Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
File: lJCxxOooQt35kp6oplRbgXoodoA.cer (raw, json)
Hash identifier: 09D/CS5oUaX77xaAHLXg/JQLb/Lp7PTMqnoyHh5kRvY=
Subject key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FA9E8FD3A14D419ED1F91221B57CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:c08::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:e8:fd:3a:14:d4:19:ed:1f:91:22:1b:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:56:41:7e:67:f7:cf:cb:a7:03:da:87:5a:
5c:1c:f5:f8:ae:04:1f:cb:05:84:79:4e:46:db:49:
9c:e6:7b:98:b0:32:37:bc:45:36:25:67:d6:54:92:
8d:ba:05:5a:f1:17:a4:70:60:d6:ba:32:5d:86:fb:
82:16:d7:59:79:05:09:3f:28:16:3c:27:e0:be:23:
d1:dc:9f:5e:c8:ac:f1:01:73:3d:1f:4d:12:9a:aa:
d7:45:3b:93:0d:b5:b8:ce:bd:d2:92:a1:d2:05:db:
4b:8a:de:c9:31:2c:02:79:85:59:04:4f:81:af:d7:
9c:8f:0f:aa:08:98:1f:4c:49:83:d7:82:9b:27:3b:
2a:86:be:cf:2f:58:2e:5e:d8:67:69:6d:15:bd:8b:
c0:97:9f:30:20:8d:74:63:bf:a6:71:14:0e:fb:cb:
55:3d:2b:35:b6:ee:21:34:35:4c:7e:22:8b:8f:93:
94:64:2a:ee:3f:3a:4e:db:e7:83:2b:fb:ee:e6:39:
ec:00:f7:78:e7:a6:25:f3:a8:c1:c0:66:92:5e:e4:
ee:2e:04:fe:7e:c8:2e:b8:97:38:7a:45:b7:e4:90:
b4:7e:cd:59:b2:6d:2a:a6:c8:8d:b8:96:e6:90:42:
ad:b1:d5:44:a2:1b:7b:95:26:b7:b8:b6:8f:bf:9f:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c08::/48
Signature Algorithm: sha256WithRSAEncryption
57:2a:f0:f9:91:36:73:51:b0:97:4c:8b:6e:d7:a9:dc:72:e7:
2b:47:ff:74:fe:4c:1e:65:ee:8b:84:6e:fb:f1:1f:95:25:43:
92:79:58:56:6c:45:bf:66:9f:74:2d:d4:11:0e:99:69:7d:89:
f6:a3:f8:c6:fa:cc:e1:8b:4b:f2:1b:a4:d4:a5:3e:15:39:30:
a6:cd:9d:7e:65:45:e4:1e:12:ac:e4:86:9e:ec:72:f2:e4:8f:
d7:14:04:97:64:ea:dd:5a:a0:91:ea:c6:21:d2:08:ea:ff:f9:
f9:c9:31:f3:06:b8:1d:0f:b4:46:0b:38:84:e4:dc:e3:cc:4e:
68:b7:db:50:86:17:a7:1d:90:36:72:8c:87:1a:21:7b:cd:c7:
d9:45:7f:55:c8:9d:5e:38:ce:08:ef:88:4c:c5:9a:c0:1d:32:
16:0a:4e:35:aa:87:50:cd:91:63:2b:21:e9:84:bc:a4:a7:52:
be:77:bf:38:a4:7f:09:a6:5f:e7:de:ad:dd:07:4f:d6:98:83:
ff:d1:78:af:2d:10:0f:81:06:b8:38:6e:f6:74:e4:33:f9:e8:
6f:3e:95:4e:de:b2:ac:98:7c:14:38:98:cf:96:a3:6f:9f:18:
a2:63:1d:7d:42:aa:97:2c:4a:c9:67:31:05:c7:3c:f6:18:26:
99:36:86:da
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQiH6no/ToU1BntH5EiG1fKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDkwYjFjNGVhMjg0MmRkZjk5MjllYThhNjU0NWI4MTdhMjg3NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGNWQX5n98/LpwPah1pcHPX4rgQf
ywWEeU5G20mc5nuYsDI3vEU2JWfWVJKNugVa8RekcGDWujJdhvuCFtdZeQUJPygW
PCfgviPR3J9eyKzxAXM9H00SmqrXRTuTDbW4zr3SkqHSBdtLit7JMSwCeYVZBE+B
r9ecjw+qCJgfTEmD14KbJzsqhr7PL1guXthnaW0VvYvAl58wII10Y7+mcRQO+8tV
PSs1tu4hNDVMfiKLj5OUZCruPzpO2+eDK/vu5jnsAPd456Yl86jBwGaSXuTuLgT+
fsguuJc4ekW35JC0fs1Zsm0qpsiNuJbmkEKtsdVEoht7lSa3uLaPv599KQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFJSQscTqKELd+ZKeqKZUW4F6KHaAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2VkZGRh
YS1jMzFhLTQwMjYtOGY4NS0wNTY2ZjUxMjUyYTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvZWRkZGFh
LWMzMWEtNDAyNi04Zjg1LTA1NjZmNTEyNTJhOS8xL2xKQ3h4T29vUXQzNWtwNm9w
bFJiZ1hvb2RvQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAwIMA0GCSqGSIb3DQEBCwUAA4IBAQBX
KvD5kTZzUbCXTItu16nccucrR/90/kweZe6LhG778R+VJUOSeVhWbEW/Zp90LdQR
DplpfYn2o/jG+szhi0vyG6TUpT4VOTCmzZ1+ZUXkHhKs5Iae7HLy5I/XFASXZOrd
WqCR6sYh0gjq//n5yTHzBrgdD7RGCziE5NzjzE5ot9tQhhenHZA2coyHGiF7zcfZ
RX9VyJ1eOM4I74hMxZrAHTIWCk41qodQzZFjKyHphLykp1K+d784pH8Jpl/n3q3d
B0/WmIP/0XivLRAPgQa4OG72dOQz+ehvPpVO3rKsmHwUOJjPlqNvnxiiYx19QqqX
LErJZzEFxzz2GCaZNoba
-----END CERTIFICATE-----
Generated at Sat Mar 8 22:09:46 2025 by rpki-client