Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
File: na669vl-yTdN9sFJL1nV8Tqd0Ag.cer (raw, json)
Hash identifier: J8rk4QGWB6rJ7c0CV2GsyD9VwgBTJxyg/IYJPB6KemA=
Subject key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F8DE61780BC6A066911BAFC766C91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210467
AS: 215320
IP: 5.172.183.0/24
IP: 89.47.246.0/24
IP: 193.177.136.0/22
IP: 2a0d:3c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8d:e6:17:80:bc:6a:06:69:11:ba:fc:76:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:7d:4f:ca:49:3d:e0:ba:31:df:1e:9e:f6:
a2:ca:9a:70:91:98:42:ca:c2:1b:20:c8:cb:d2:fa:
b7:ce:38:c8:5f:ca:3d:55:41:eb:ac:1b:d8:23:ac:
a9:54:01:60:7f:7e:0c:f9:9a:87:b7:0a:5d:aa:9d:
e0:f1:8b:76:d9:53:c7:d6:a6:b6:8d:66:66:91:68:
0a:0d:e4:fb:4a:0b:7c:45:e3:91:4d:2d:b2:b8:19:
a1:8a:75:25:bc:ae:27:5f:14:5d:7d:e2:2e:21:7e:
2b:a7:e6:ec:a5:ac:74:6f:53:ee:be:77:d3:33:f2:
6e:57:0a:5b:28:62:34:d0:58:ee:e5:c8:23:74:4d:
20:81:b4:81:02:84:b1:a4:55:dc:19:05:59:1e:86:
44:cb:24:e8:bc:52:4a:e4:80:b9:77:e8:25:68:ab:
38:d4:34:73:48:18:6d:0f:e9:27:7b:17:7e:2d:bf:
91:05:69:94:0a:c4:a0:aa:47:6b:f5:c2:eb:bc:36:
a7:47:ba:9b:42:5b:d3:0d:58:7d:e5:c7:69:1c:82:
2b:af:44:22:53:5f:fc:c3:3d:d6:bd:36:22:82:e3:
0f:43:d5:e9:6d:8a:15:f7:4e:c9:28:3d:a2:70:2b:
b8:a4:79:cd:c0:68:0b:2d:bc:eb:61:56:10:3b:ab:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.183.0/24
89.47.246.0/24
193.177.136.0/22
IPv6:
2a0d:3c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210467
215320
Signature Algorithm: sha256WithRSAEncryption
50:aa:9a:4a:0a:1f:9e:f3:70:a5:25:93:78:c1:64:bd:c7:bb:
44:e5:a7:0c:a9:29:ca:28:b6:c2:90:ec:3b:cb:bc:e9:c6:1b:
68:9d:1f:7f:cd:0e:d8:d8:2b:b3:80:9a:34:f0:60:f1:45:3d:
06:f0:0a:65:3e:8b:f7:d5:f6:b9:07:95:69:c0:c9:ad:61:8b:
5b:c3:0c:58:3f:2b:58:1d:23:e4:9e:2d:99:82:b1:e0:00:e5:
72:c0:40:bb:b5:07:59:a3:a0:84:2f:20:c0:a5:be:ea:fa:12:
97:2c:8b:00:94:99:95:4b:ce:61:60:bf:20:c9:18:df:e9:3a:
d2:b4:d6:0e:92:8d:c3:c6:42:bc:19:9a:b2:dd:11:79:c0:dd:
bf:cc:c0:54:39:55:52:30:53:bb:75:97:83:a4:12:04:e9:18:
7f:5c:03:68:dd:4a:5d:a3:1f:aa:9f:13:08:bb:52:39:80:9b:
4a:13:9b:14:49:a0:c0:88:a4:92:77:21:65:ef:ab:9f:a3:42:
43:15:2b:22:a5:86:d9:68:87:84:0f:db:1c:13:ff:c1:36:a6:
6d:2b:2e:37:c8:93:fc:6b:27:ca:fa:a4:7e:b6:89:6c:e8:65:
be:8d:b1:aa:2f:1d:c0:f8:ab:7b:50:0b:4e:05:90:39:32:3e:
f9:bc:dc:0a
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZQiH43mF4C8agZpEbr8dmyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGFlYmFmNmY5N2VjOTM3NGRmNmMxNDkyZjU5ZDVmMTNhOWRkMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmp9T8pJPeC6Md8envaiyppwkZhC
ysIbIMjL0vq3zjjIX8o9VUHrrBvYI6ypVAFgf34M+ZqHtwpdqp3g8Yt22VPH1qa2
jWZmkWgKDeT7Sgt8ReORTS2yuBmhinUlvK4nXxRdfeIuIX4rp+bspax0b1PuvnfT
M/JuVwpbKGI00Fju5cgjdE0ggbSBAoSxpFXcGQVZHoZEyyTovFJK5IC5d+glaKs4
1DRzSBhtD+knexd+Lb+RBWmUCsSgqkdr9cLrvDanR7qbQlvTDVh95cdpHIIrr0Qi
U1/8wz3WvTYiguMPQ9XpbYoV907JKD2icCu4pHnNwGgLLbzrYVYQO6vcxwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFJ2uuvb5fsk3TfbBSS9Z1fE6ndAIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2JiYjc4
Mi0zOWY1LTRkMjQtOTFkMi0zZTVlZTRhOGYzODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYmJiNzgy
LTM5ZjUtNGQyNC05MWQyLTNlNWVlNGE4ZjM4OC8xL25hNjY5dmwteVRkTjlzRkpM
MW5WOFRxZDBBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQABay3AwQAWS/2AwQCwbGIMA0EAgACMAcDBQMq
DTyAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM2IwIDA0kYMA0GCSqGSIb3DQEB
CwUAA4IBAQBQqppKCh+e83ClJZN4wWS9x7tE5acMqSnKKLbCkOw7y7zpxhtonR9/
zQ7Y2CuzgJo08GDxRT0G8AplPov31fa5B5VpwMmtYYtbwwxYPytYHSPkni2ZgrHg
AOVywEC7tQdZo6CELyDApb7q+hKXLIsAlJmVS85hYL8gyRjf6TrStNYOko3DxkK8
GZqy3RF5wN2/zMBUOVVSMFO7dZeDpBIE6Rh/XANo3Updox+qnxMIu1I5gJtKE5sU
SaDAiKSSdyFl76ufo0JDFSsipYbZaIeED9scE//BNqZtKy43yJP8ayfK+qR+tols
6GW+jbGqLx3A+Kt7UAtOBZA5Mj75vNwK
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:53 2025 by rpki-client