Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.cer (raw, json)
Hash identifier: 7bFYzPmp6h4fFwhzKzB4or+k6IgIU8mYDMT7GdW+61A=
Subject key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194882899FD86A2702E8CACAD5CB4A21FBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jan 2025 09:19:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216280
IP: 185.97.212.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:28:99:fd:86:a2:70:2e:8c:ac:ad:5c:b4:a2:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 21 09:19:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:72:83:b7:50:92:8b:04:ef:16:c2:5c:64:
69:4c:17:dc:a3:5e:f2:b7:2f:6f:a4:00:61:89:6a:
62:c1:c0:f5:79:cc:3e:67:be:cf:96:44:28:bf:f0:
d7:d5:5e:83:cc:6e:42:e1:a7:34:79:34:8e:8a:74:
96:a4:49:ad:a7:ea:5f:44:23:e8:27:79:5e:9e:c0:
d8:00:b2:be:59:e1:ae:35:7a:5a:09:7d:40:e0:dd:
d5:1c:cb:d2:ee:5f:4f:69:0a:0b:25:8c:e8:5a:96:
86:76:be:cf:b0:84:54:e3:a6:22:36:3a:67:3e:1f:
26:a2:9b:c2:29:94:4e:97:c9:24:f4:6c:8f:f7:72:
88:52:48:c7:6e:e6:b7:21:68:c5:6f:2a:62:d4:2c:
45:ef:6e:ef:de:88:ea:c3:f3:98:9b:ec:ac:f8:41:
63:42:1f:1c:78:a3:aa:cc:6f:51:50:e0:8c:81:a1:
87:60:9f:5b:3b:1a:e6:fa:2c:7c:96:ee:bf:53:60:
17:c3:55:2b:71:0f:55:bc:ba:3b:7f:09:bf:74:66:
7a:6b:8e:7d:aa:cb:77:9b:5e:24:91:27:78:e5:e5:
25:fe:04:d7:ed:69:7c:f2:a0:97:c7:9b:c6:85:f4:
9c:df:bb:ea:f5:da:f3:2d:7d:92:7c:65:f7:94:68:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.212.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216280
Signature Algorithm: sha256WithRSAEncryption
61:62:d1:f3:77:32:2e:17:a1:48:08:f9:6c:e1:dd:c5:be:6b:
30:9f:04:b2:16:8a:f9:94:4d:49:8f:50:c0:03:84:18:ad:fe:
9a:8e:f5:86:49:36:ab:39:a7:c0:80:9b:01:f9:d4:2e:83:a6:
8b:24:d7:6b:31:d6:e2:6a:7d:42:ac:be:e1:65:4d:d4:c9:26:
f9:40:d7:03:db:d3:ab:d8:95:c8:07:f3:fd:2f:c6:69:98:28:
13:d7:67:54:03:65:40:90:32:af:1c:c6:7a:62:88:20:7e:01:
f6:58:01:df:99:ef:11:0c:3b:50:f1:ea:90:bf:38:27:e6:9d:
4a:3f:b4:bd:3a:40:42:8e:e3:2d:1e:2a:e2:88:c4:2d:c1:7b:
98:e8:6e:d5:f0:68:7d:12:0f:7f:84:a8:72:1b:28:6c:09:f5:
4d:f9:c1:02:5e:ef:60:6f:47:db:e3:b2:a5:2a:d9:5c:bd:d0:
15:aa:ac:95:06:60:0e:ae:85:e1:c0:e0:a6:89:3d:11:33:41:
a3:b5:18:f9:d8:3f:65:e6:b3:b0:76:0a:a0:72:ce:1c:e2:b9:
1b:e0:88:18:2f:18:e5:9b:0d:b7:dc:f9:4e:59:d4:77:66:00:
8a:1d:9d:80:d8:37:4a:6e:03:d2:8c:9f:99:90:9e:ca:30:23:
79:76:dc:56
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZSIKJn9hqJwLoysrVy0oh+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTIxMDkxOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2U2MWZiMDkyNmJjZTBjYWZhZGQwZjJiMTkzNDg4OTVhNDQ4MTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg71yg7dQkosE7xbCXGRpTBfco17y
ty9vpABhiWpiwcD1ecw+Z77PlkQov/DX1V6DzG5C4ac0eTSOinSWpEmtp+pfRCPo
J3lensDYALK+WeGuNXpaCX1A4N3VHMvS7l9PaQoLJYzoWpaGdr7PsIRU46YiNjpn
Ph8mopvCKZROl8kk9GyP93KIUkjHbua3IWjFbypi1CxF727v3ojqw/OYm+ys+EFj
Qh8ceKOqzG9RUOCMgaGHYJ9bOxrm+ix8lu6/U2AXw1UrcQ9VvLo7fwm/dGZ6a459
qst3m14kkSd45eUl/gTX7Wl88qCXx5vGhfSc37vq9drzLX2SfGX3lGj2AwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJzmH7CSa84Mr63Q8rGTSIlaRIFHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzYwZTk1
Ny0xZTE3LTQxMGUtOTFhMS05NmI3ZTBhOGVlMDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNjBlOTU3
LTFlMTctNDEwZS05MWExLTk2YjdlMGE4ZWUwOS8xL25PWWZzSkpyemd5dnJkRHlz
Wk5JaVZwRWdVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuWHUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNM2DANBgkqhkiG9w0BAQsFAAOCAQEAYWLR83cyLhehSAj5bOHdxb5rMJ8EshaK
+ZRNSY9QwAOEGK3+mo71hkk2qzmnwICbAfnULoOmiyTXazHW4mp9Qqy+4WVN1Mkm
+UDXA9vTq9iVyAfz/S/GaZgoE9dnVANlQJAyrxzGemKIIH4B9lgB35nvEQw7UPHq
kL84J+adSj+0vTpAQo7jLR4q4ojELcF7mOhu1fBofRIPf4SochsobAn1TfnBAl7v
YG9H2+OypSrZXL3QFaqslQZgDq6F4cDgpok9ETNBo7UY+dg/ZeazsHYKoHLOHOK5
G+CIGC8Y5ZsNt9z5TlnUd2YAih2dgNg3Sm4D0oyfmZCeyjAjeXbcVg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:42 2025 by rpki-client