Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.cer (raw, json)
Hash identifier: 3XJxu3IzlaAK3isO64QTIeJfIjSoVhEmlNkcJC5uRrw=
Subject key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793321172927D8B3300AFA7CFE09A5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8473
AS: 16261
AS: 21250
AS: 42309
IP: 5.150.192.0/18
IP: 37.123.128.0/18
IP: 46.59.0.0/17
IP: 62.63.192.0/18
IP: 77.240.208.0/20
IP: 79.136.0.0/17
IP: 81.170.128.0/17
IP: 82.196.96.0/19
IP: 85.24.128.0/17
IP: 94.254.0.0/17
IP: 98.128.0.0/16
IP: 109.228.128.0/18
IP: 176.10.128.0/17
IP: 178.174.128.0/17
IP: 185.57.4.0/22
IP: 185.90.176.0/22
IP: 195.178.160.0/19
IP: 212.85.64.0/19
IP: 212.116.64.0/19
IP: 213.80.96.0/19
IP: 213.136.32.0/19
IP: 213.164.192.0/19
IP: 217.27.160.0/19
IP: 217.31.160.0/19
IP: 2001:9b0::/29
IP: 2a02:508::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:32:11:72:92:7d:8b:33:00:af:a7:cf:e0:9a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4a:cc:21:79:e1:b7:6c:ba:98:19:d0:e0:8f:
bf:f9:2f:af:62:e6:f3:9e:ad:e6:c7:9a:83:c8:d3:
ab:25:e8:a0:2e:17:50:3e:dd:8d:df:f1:0f:e6:bb:
2e:65:f3:4a:df:f6:1f:04:b1:b6:41:13:90:21:a7:
0d:c8:1f:6c:02:45:47:bf:24:2a:4c:d9:53:9b:60:
10:2b:de:48:a4:43:3e:59:09:d5:4a:97:96:43:8f:
51:2d:4c:ca:f9:d7:84:87:b3:0d:c1:95:3b:80:38:
d8:6e:bd:e4:1a:01:b9:1f:01:d5:8c:9c:87:0e:24:
a6:f6:bb:4f:a9:21:53:96:a9:8b:40:fa:4c:4b:47:
40:21:e6:6b:d0:8d:ce:b5:1d:b4:d7:f4:24:71:a9:
09:42:b3:1f:cd:64:c5:93:6c:f1:4a:4a:c5:25:f0:
da:e6:2c:c6:15:1b:64:f2:9a:db:ec:bd:81:89:56:
c5:e7:ae:51:82:d2:f2:b6:1f:bc:c4:07:2f:3b:37:
2c:c4:cf:5d:65:7a:0f:49:52:29:16:44:58:84:92:
92:ae:81:e9:d5:9c:94:56:8a:94:42:90:97:9d:e1:
44:20:18:cf:16:95:6d:3e:73:e6:5f:07:4f:c6:81:
b0:ae:05:9e:c8:c7:74:bf:fb:ea:ac:ff:84:ab:de:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.192.0/18
37.123.128.0/18
46.59.0.0/17
62.63.192.0/18
77.240.208.0/20
79.136.0.0/17
81.170.128.0/17
82.196.96.0/19
85.24.128.0/17
94.254.0.0/17
98.128.0.0/16
109.228.128.0/18
176.10.128.0/17
178.174.128.0/17
185.57.4.0/22
185.90.176.0/22
195.178.160.0/19
212.85.64.0/19
212.116.64.0/19
213.80.96.0/19
213.136.32.0/19
213.164.192.0/19
217.27.160.0/19
217.31.160.0/19
IPv6:
2001:9b0::/29
2a02:508::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8473
16261
21250
42309
Signature Algorithm: sha256WithRSAEncryption
4d:a2:05:8a:f8:84:1a:3e:81:3f:da:3f:a1:60:0d:e3:5a:9c:
83:f1:0f:a8:e9:02:c6:92:72:22:b1:f1:84:61:14:f6:e4:98:
b5:7f:85:d2:56:35:3e:21:5b:a3:d2:62:f1:fa:6c:13:10:7c:
e1:d7:5d:e8:2d:78:77:24:72:d3:53:20:66:ce:05:3f:18:e8:
6c:77:00:84:36:5d:ca:d6:a1:b2:54:0b:bb:38:9d:3d:60:9f:
07:7d:21:ee:23:59:96:17:21:2a:cf:de:c2:ca:94:de:af:81:
2d:1a:43:ea:c9:09:53:80:70:05:a6:64:4e:b8:02:1d:a7:da:
66:b3:fa:bc:26:d6:a0:ca:09:93:0f:8d:ce:1e:9b:d7:59:dc:
e4:ad:c9:4c:30:b3:a2:54:d7:50:86:c9:b0:6d:a4:60:53:ae:
ce:86:d0:48:3e:b3:00:28:45:83:bd:1b:fb:47:81:6d:ab:d1:
10:b1:d2:56:6c:6b:13:2a:9d:1b:b7:83:b9:ab:20:52:fb:5f:
fb:03:38:c3:15:e3:d5:e5:d6:33:cb:1d:94:b4:91:f5:c4:00:
10:fd:c6:91:1a:21:f0:f5:4a:4f:dd:ba:28:a4:61:81:89:8c:
0d:96:cb:72:06:95:fe:5b:8b:5d:81:b4:65:82:89:11:34:d6:
21:d6:b0:b6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgISAYzHkzIRcpJ9izMAr6fP4JpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzIyZjIyOWVkYzJmMzE0YTJmYTVlZjBkN2FmMWRkZGI0OTllYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UrMIXnht2y6mBnQ4I+/+S+vYubz
nq3mx5qDyNOrJeigLhdQPt2N3/EP5rsuZfNK3/YfBLG2QROQIacNyB9sAkVHvyQq
TNlTm2AQK95IpEM+WQnVSpeWQ49RLUzK+deEh7MNwZU7gDjYbr3kGgG5HwHVjJyH
DiSm9rtPqSFTlqmLQPpMS0dAIeZr0I3OtR201/QkcakJQrMfzWTFk2zxSkrFJfDa
5izGFRtk8prb7L2BiVbF565RgtLyth+8xAcvOzcsxM9dZXoPSVIpFkRYhJKSroHp
1ZyUVoqUQpCXneFEIBjPFpVtPnPmXwdPxoGwrgWeyMd0v/vqrP+Eq94s1wIDAQAB
o4IDUDCCA0wwHQYDVR0OBBYEFKMi8intwvMUovpe8NevHd20meoxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2VkZmZi
Yi0xMDgyLTQ0ODItOGEwOC02NWY4MjQ3ZmZhOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZWRmZmJi
LTEwODItNDQ4Mi04YTA4LTY1ZjgyNDdmZmE5MS8xL295THlLZTNDOHhTaS1sN3cx
NjhkM2JTWjZqRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHCBggrBgEF
BQcBBwEB/wSBsjCBrzCBlgQCAAEwgY8DBAYFlsADBAYle4ADBAcuOwADBAY+P8AD
BARN8NADBAdPiAADBAdRqoADBAVSxGADBAdVGIADBAde/gADAwBigAMEBm3kgAME
B7AKgAMEB7KugAMEArk5BAMEArlasAMEBcOyoAMEBdRVQAMEBdR0QAMEBdVQYAME
BdWIIAMEBdWkwAMEBdkboAMEBdkfoDAUBAIAAjAOAwUDIAEJsAMFAyoCBQgwJgYI
KwYBBQUHAQgBAf8EFzAVoBMwEQICIRkCAj+FAgJTAgIDAKVFMA0GCSqGSIb3DQEB
CwUAA4IBAQBNogWK+IQaPoE/2j+hYA3jWpyD8Q+o6QLGknIisfGEYRT25Ji1f4XS
VjU+IVuj0mLx+mwTEHzh113oLXh3JHLTUyBmzgU/GOhsdwCENl3K1qGyVAu7OJ09
YJ8HfSHuI1mWFyEqz97CypTer4EtGkPqyQlTgHAFpmROuAIdp9pms/q8JtagygmT
D43OHpvXWdzkrclMMLOiVNdQhsmwbaRgU67OhtBIPrMAKEWDvRv7R4Ftq9EQsdJW
bGsTKp0bt4O5qyBS+1/7AzjDFePV5dYzyx2UtJH1xAAQ/caRGiHw9UpP3boopGGB
iYwNlstyBpX+W4tdgbRlgokRNNYh1rC2
-----END CERTIFICATE-----
Generated at Fri May 3 03:43:19 2024 by rpki-client on console-fra.rpki-client.org