxQq+iF8prnyf044jiyb3douC65Vzrha7EescUoQNeLY
r2ousmCfWmFlZQVqaU/+u3FbHvOsR5WthSSs3E3GCUedpEDsr7ZeYhcEmBYDgjDB
8iPwygmyyctw0+Rm5eI4UALnEvuVhyFDtlbXLvDAj6zrQy4LSeu3WWSPUkJr2WQn
LZxZ5QGuhxdJjh1vX6Aucl9LeDvjioDwsLQKO4JcsayVyhFjXnOxLVwxercRD/Xh
DOYykJIPPchGNR5CKOF/KkY2O5h3Fjy5BS+Y
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:15 2025 by rpki-client