Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
File: p7He9pWIXq3lzMi0vioCuxYHnpw.cer (raw, json)
Hash identifier: rqmwgsg5nnZ1Q464FEqd/9w+XpkeOOfKMPFLJwDJcEY=
Subject key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682846E93FA097EE451E181D213833
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204648
IP: 173.255.144.0/21
IP: 193.17.36.0/22
IP: 2a07:ee40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:28:46:e9:3f:a0:97:ee:45:1e:18:1d:21:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:8b:65:9f:51:c7:05:1a:de:99:f6:1c:76:
11:16:a0:75:9d:dd:1c:7e:64:d2:49:47:2e:67:7c:
e9:92:39:db:ab:c6:0f:6f:7a:74:31:dd:6c:b6:65:
70:6a:8c:3b:d6:e5:06:e9:7f:bb:4c:94:59:12:5d:
57:fe:5b:37:3d:7b:d4:e0:2f:16:43:fd:fd:8a:8a:
f5:db:a3:94:bd:d9:f8:7f:a5:ac:5d:39:b3:5d:cf:
a2:5a:1d:09:db:46:2e:4c:f0:9e:e6:f2:93:e8:3d:
b6:fe:0b:34:e7:91:61:25:ee:19:7d:a5:63:5e:b6:
97:d1:ed:ca:1f:93:8b:10:58:7f:83:c5:2c:c3:cc:
8a:54:69:2e:a1:ae:72:e4:31:09:6d:4e:bd:9b:e9:
06:6f:a9:01:1b:aa:11:0a:c9:f2:c4:9c:91:d5:c0:
4e:48:c7:8f:78:2d:fd:1d:56:7b:39:ff:9a:c0:94:
fb:22:59:2d:64:b0:82:10:7f:63:3d:d3:b4:e3:9d:
97:88:5b:66:7e:7d:ee:63:7e:9d:88:a9:e7:d7:01:
1b:76:2e:80:3e:ea:08:09:99:2b:a4:81:20:ad:46:
66:06:b9:b0:b4:2c:c3:6a:97:a2:a8:65:86:ef:84:
a9:50:40:61:a6:96:c5:cd:df:49:5a:e9:66:c0:2c:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.255.144.0/21
193.17.36.0/22
IPv6:
2a07:ee40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204648
Signature Algorithm: sha256WithRSAEncryption
38:d7:03:37:b3:bf:28:25:54:00:e9:5d:a6:fa:d1:f7:21:62:
ea:d9:a9:c9:c0:ec:d4:5c:5e:f5:1a:40:0f:c2:74:0f:4e:ac:
50:4c:32:ff:e6:b5:b1:8f:1b:c6:3b:44:97:e0:fa:44:cc:1d:
f7:88:d7:c6:ef:7c:e9:38:a0:8a:30:da:7c:f8:8a:bc:38:cb:
e9:1d:4a:65:14:52:65:f4:65:33:9b:2c:9f:2b:f8:41:b0:0f:
46:a0:c0:54:00:71:1c:8b:4e:72:cc:14:21:c7:9f:b3:d6:fa:
ba:f8:cf:13:97:4d:07:68:27:b7:06:5b:08:55:76:bf:69:4d:
55:15:3c:d6:b9:e4:1b:0a:37:58:29:a7:ab:33:55:2d:15:04:
b4:93:ca:be:76:dd:64:03:47:4d:39:8f:67:2a:6d:18:63:e2:
b5:79:d6:6e:47:df:3b:75:a4:b8:cc:72:47:c7:31:4f:b8:f6:
df:2d:0f:6f:c3:6f:67:86:2f:03:73:3d:10:b8:36:4a:e9:21:
74:0c:fe:c2:76:11:e4:bd:55:31:94:18:63:c8:40:8c:bd:fd:
8c:dd:7e:b0:2d:ff:a4:74:05:7f:a4:b3:73:d3:95:32:f5:13:
31:42:72:1e:ad:b3:6a:47:35:5d:28:22:59:b9:5b:3a:d0:1e:
ef:da:a9:4a
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQgaChG6T+gl+5FHhgdITgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2IxZGVmNjk1ODg1ZWFkZTVjY2M4YjRiZTJhMDJiYjE2MDc5ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfCLZZ9RxwUa3pn2HHYRFqB1nd0c
fmTSSUcuZ3zpkjnbq8YPb3p0Md1stmVwaow71uUG6X+7TJRZEl1X/ls3PXvU4C8W
Q/39ior126OUvdn4f6WsXTmzXc+iWh0J20YuTPCe5vKT6D22/gs055FhJe4ZfaVj
XraX0e3KH5OLEFh/g8Usw8yKVGkuoa5y5DEJbU69m+kGb6kBG6oRCsnyxJyR1cBO
SMePeC39HVZ7Of+awJT7IlktZLCCEH9jPdO0452XiFtmfn3uY36diKnn1wEbdi6A
PuoICZkrpIEgrUZmBrmwtCzDapeiqGWG74SpUEBhppbFzd9JWulmwCwaMwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFKex3vaViF6t5czItL4qArsWB56cMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzY4OGNh
ZS01Zjk2LTQ4NzUtODcwMS05NDRlY2VjN2E0MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNjg4Y2Fl
LTVmOTYtNDg3NS04NzAxLTk0NGVjZWM3YTQyMy8xL3A3SGU5cFdJWHEzbHpNaTB2
aW9DdXhZSG5wdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDrf+QAwQCwREkMA0EAgACMAcDBQMqB+5AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMfaDANBgkqhkiG9w0BAQsFAAOCAQEAONcD
N7O/KCVUAOldpvrR9yFi6tmpycDs1Fxe9RpAD8J0D06sUEwy/+a1sY8bxjtEl+D6
RMwd94jXxu986TigijDafPiKvDjL6R1KZRRSZfRlM5ssnyv4QbAPRqDAVABxHItO
cswUIcefs9b6uvjPE5dNB2gntwZbCFV2v2lNVRU81rnkGwo3WCmnqzNVLRUEtJPK
vnbdZANHTTmPZyptGGPitXnWbkffO3WkuMxyR8cxT7j23y0Pb8NvZ4YvA3M9ELg2
SukhdAz+wnYR5L1VMZQYY8hAjL39jN1+sC3/pHQFf6Szc9OVMvUTMUJyHq2zakc1
XSgiWblbOtAe79qpSg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:23 2025 by rpki-client