Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer (raw, json)
Hash identifier: IZynfUuBaF3LgA+gpfnIsZVLfGr72nvgdi+U4gPa0wM=
Subject key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368FA1401BD18FB5EEE6D651D6C8A61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8747
AS: 29208
AS: 34315
IP: 46.227.8.0/21
IP: 62.4.96.0/19
IP: 62.44.0.0/19
IP: 62.177.64.0/18
IP: 82.100.0.0/18
IP: 82.113.32.0/19
IP: 82.119.240.0/20
IP: 83.148.0.0/18
IP: 85.93.96.0/19
IP: 88.146.0.0/17
IP: 88.208.64.0/18
IP: 89.235.0.0/18
IP: 95.80.192.0/18
IP: 109.235.176.0/21
IP: 151.237.224.0/21
IP: 185.24.236.0/22
IP: 194.213.224.0/19
IP: 195.122.192.0/19
IP: 195.128.192.0/19
IP: 195.250.128.0/19
IP: 212.20.96.0/19
IP: 212.24.128.0/19
IP: 212.27.192.0/19
IP: 212.80.64.0/19
IP: 213.151.64.0/19
IP: 213.175.32.0/19
IP: 213.191.96.0/19
IP: 2001:1508::/32
IP: 2001:4de8::/32
IP: 2a00:c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fa:14:01:bd:18:fb:5e:ee:6d:65:1d:6c:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:2a:52:02:39:1f:89:82:6a:11:00:fc:f2:
96:37:48:df:9b:bd:7f:8b:f9:db:1f:df:cc:95:c5:
ba:7e:93:d0:6a:c4:10:2f:ac:7a:13:84:01:65:b8:
64:f8:2a:2e:39:c8:c2:1c:52:fa:e4:b0:08:26:9e:
6c:4e:d6:1e:66:ca:6b:d4:e1:c7:41:00:29:25:c3:
61:6b:9d:b6:c1:e5:74:32:56:4b:69:54:23:a6:c7:
f5:f8:d6:2d:e9:23:c2:8a:a1:86:70:83:dd:39:77:
6d:e8:da:5a:e1:46:90:42:9a:07:dd:04:b1:a2:4d:
1d:94:73:bc:8f:17:f9:bd:52:e3:e8:5e:a0:f1:34:
e1:85:31:fd:dd:a2:93:af:a2:b3:af:07:1e:58:46:
7f:bb:ef:10:66:89:d2:38:ac:14:68:1d:84:e8:93:
68:a6:50:ec:66:c3:2d:52:58:4b:7e:39:a2:da:d3:
be:4f:12:49:e2:41:d5:91:eb:bf:c5:b9:73:a9:f7:
63:c3:32:5f:65:d1:5d:6f:7f:c2:15:e7:e1:66:13:
f4:53:36:5d:9b:7b:2d:f8:46:15:8a:81:87:f2:16:
e1:cb:7f:14:b2:b0:0f:61:0d:18:bc:34:40:e9:6f:
5c:1a:9b:4d:9b:59:b2:a6:b8:3b:2e:c6:8b:0d:b5:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.8.0/21
62.4.96.0/19
62.44.0.0/19
62.177.64.0/18
82.100.0.0/18
82.113.32.0/19
82.119.240.0/20
83.148.0.0/18
85.93.96.0/19
88.146.0.0/17
88.208.64.0/18
89.235.0.0/18
95.80.192.0/18
109.235.176.0/21
151.237.224.0/21
185.24.236.0/22
194.213.224.0/19
195.122.192.0/19
195.128.192.0/19
195.250.128.0/19
212.20.96.0/19
212.24.128.0/19
212.27.192.0/19
212.80.64.0/19
213.151.64.0/19
213.175.32.0/19
213.191.96.0/19
IPv6:
2001:1508::/32
2001:4de8::/32
2a00:c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8747
29208
34315
Signature Algorithm: sha256WithRSAEncryption
0a:fe:b6:a7:ee:ca:b2:75:50:40:29:e3:d2:e9:96:81:3f:67:
8d:40:75:e3:52:25:ee:18:21:2a:1d:45:bc:fd:49:fb:6a:c7:
fa:de:22:f2:ee:10:55:91:39:f9:27:2b:c5:1e:b9:70:f9:8a:
5e:20:c7:26:5a:46:a2:26:5e:2d:36:93:fb:aa:e2:ad:5e:a9:
2a:a3:83:3b:9d:c1:c6:c1:55:4d:cd:05:fb:49:da:e8:3d:c9:
4c:57:73:89:18:df:d5:9f:f4:55:98:5f:30:1c:f2:7a:3f:65:
cb:e1:ef:96:4d:6c:1f:ec:6a:e9:2e:de:03:c0:bb:9c:57:5f:
2d:1a:ed:3b:23:21:76:03:aa:0d:b1:7e:d8:93:91:2e:46:46:
3c:f8:f2:84:c4:12:c3:39:60:99:75:2d:c2:67:82:68:ad:e6:
7c:55:18:9e:f8:4f:c1:46:dd:88:2b:73:e7:b2:af:b2:38:ad:
09:4a:f6:ff:c1:8e:90:e1:a4:24:92:61:c1:9a:2a:14:5d:6f:
f9:d2:95:f0:ce:de:c2:0f:75:87:84:49:19:49:bc:c5:ce:ff:
a7:3b:84:eb:09:35:c3:9f:82:70:df:c9:34:24:7c:32:c9:49:
e4:af:c4:0a:5a:24:f8:9e:c2:d3:3a:6e:4e:f5:c0:37:10:e9:
3c:15:07:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:21:37 2025 by rpki-client