Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
File: oI5By_3vrQuw4pckeswaIB0t9KA.cer (raw, json)
Hash identifier: 8ubw/q1QmGXnWtaL2NzXBlhqZH2prLUl159qi6qkWz4=
Subject key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDCAA478AEAB73D9A09660649BD03C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211606
IP: 185.254.121.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ca:a4:78:ae:ab:73:d9:a0:96:60:64:9b:d0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:4b:8c:d6:3c:e9:3d:4c:d5:e7:47:1f:40:
c5:d5:fe:b3:07:81:ac:84:bd:f3:5e:3c:8e:b5:64:
30:26:8e:5f:24:97:f4:bb:f9:e0:e6:84:a5:78:78:
64:db:6d:39:e8:0a:2c:97:15:b2:a6:70:52:5c:b2:
28:ba:fc:5d:d7:e9:07:7a:0a:d5:87:45:0b:27:d8:
38:47:1a:4f:74:88:e4:1b:34:bd:d3:aa:ed:b0:f9:
b1:b1:3d:64:2b:27:c6:4d:99:99:54:f1:d8:47:6b:
9d:1b:a2:6e:91:00:3a:51:f4:ce:4f:67:ae:83:d3:
39:10:ef:b5:6e:fa:75:22:a0:fe:0a:ad:c2:11:49:
63:58:f3:a7:be:17:34:f5:1d:6e:11:79:3f:99:9f:
1e:a4:29:31:1f:b0:70:f6:d0:e4:23:35:c1:4e:df:
50:b2:57:d0:8b:78:f7:2b:98:d0:64:47:5e:fe:2d:
79:b4:2c:b4:64:29:4d:8c:9d:46:75:b1:65:de:fe:
35:66:ce:b2:06:5b:09:35:a2:a9:06:c1:f0:f9:da:
0c:0f:a7:02:b4:99:c0:08:4b:4a:48:68:73:44:c4:
f3:77:ca:40:b6:ca:cd:7a:48:ca:14:7b:e5:1c:ab:
c9:8c:64:ff:df:a1:d2:b7:db:ab:3d:6f:37:50:a2:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.121.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211606
Signature Algorithm: sha256WithRSAEncryption
34:4a:7f:19:cb:00:8d:93:76:83:d0:e4:4d:ef:52:31:98:7d:
09:cf:35:9a:96:15:d2:c9:01:68:ec:07:99:95:94:7e:a8:c3:
47:19:43:4f:6f:8b:7e:3a:19:66:20:7d:d1:12:98:01:22:01:
19:52:95:ea:c9:b4:85:7e:04:a8:f6:8c:4b:45:40:0b:cb:d7:
0d:e4:5a:4f:30:57:20:bb:e4:fc:ff:86:4b:89:b1:74:fb:bb:
ee:b0:44:72:3c:ee:64:67:f3:e3:6c:ac:0a:ea:a0:ee:7f:5f:
6f:d9:4a:0b:73:a7:41:15:b1:51:31:b2:2f:1c:01:0b:49:88:
2a:38:95:72:2b:18:dd:f0:30:bb:27:a3:c8:68:14:a8:6b:96:
e9:e2:7c:2a:c0:fd:15:61:c6:e1:f3:b7:49:6f:c2:15:03:92:
fc:b3:58:37:ea:55:8c:d7:d3:74:fa:95:62:bb:30:e5:d0:88:
05:01:df:2a:1d:2b:8f:c8:14:a9:84:4e:9e:db:45:42:6d:b5:
29:1e:2c:5a:89:55:dd:11:1a:2c:de:13:01:87:f6:9d:2e:6f:
04:11:e8:0e:1d:80:8d:44:63:c3:f7:a5:ad:0a:e8:46:47:15:
1f:85:66:ba:66:7a:6a:4b:d4:2f:3c:ca:87:8e:bd:fb:cd:e0:
70:a5:de:38
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQl/cqkeK6rc9mglmBkm9A8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDhlNDFjYmZkZWZhZDBiYjBlMjk3MjQ3YWNjMWEyMDFkMmRmNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GtLjNY86T1M1edHH0DF1f6zB4Gs
hL3zXjyOtWQwJo5fJJf0u/ng5oSleHhk22056AoslxWypnBSXLIouvxd1+kHegrV
h0ULJ9g4RxpPdIjkGzS906rtsPmxsT1kKyfGTZmZVPHYR2udG6JukQA6UfTOT2eu
g9M5EO+1bvp1IqD+Cq3CEUljWPOnvhc09R1uEXk/mZ8epCkxH7Bw9tDkIzXBTt9Q
slfQi3j3K5jQZEde/i15tCy0ZClNjJ1GdbFl3v41Zs6yBlsJNaKpBsHw+doMD6cC
tJnACEtKSGhzRMTzd8pAtsrNekjKFHvlHKvJjGT/36HSt9urPW83UKLTWwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKCOQcv9760LsOKXJHrMGiAdLfSgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzdhODA2
Yy0yZjA4LTQ3ZDktOWNjOS02NThkNGM0NjI4YWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvN2E4MDZj
LTJmMDgtNDdkOS05Y2M5LTY1OGQ0YzQ2MjhhZC8xL29JNUJ5XzN2clF1dzRwY2tl
c3dhSUIwdDlLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuf55MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM6ljANBgkqhkiG9w0BAQsFAAOCAQEANEp/GcsAjZN2g9DkTe9SMZh9Cc81mpYV
0skBaOwHmZWUfqjDRxlDT2+LfjoZZiB90RKYASIBGVKV6sm0hX4EqPaMS0VAC8vX
DeRaTzBXILvk/P+GS4mxdPu77rBEcjzuZGfz42ysCuqg7n9fb9lKC3OnQRWxUTGy
LxwBC0mIKjiVcisY3fAwuyejyGgUqGuW6eJ8KsD9FWHG4fO3SW/CFQOS/LNYN+pV
jNfTdPqVYrsw5dCIBQHfKh0rj8gUqYROnttFQm21KR4sWolV3REaLN4TAYf2nS5v
BBHoDh2AjURjw/elrQroRkcVH4VmumZ6akvULzzKh469+83gcKXeOA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:39 2025 by rpki-client