Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
File: pXbrLMRi5uS_Deabn2NIdd67quI.cer (raw, json)
Hash identifier: vypN+Lt+TLWY5YRtS+3geqXxIKLr1attAAQLJbMAG/g=
Subject key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E13A4C086FF81EAA51AFC760B3E293FAB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Mar 2024 12:02:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3214
AS: 35536 -- 35537
AS: 39220
AS: 41767
AS: 43959
AS: 43992
AS: 57969
AS: 205758
AS: 208982
IP: 2.58.244.0 -- 2.58.251.255
IP: 5.183.116.0 -- 5.183.123.255
IP: 5.253.16.0/22
IP: 45.8.32.0/22
IP: 45.8.112.0/22
IP: 45.8.220.0/22
IP: 45.11.44.0/22
IP: 45.13.196.0/22
IP: 45.14.64.0/21
IP: 45.14.104.0/22
IP: 45.66.128.0/22
IP: 45.66.216.0/22
IP: 45.80.188.0/22
IP: 45.82.76.0/22
IP: 45.87.92.0/22
IP: 45.87.164.0/22
IP: 45.89.216.0/22
IP: 45.89.232.0/22
IP: 45.90.208.0/22
IP: 45.92.156.0/22
IP: 45.94.40.0/22
IP: 45.128.208.0/22
IP: 45.129.8.0/22
IP: 45.130.20.0/22
IP: 45.130.180.0/22
IP: 45.131.152.0/22
IP: 45.134.168.0/22
IP: 45.135.40.0/22
IP: 45.136.176.0/22
IP: 45.136.184.0/22
IP: 45.139.192.0/22
IP: 45.141.44.0/22
IP: 45.142.124.0/22
IP: 45.143.0.0/22
IP: 45.143.128.0/22
IP: 45.143.232.0/22
IP: 45.147.48.0/22
IP: 45.149.156.0/22
IP: 45.153.244.0/22
IP: 45.159.48.0/22
IP: 62.3.15.0/24
IP: 62.106.70.0/24
IP: 62.106.75.0/24
IP: 62.133.32.0/22
IP: 77.75.225.0/24
IP: 78.142.192.0/22
IP: 78.142.228.0/22
IP: 79.110.231.0 -- 79.110.232.255
IP: 79.143.140.0/22
IP: 80.66.196.0/22
IP: 88.214.20.0/22
IP: 88.218.192.0/22
IP: 91.200.240.0/22
IP: 91.213.17.0/24
IP: 92.60.40.0/22
IP: 92.118.188.0/22
IP: 94.124.116.0/22
IP: 95.214.164.0/22
IP: 109.94.168.0/22
IP: 109.107.137.0/24
IP: 109.107.140.0/24
IP: 141.98.196.0/22
IP: 146.19.112.0/24
IP: 146.19.116.0/24
IP: 147.78.176.0/22
IP: 147.78.240.0/21
IP: 149.62.44.0/22
IP: 176.113.68.0/22
IP: 176.119.148.0/22
IP: 176.126.114.0/24
IP: 178.22.26.0/24
IP: 178.212.76.0/24
IP: 185.49.32.0/22
IP: 185.64.79.0/24
IP: 185.120.183.0/24
IP: 185.122.207.0/24
IP: 185.184.220.0/22
IP: 185.194.52.0/22
IP: 185.198.71.0/24
IP: 185.200.64.0/22
IP: 185.207.152.0/22
IP: 185.213.148.0/22
IP: 185.222.43.0/24
IP: 185.222.216.0/21
IP: 185.241.58.0/24
IP: 185.248.84.0/22
IP: 185.254.72.0/22
IP: 185.255.52.0/22
IP: 188.95.70.0/24
IP: 193.3.174.0/24
IP: 193.8.124.0/23
IP: 193.8.168.0/23
IP: 193.17.91.0/24
IP: 193.32.86.0/24
IP: 193.32.148.0/22
IP: 193.111.30.0/23
IP: 193.111.90.0/23
IP: 193.163.19.0/24
IP: 193.177.220.0/22
IP: 193.187.116.0/22
IP: 194.36.24.0/22
IP: 194.36.222.0/23
IP: 194.36.242.0/23
IP: 194.104.144.0/22
IP: 194.104.152.0/22
IP: 194.114.136.0/22
IP: 194.124.213.0/24
IP: 194.124.216.0/24
IP: 194.124.227.0 -- 194.124.228.255
IP: 194.169.54.0/23
IP: 194.169.180.0/23
IP: 195.245.219.0/24
IP: 195.245.229.0/24
IP: 195.245.241.0 -- 195.245.242.255
IP: 212.23.196.0/23
IP: 213.217.9.0/24
IP: 213.232.112.0/22
IP: 213.232.238.0/23
IP: 2a03:d9c0::/29
IP: 2a06:4fc0::/29
IP: 2a06:57c0::/29
IP: 2a07:46c0::/29
IP: 2a07:e900::/29
IP: 2a07:fa00::/29
IP: 2a07:fe00::/29
IP: 2a09::/29
IP: 2a0b:4080::/32
IP: 2a0b:89c0::/29
IP: 2a0c:59c0::/29
IP: 2a0c:ed40::/29
IP: 2a0d:1fc0::/29
IP: 2a0d:3640::/29
IP: 2a0d:4340::/29
IP: 2a0d:4bc0::/29
IP: 2a0d:7540::/29
IP: 2a0d:c7c0::/29
IP: 2a0d:de80::/29
IP: 2a0e:6200::/29
IP: 2a10:480::/29
IP: 2a10:2600::/29
IP: 2a12:9d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:a4:c0:86:ff:81:ea:a5:1a:fc:76:0b:3e:29:3f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 12:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:91:c4:d0:32:ab:4e:ae:bc:fb:7d:18:38:
81:13:06:ce:8d:4e:98:b4:a9:68:77:60:35:70:7b:
4b:2e:bb:df:fa:d9:69:a0:ab:bc:b4:cb:1a:6a:f7:
3c:67:61:d1:b5:07:e1:1f:ec:c9:3a:3d:bb:fa:da:
bb:0a:e5:ca:93:c9:09:4f:05:f5:35:a7:3b:dd:b4:
20:84:e1:42:2e:20:bd:43:27:69:14:7f:9a:6f:6f:
14:05:72:9e:8f:1c:37:c6:7f:dc:0b:84:ff:7e:0a:
d3:34:50:72:6a:0e:27:2a:c4:bb:12:c1:15:ce:36:
fd:ae:5f:d2:93:e8:7e:9d:de:7e:04:f0:7a:f2:8a:
26:f3:97:8a:db:36:a1:17:e2:31:0f:f8:d1:98:5b:
3e:e2:8b:4c:44:77:9e:94:f8:dc:b3:09:05:a3:27:
10:d8:5c:48:c6:32:a4:a7:82:b8:72:09:db:05:1e:
d7:20:78:f3:55:91:bc:ac:66:3f:4d:6b:94:99:1f:
e2:94:06:c6:d9:ff:45:f4:5a:de:9c:c1:41:27:2e:
6e:ba:3f:24:16:a9:0c:69:b6:4f:84:d2:56:04:50:
c0:a5:a6:22:2e:f4:ff:cd:b8:c2:d9:3c:48:8e:e0:
00:44:46:3a:b7:6f:55:6c:85:9a:8a:c7:fe:b8:96:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
5.253.16.0/22
45.8.32.0/22
45.8.112.0/22
45.8.220.0/22
45.11.44.0/22
45.13.196.0/22
45.14.64.0/21
45.14.104.0/22
45.66.128.0/22
45.66.216.0/22
45.80.188.0/22
45.82.76.0/22
45.87.92.0/22
45.87.164.0/22
45.89.216.0/22
45.89.232.0/22
45.90.208.0/22
45.92.156.0/22
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.130.20.0/22
45.130.180.0/22
45.131.152.0/22
45.134.168.0/22
45.135.40.0/22
45.136.176.0/22
45.136.184.0/22
45.139.192.0/22
45.141.44.0/22
45.142.124.0/22
45.143.0.0/22
45.143.128.0/22
45.143.232.0/22
45.147.48.0/22
45.149.156.0/22
45.153.244.0/22
45.159.48.0/22
62.3.15.0/24
62.106.70.0/24
62.106.75.0/24
62.133.32.0/22
77.75.225.0/24
78.142.192.0/22
78.142.228.0/22
79.110.231.0-79.110.232.255
79.143.140.0/22
80.66.196.0/22
88.214.20.0/22
88.218.192.0/22
91.200.240.0/22
91.213.17.0/24
92.60.40.0/22
92.118.188.0/22
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
109.107.137.0/24
109.107.140.0/24
141.98.196.0/22
146.19.112.0/24
146.19.116.0/24
147.78.176.0/22
147.78.240.0/21
149.62.44.0/22
176.113.68.0/22
176.119.148.0/22
176.126.114.0/24
178.22.26.0/24
178.212.76.0/24
185.49.32.0/22
185.64.79.0/24
185.120.183.0/24
185.122.207.0/24
185.184.220.0/22
185.194.52.0/22
185.198.71.0/24
185.200.64.0/22
185.207.152.0/22
185.213.148.0/22
185.222.43.0/24
185.222.216.0/21
185.241.58.0/24
185.248.84.0/22
185.254.72.0/22
185.255.52.0/22
188.95.70.0/24
193.3.174.0/24
193.8.124.0/23
193.8.168.0/23
193.17.91.0/24
193.32.86.0/24
193.32.148.0/22
193.111.30.0/23
193.111.90.0/23
193.163.19.0/24
193.177.220.0/22
193.187.116.0/22
194.36.24.0/22
194.36.222.0/23
194.36.242.0/23
194.104.144.0/22
194.104.152.0/22
194.114.136.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.229.0/24
195.245.241.0-195.245.242.255
212.23.196.0/23
213.217.9.0/24
213.232.112.0/22
213.232.238.0/23
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:46c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:c7c0::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
2a12:9d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3214
35536-35537
39220
41767
43959
43992
57969
205758
208982
Signature Algorithm: sha256WithRSAEncryption
92:ed:44:f2:86:7e:d4:98:ef:36:36:2f:d4:91:1a:cb:a8:d8:
c4:90:6b:d5:5d:71:02:fd:fa:50:78:6f:f4:ec:b0:d3:f2:8e:
a8:19:7a:2d:33:29:bd:9d:75:36:81:d9:5b:de:9e:22:f9:c4:
45:07:a8:5e:79:5b:b9:4c:06:89:be:fe:1f:47:43:7c:c3:04:
d7:ae:37:ca:d9:12:ef:c5:6b:b1:19:e5:5e:0c:ba:ea:48:90:
9f:57:05:d3:4c:0c:fb:c6:a0:33:d1:90:c5:63:c3:9b:ce:5a:
1d:f3:53:c2:dd:96:e6:02:62:2b:ff:8b:ab:6a:a1:91:1c:1c:
56:cf:01:82:17:fe:4a:fe:35:4b:f5:8a:29:13:80:5a:01:23:
22:43:6c:e7:40:26:52:88:c7:d6:fb:d0:83:69:6c:f4:ac:43:
f1:62:e4:98:d4:a3:de:b1:8a:ef:51:7e:f1:75:09:ca:c5:46:
5f:66:a0:6b:94:3e:57:02:cb:70:9e:26:35:3e:72:8f:59:80:
17:ac:5e:83:d0:3f:86:3e:fa:f0:e2:23:03:07:7f:52:4b:43:
c7:45:f2:8e:3c:83:ea:e5:35:51:6a:d5:32:41:66:4c:e5:8b:
50:9d:2d:9c:29:87:d3:5d:26:c4:cd:59:fb:d5:a7:23:a5:c6:
0e:70:a9:9b
-----BEGIN CERTIFICATE-----
MIIJXTCCCEWgAwIBAgISAY4TpMCG/4HqpRr8dgs+KT+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzA2MTIwMjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPyRxNAyq06uvPt9GDiBEwbOjU6Y
tKlod2A1cHtLLrvf+tlpoKu8tMsaavc8Z2HRtQfhH+zJOj27+tq7CuXKk8kJTwX1
Nac73bQghOFCLiC9QydpFH+ab28UBXKejxw3xn/cC4T/fgrTNFByag4nKsS7EsEV
zjb9rl/Sk+h+nd5+BPB68oom85eK2zahF+IxD/jRmFs+4otMRHeelPjcswkFoycQ
2FxIxjKkp4K4cgnbBR7XIHjzVZG8rGY/TWuUmR/ilAbG2f9F9FrenMFBJy5uuj8k
FqkMabZPhNJWBFDApaYiLvT/zbjC2TxIjuAAREY6t29VbIWaisf+uJY8IwIDAQAB
o4IGaTCCBmUwHQYDVR0OBBYEFKV26yzEYubkvw3mm59jSHXeu6riMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzkzMTky
Ny05ZjM4LTQxYjYtODdmYS0yNTRhY2Q5MmI0ZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvOTMxOTI3
LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVTX0RlYWJu
Mk5JZGQ2N3F1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDuAYIKwYB
BQUHAQcBAf8EggOnMIIDozCCAvQEAgABMIIC7DAMAwQCAjr0AwQCAjr4MAwDBAIF
t3QDBAIFt3gDBAIF/RADBAItCCADBAItCHADBAItCNwDBAItCywDBAItDcQDBAMt
DkADBAItDmgDBAItQoADBAItQtgDBAItULwDBAItUkwDBAItV1wDBAItV6QDBAIt
WdgDBAItWegDBAItWtADBAItXJwDBAItXigDBAItgNADBAItgQgDBAItghQDBAIt
grQDBAItg5gDBAIthqgDBAIthygDBAItiLADBAItiLgDBAIti8ADBAItjSwDBAIt
jnwDBAItjwADBAItj4ADBAItj+gDBAItkzADBAItlZwDBAItmfQDBAItnzADBAA+
Aw8DBAA+akYDBAA+aksDBAI+hSADBABNS+EDBAJOjsADBAJOjuQwDAMEAE9u5wME
AE9u6AMEAk+PjAMEAlBCxAMEAljWFAMEAljawAMEAlvI8AMEAFvVEQMEAlw8KAME
Alx2vAMEAl58dAMEAl/WpAMEAm1eqAMEAG1riQMEAG1rjAMEAo1ixAMEAJITcAME
AJITdAMEApNOsAMEA5NO8AMEApU+LAMEArBxRAMEArB3lAMEALB+cgMEALIWGgME
ALLUTAMEArkxIAMEALlATwMEALl4twMEALl6zwMEArm43AMEArnCNAMEALnGRwME
ArnIQAMEArnPmAMEArnVlAMEALneKwMEA7ne2AMEALnxOgMEArn4VAMEArn+SAME
Arn/NAMEALxfRgMEAMEDrgMEAcEIfAMEAcEIqAMEAMERWwMEAMEgVgMEAsEglAME
AcFvHgMEAcFvWgMEAMGjEwMEAsGx3AMEAsG7dAMEAsIkGAMEAcIk3gMEAcIk8gME
AsJokAMEAsJomAMEAsJyiAMEAMJ81QMEAMJ82DAMAwQAwnzjAwQAwnzkAwQBwqk2
AwQBwqm0AwQAw/XbAwQAw/XlMAwDBADD9fEDBADD9fIDBAHUF8QDBADV2QkDBALV
6HADBAHV6O4wgagEAgACMIGhAwUDKgPZwAMFAyoGT8ADBQMqBlfAAwUDKgdGwAMF
AyoH6QADBQMqB/oAAwUDKgf+AAMFAyoJAAADBQAqC0CAAwUDKguJwAMFAyoMWcAD
BQMqDO1AAwUDKg0fwAMFAyoNNkADBQMqDUNAAwUDKg1LwAMFAyoNdUADBQMqDcfA
AwUDKg3egAMFAyoOYgADBQMqEASAAwUDKhAmAAMFAyoSnQAwSAYIKwYBBQUHAQgB
Af8EOTA3oDUwMwICDI4wCgIDAIrQAgMAitECAwCZNAIDAKMnAgMAq7cCAwCr2AID
AOJxAgMDI74CAwMwVjANBgkqhkiG9w0BAQsFAAOCAQEAku1E8oZ+1JjvNjYv1JEa
y6jYxJBr1V1xAv36UHhv9Oyw0/KOqBl6LTMpvZ11NoHZW96eIvnERQeoXnlbuUwG
ib7+H0dDfMME1643ytkS78VrsRnlXgy66kiQn1cF00wM+8agM9GQxWPDm85aHfNT
wt2W5gJiK/+Lq2qhkRwcVs8Bghf+Sv41S/WKKROAWgEjIkNs50AmUojH1vvQg2ls
9KxD8WLkmNSj3rGK71F+8XUJysVGX2aga5Q+VwLLcJ4mNT5yj1mAF6xeg9A/hj76
8OIjAwd/UktDx0XyjjyD6uU1UWrVMkFmTOWLUJ0tnCmH010mxM1Z+9WnI6XGDnCp
mw==
-----END CERTIFICATE-----
Generated at Wed Apr 24 00:58:18 2024 by rpki-client on console-ams.rpki-client.org