Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer (raw, json)
Hash identifier: hcsQcDsBGi2duYJ/WqHGIelpWsoFA9hAYdkLKu4D96s=
Subject key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F620D1B856B24A4F18E4B9AF48FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203474
IP: 185.114.196.0/22
IP: 2a03:3780::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f6:20:d1:b8:56:b2:4a:4f:18:e4:b9:af:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:bc:53:c4:01:da:b5:d0:40:4a:31:02:c9:
9d:0b:66:59:39:7c:f2:c5:89:64:bb:78:7a:f7:d7:
8d:86:e8:53:73:9c:6c:e6:b6:bc:fa:0e:91:dd:1e:
19:47:8d:10:b5:24:23:b8:db:be:0e:c2:27:dc:77:
11:54:dd:55:61:ca:61:b0:23:f0:1f:9f:70:8a:f6:
a5:1e:b0:d8:c4:96:43:df:ec:2e:09:dc:eb:36:ec:
09:e9:92:da:0b:32:6e:5a:3f:35:f5:b5:3b:87:ab:
be:31:48:dd:3c:75:0e:d9:48:74:57:0f:f4:5b:f8:
63:de:22:f2:a7:84:98:a4:8f:0c:b9:33:d2:fe:82:
cf:7f:b3:f9:91:a9:9e:11:1c:ae:36:d5:77:e5:0c:
93:41:78:64:b0:8a:ed:d0:e3:95:78:d0:dd:38:ac:
90:3b:74:6c:bb:0a:9d:24:ec:ed:73:fe:1c:72:09:
9d:09:b5:a9:65:6d:2b:ef:b1:1a:a9:1b:cc:aa:33:
4d:6f:28:b5:e0:28:e4:cf:ef:71:b1:cd:31:4c:45:
ff:27:b5:dc:3b:d6:d6:ca:5c:3b:e4:4d:31:6e:af:
8b:d8:a6:68:09:79:52:8d:34:02:24:10:77:99:6f:
84:36:84:9c:af:13:02:0c:88:e5:d0:fa:1f:d9:c7:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.196.0/22
IPv6:
2a03:3780::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203474
Signature Algorithm: sha256WithRSAEncryption
5e:1e:f1:69:07:65:7b:4f:99:2d:62:fe:ad:ae:f5:6e:6e:4f:
e3:69:43:54:e9:ae:54:42:cd:bb:9b:15:95:72:11:12:35:ef:
ab:77:81:fe:fc:ba:96:b8:9c:57:ec:62:a1:ae:c9:71:95:a3:
6f:3b:2e:a9:b0:40:9e:40:be:7d:1b:35:73:bc:0e:89:2b:53:
e7:58:a8:af:db:14:ae:6a:5f:43:f2:7b:82:f3:4b:c1:7b:d4:
db:02:1c:37:e8:71:d2:57:7b:f9:4c:da:25:88:a1:99:55:45:
ed:00:f0:36:9f:15:53:7a:f1:3c:7b:a6:7c:83:b1:62:c2:8a:
7c:7f:7a:63:22:c1:a0:84:33:3c:35:ac:97:d2:64:5e:e2:be:
05:f1:4a:c8:df:89:7b:c6:a4:00:ea:35:d2:bd:e9:27:b4:bb:
ec:9a:ce:f1:22:62:cd:9a:1e:3a:c8:18:db:22:f4:6d:5a:88:
c8:1d:41:26:02:3b:7e:fb:7a:30:bf:1e:a3:c5:b8:f8:a0:5e:
90:7f:32:52:9a:60:d6:20:ad:c1:80:5a:c1:2d:64:d7:2d:b2:
93:b7:a5:ef:1b:1c:7f:d9:62:fc:4f:22:f8:2b:0b:f7:9c:41:
38:be:a3:80:a1:0d:04:35:e0:d3:ad:40:84:27:81:6c:d7:f8:
42:4b:e1:c4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQgZ/Yg0bhWskpPGOS5r0j6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDY3MzMzMThjNjJjNDc5MjBmZTM3NWFkOTljYjcyOWVlOTBhMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24q8U8QB2rXQQEoxAsmdC2ZZOXzy
xYlku3h699eNhuhTc5xs5ra8+g6R3R4ZR40QtSQjuNu+DsIn3HcRVN1VYcphsCPw
H59wivalHrDYxJZD3+wuCdzrNuwJ6ZLaCzJuWj819bU7h6u+MUjdPHUO2Uh0Vw/0
W/hj3iLyp4SYpI8MuTPS/oLPf7P5kameERyuNtV35QyTQXhksIrt0OOVeNDdOKyQ
O3RsuwqdJOztc/4ccgmdCbWpZW0r77EaqRvMqjNNbyi14Cjkz+9xsc0xTEX/J7Xc
O9bWylw75E0xbq+L2KZoCXlSjTQCJBB3mW+ENoScrxMCDIjl0Pof2ceu8wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFJRnMzGMYsR5IP43WtmctynukKGtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2Q3NjA5
ZS02Mzk2LTQxNTUtYWQzNS1iNzQwODlkOGU1OWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvZDc2MDll
LTYzOTYtNDE1NS1hZDM1LWI3NDA4OWQ4ZTU5ZS8xL2xHY3pNWXhpeEhrZ19qZGEy
WnkzS2U2UW9hMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuXLEMA0EAgACMAcDBQAqAzeAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMa0jANBgkqhkiG9w0BAQsFAAOCAQEAXh7xaQdle0+Z
LWL+ra71bm5P42lDVOmuVELNu5sVlXIREjXvq3eB/vy6lricV+xioa7JcZWjbzsu
qbBAnkC+fRs1c7wOiStT51ior9sUrmpfQ/J7gvNLwXvU2wIcN+hx0ld7+UzaJYih
mVVF7QDwNp8VU3rxPHumfIOxYsKKfH96YyLBoIQzPDWsl9JkXuK+BfFKyN+Je8ak
AOo10r3pJ7S77JrO8SJizZoeOsgY2yL0bVqIyB1BJgI7fvt6ML8eo8W4+KBekH8y
Uppg1iCtwYBawS1k1y2yk7el7xscf9li/E8i+CsL95xBOL6jgKENBDXg061AhCeB
bNf4QkvhxA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:16:56 2025 by rpki-client