Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
File: kXsIiSLQ8z_soWTghVTsmS2qOcU.cer (raw, json)
Hash identifier: EOoLZVl3T7jBMTHXutUky/In2j1pRremKO6QgCXUQno=
Subject key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252232675C9ED2C0D8B2BBC5A21F7ADD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
caRepository: rsync://0.sb/repo/sb/1/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8888
AS: 210807
IP: 78.31.211.0/24
IP: 94.124.79.0/24
IP: 146.19.0.0/24
IP: 146.19.145.0/24
IP: 2a11::/32
IP: 2a11:3:: -- 2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
IP: 2a11:8080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:67:5c:9e:d2:c0:d8:b2:bb:c5:a2:1f:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=917b088922d0f33feca164e08554ec992daa39c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:38:4b:fe:e8:3b:25:f5:87:a9:00:bb:b8:
4c:d4:53:74:f9:82:6d:a5:40:d6:54:3c:34:2b:c5:
e0:c1:89:24:a4:f2:11:b0:b3:06:b7:1f:d8:f5:73:
24:42:f1:a8:f8:ed:d6:e4:09:32:b2:0d:96:7b:db:
e7:94:c5:7a:aa:37:2f:da:3c:ce:5d:bb:a1:26:d7:
bc:f4:2f:66:ad:6b:5c:6e:7d:04:5a:f0:fa:f9:36:
46:e9:57:78:d9:a3:61:0a:00:8b:c6:59:a8:ef:e6:
43:6f:b7:9a:42:0e:dc:b6:74:e8:d1:a2:86:7c:11:
65:0e:d0:13:a2:bb:79:3b:24:62:4f:92:be:ed:ba:
71:37:3f:14:5a:9a:6b:7e:eb:71:20:ef:1e:b8:cc:
5d:da:2a:f7:55:36:44:e2:f9:99:37:35:78:6e:0b:
3f:55:47:e0:1f:80:17:53:67:bc:ec:55:c9:88:7a:
c5:10:e3:db:ae:27:ba:f7:8b:2a:ef:1b:d1:b6:bc:
8d:4b:71:46:44:8a:b3:f9:78:37:f0:c3:17:5b:ab:
9c:e5:7c:24:42:21:e8:2d:1a:9a:70:5d:84:19:2e:
c1:eb:93:20:e6:7e:86:52:d7:da:b0:16:a1:95:33:
a4:d2:78:1b:9c:f8:c5:37:52:9b:21:c1:9f:55:83:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/1/
RPKI Manifest - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.211.0/24
94.124.79.0/24
146.19.0.0/24
146.19.145.0/24
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8888
210807
Signature Algorithm: sha256WithRSAEncryption
5c:8c:75:70:8e:d8:f5:1d:2d:a0:2a:86:99:c5:44:57:a3:55:
53:7f:be:92:14:20:39:64:a4:06:dd:2c:0b:65:a7:58:03:7a:
89:31:7d:26:da:76:66:9e:7d:c5:56:d3:a0:c0:d0:40:22:58:
8e:3c:aa:00:21:36:1b:ce:40:75:8c:15:c1:d1:ea:5f:43:4e:
84:e8:95:a2:92:a3:f5:77:0c:ba:1a:95:1f:bd:93:bd:2b:69:
2c:59:53:dc:8f:3a:92:85:58:c7:a8:c7:a1:e5:ff:c4:72:17:
af:5e:70:f6:2f:e6:82:c3:02:d9:44:19:7e:31:0b:6c:62:59:
a2:20:35:b0:fb:86:fc:83:0b:f5:37:bc:ff:19:e4:73:21:45:
e9:88:3f:17:fd:82:b4:f7:f6:33:d3:92:17:ea:0d:dc:f4:a1:
a0:b9:9f:8a:48:94:61:e9:bd:0b:cd:5e:27:c4:01:85:ed:f8:
64:16:29:d9:f0:d8:94:30:30:59:dc:af:09:b3:09:42:01:11:
4c:7c:dc:54:31:5e:ef:31:7c:83:9d:70:d7:7a:35:80:28:e0:
e7:76:33:58:86:bc:87:fd:fb:88:08:22:38:3a:eb:91:a4:5a:
78:19:69:94:1e:58:09:e8:18:c3:c7:3d:0f:1d:d9:90:35:e4:
db:d6:e8:5c
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZQlIjJnXJ7SwNiyu8WiH3rdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTdiMDg4OTIyZDBmMzNmZWNhMTY0ZTA4NTU0ZWM5OTJkYWEzOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGw4S/7oOyX1h6kAu7hM1FN0+YJt
pUDWVDw0K8XgwYkkpPIRsLMGtx/Y9XMkQvGo+O3W5Akysg2We9vnlMV6qjcv2jzO
XbuhJte89C9mrWtcbn0EWvD6+TZG6Vd42aNhCgCLxlmo7+ZDb7eaQg7ctnTo0aKG
fBFlDtATort5OyRiT5K+7bpxNz8UWpprfutxIO8euMxd2ir3VTZE4vmZNzV4bgs/
VUfgH4AXU2e87FXJiHrFEOPbrie694sq7xvRtryNS3FGRIqz+Xg38MMXW6uc5Xwk
QiHoLRqacF2EGS7B65Mg5n6GUtfasBahlTOk0ngbnPjFN1KbIcGfVYNEIwIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFJF7CIki0PM/7KFk4IVU7JktqjnFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgbYGCCsGAQUFBwELBIGpMIGmMCMGCCsGAQUFBzAFhhdyc3lu
YzovLzAuc2IvcmVwby9zYi8xLzBPBggrBgEFBQcwCoZDcnN5bmM6Ly8wLnNiL3Jl
cG8vc2IvMS85MTdCMDg4OTIyRDBGMzNGRUNBMTY0RTA4NTU0RUM5OTJEQUEzOUM1
Lm1mdDAuBggrBgEFBQcwDYYiaHR0cHM6Ly8wLnNiL3JyZHAvbm90aWZpY2F0aW9u
LnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmww
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBXBggrBgEFBQcBBwEB/wRIMEYwHgQC
AAEwGAMEAE4f0wMEAF58TwMEAJITAAMEAJITkTAkBAIAAjAeAwUAKhEAADAOAwUA
KhEAAwMFAyoRAAADBQMqEYCAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAiK4AgMD
N3cwDQYJKoZIhvcNAQELBQADggEBAFyMdXCO2PUdLaAqhpnFRFejVVN/vpIUIDlk
pAbdLAtlp1gDeokxfSbadmaefcVW06DA0EAiWI48qgAhNhvOQHWMFcHR6l9DToTo
laKSo/V3DLoalR+9k70raSxZU9yPOpKFWMeox6Hl/8RyF69ecPYv5oLDAtlEGX4x
C2xiWaIgNbD7hvyDC/U3vP8Z5HMhRemIPxf9grT39jPTkhfqDdz0oaC5n4pIlGHp
vQvNXifEAYXt+GQWKdnw2JQwMFncrwmzCUIBEUx83FQxXu8xfIOdcNd6NYAo4Od2
M1iGvIf9+4gIIjg665GkWngZaZQeWAnoGMPHPQ8d2ZA15NvW6Fw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:57 2025 by rpki-client