Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
File: olSp86JmUT3caTXYvgIuflIw6hA.cer (raw, json)
Hash identifier: Dw1BmPXQxwX3mn8qIHdbG0yuuy2z0hRMzq30/Gkf1tk=
Subject key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BC2CDA23A68FD9BF97673DAA65F80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8486
AS: 15440
AS: 42549
AS: 47929
AS: 209989
AS: 213772
IP: 5.133.64.0/22
IP: 45.82.32.0/22
IP: 45.95.32.0/22
IP: 45.146.200.0/22
IP: 77.241.192.0/20
IP: 79.142.112.0/20
IP: 89.249.80.0/20
IP: 92.62.128.0/20
IP: 185.11.24.0/22
IP: 185.65.48.0/22
IP: 185.216.208.0/22
IP: 195.14.160.0/19
IP: 213.197.128.0/18
IP: 217.117.16.0/20
IP: 2001:1ab8::/30
IP: 2a03:1960::/32
IP: 2a0d:5000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c2:cd:a2:3a:68:fd:9b:f9:76:73:da:a6:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:2b:b5:99:a5:92:af:d6:7b:c2:56:73:57:
3e:72:94:02:e2:11:7b:0a:a6:85:c3:0a:fc:2a:e3:
d5:ef:25:17:05:bf:2e:ac:7c:8c:e0:98:7e:5b:35:
f8:0a:da:e6:43:8a:9e:9f:16:93:24:47:8c:12:2d:
2b:ce:4b:08:73:06:15:43:3c:ef:9b:bd:81:58:98:
22:e6:ce:f9:40:f2:54:8a:09:92:c3:4b:48:ff:6e:
2a:b0:da:de:75:8a:27:eb:63:ad:c7:74:8d:72:dd:
f7:79:a0:26:e3:b0:4c:54:ac:39:67:5d:db:bf:c3:
9d:93:fc:09:23:f2:b7:56:c0:a2:2e:ec:aa:30:fb:
20:74:ed:dc:e5:9a:63:ef:26:3c:0e:8b:09:bc:f5:
cf:f1:d5:95:fd:8e:ab:c0:f7:d3:36:ad:8c:47:d8:
e9:f7:77:c7:2f:d4:12:82:f1:41:29:a5:b9:f4:a8:
a7:c7:09:be:71:03:7c:a3:b2:25:39:2b:57:fb:6d:
82:23:1d:e5:fa:8d:98:0d:ee:57:28:bd:ba:f7:9c:
e4:fa:78:c3:9a:40:ce:f1:10:58:07:d4:85:06:46:
3c:e1:ea:e3:ed:b6:4f:13:7f:e4:93:87:6b:18:f4:
a8:5f:fd:4b:55:b6:24:a3:9f:33:83:7b:2d:d7:0a:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.64.0/22
45.82.32.0/22
45.95.32.0/22
45.146.200.0/22
77.241.192.0/20
79.142.112.0/20
89.249.80.0/20
92.62.128.0/20
185.11.24.0/22
185.65.48.0/22
185.216.208.0/22
195.14.160.0/19
213.197.128.0/18
217.117.16.0/20
IPv6:
2001:1ab8::/30
2a03:1960::/32
2a0d:5000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8486
15440
42549
47929
209989
213772
Signature Algorithm: sha256WithRSAEncryption
34:bc:4b:c8:44:d1:d0:a4:7d:4b:d5:2d:b5:0b:b1:d0:ee:ec:
e3:10:fb:9f:d9:22:99:e2:c9:40:88:7e:06:e2:c7:2c:28:b4:
f9:01:81:c5:e7:78:ad:dc:fa:51:48:67:85:90:0c:27:03:9a:
f6:6c:9f:2d:6a:07:9b:43:53:d9:6f:d3:50:db:66:09:a3:ba:
cf:e9:5c:44:88:97:d0:7f:40:bc:19:be:a8:ea:85:a3:18:c7:
22:4f:99:63:be:b4:0a:84:45:b2:fa:49:67:46:1e:2b:cf:20:
08:50:62:7d:47:eb:25:2f:06:27:a8:41:c9:ff:0e:34:6d:3d:
33:75:86:ae:c4:db:0b:43:14:2d:2a:db:dc:b1:94:9f:db:4c:
6a:8c:44:93:55:c2:8b:38:be:0f:4e:84:d4:41:b0:bc:6b:3e:
64:06:fb:82:4f:a1:61:7f:e2:cb:ef:cc:2b:f7:18:84:67:be:
a5:ed:2a:82:cd:90:2c:20:6d:7d:12:f8:5f:90:3a:c3:d2:0c:
c6:54:e9:b7:41:75:b6:f1:2b:4a:44:98:62:54:bc:17:90:f8:
e0:63:e1:bb:09:0a:61:a2:80:1d:14:06:2b:40:c3:c8:70:97:
45:ae:73:88:fb:fb:d6:8f:c9:4b:31:a9:7f:c9:8a:93:89:16:
1f:8c:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:47 2025 by rpki-client