Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
File: pXbrLMRi5uS_Deabn2NIdd67quI.cer (raw, json)
Hash identifier: BT3qfH1X4QgOZSlKv+TXv7BqBbcNcJy3lieSaQScsuk=
Subject key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190737E7E56AC4B8B8A924A8E5E43E3366D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jul 2024 12:49:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3214
AS: 35536 -- 35537
AS: 39220
AS: 41767
AS: 43959
AS: 43992
AS: 57969
AS: 205758
AS: 208982
IP: 2.58.244.0 -- 2.58.251.255
IP: 5.183.116.0 -- 5.183.123.255
IP: 5.253.16.0/22
IP: 45.8.32.0/22
IP: 45.8.112.0/22
IP: 45.8.220.0/22
IP: 45.11.44.0/22
IP: 45.13.196.0/22
IP: 45.14.64.0/21
IP: 45.14.104.0/22
IP: 45.66.128.0/22
IP: 45.66.216.0/22
IP: 45.80.188.0/22
IP: 45.82.76.0/22
IP: 45.87.92.0/22
IP: 45.87.164.0/22
IP: 45.89.216.0/22
IP: 45.89.232.0/22
IP: 45.90.208.0/22
IP: 45.92.156.0/22
IP: 45.94.40.0/22
IP: 45.128.208.0/22
IP: 45.129.8.0/22
IP: 45.130.20.0/22
IP: 45.130.180.0/22
IP: 45.131.152.0/22
IP: 45.134.168.0/22
IP: 45.135.40.0/22
IP: 45.136.176.0/22
IP: 45.136.184.0/22
IP: 45.139.192.0/22
IP: 45.141.44.0/22
IP: 45.142.124.0/22
IP: 45.143.128.0/22
IP: 45.143.232.0/22
IP: 45.147.48.0/22
IP: 45.149.156.0/22
IP: 45.153.244.0/22
IP: 45.159.48.0/22
IP: 62.3.15.0/24
IP: 62.106.70.0/24
IP: 62.106.75.0/24
IP: 62.133.32.0/22
IP: 77.75.225.0/24
IP: 78.142.192.0/22
IP: 78.142.228.0/22
IP: 79.110.231.0 -- 79.110.232.255
IP: 79.143.140.0/22
IP: 80.66.196.0/22
IP: 88.214.20.0/22
IP: 88.218.192.0/22
IP: 91.200.240.0/22
IP: 91.213.17.0/24
IP: 92.60.40.0/22
IP: 92.118.188.0/22
IP: 94.124.116.0/22
IP: 95.214.164.0/22
IP: 109.94.168.0/22
IP: 109.107.137.0/24
IP: 109.107.140.0/24
IP: 141.98.196.0/22
IP: 146.19.112.0/24
IP: 146.19.116.0/24
IP: 147.78.176.0/22
IP: 147.78.240.0/21
IP: 149.62.44.0/22
IP: 176.113.68.0/22
IP: 176.119.148.0/22
IP: 176.126.114.0/24
IP: 178.22.26.0/24
IP: 178.212.76.0/24
IP: 185.49.32.0/22
IP: 185.64.79.0/24
IP: 185.120.183.0/24
IP: 185.122.207.0/24
IP: 185.184.220.0/22
IP: 185.194.52.0/22
IP: 185.198.71.0/24
IP: 185.200.64.0/22
IP: 185.207.152.0/22
IP: 185.213.148.0/22
IP: 185.222.43.0/24
IP: 185.222.216.0/21
IP: 185.241.58.0/24
IP: 185.248.84.0/22
IP: 185.254.72.0/22
IP: 185.255.52.0/22
IP: 188.95.70.0/24
IP: 193.3.174.0/24
IP: 193.8.124.0/23
IP: 193.8.168.0/23
IP: 193.17.91.0/24
IP: 193.32.86.0/24
IP: 193.32.148.0/22
IP: 193.111.30.0/23
IP: 193.111.90.0/23
IP: 193.163.19.0/24
IP: 193.177.220.0/22
IP: 193.187.116.0/22
IP: 194.36.24.0/22
IP: 194.36.222.0/23
IP: 194.36.242.0/23
IP: 194.104.144.0/22
IP: 194.104.152.0/22
IP: 194.114.136.0/22
IP: 194.124.213.0/24
IP: 194.124.216.0/24
IP: 194.124.227.0 -- 194.124.228.255
IP: 194.169.54.0/23
IP: 194.169.180.0/23
IP: 195.245.219.0/24
IP: 195.245.229.0/24
IP: 195.245.241.0 -- 195.245.242.255
IP: 212.23.196.0/23
IP: 213.217.9.0/24
IP: 213.232.112.0/22
IP: 213.232.238.0/23
IP: 2a03:d9c0::/29
IP: 2a06:4fc0::/29
IP: 2a06:57c0::/29
IP: 2a07:46c0::/29
IP: 2a07:e900::/29
IP: 2a07:fa00::/29
IP: 2a07:fe00::/29
IP: 2a09::/29
IP: 2a0b:4080::/32
IP: 2a0b:89c0::/29
IP: 2a0c:59c0::/29
IP: 2a0c:ed40::/29
IP: 2a0d:1fc0::/29
IP: 2a0d:3640::/29
IP: 2a0d:4340::/29
IP: 2a0d:4bc0::/29
IP: 2a0d:7540::/29
IP: 2a0d:c7c0::/29
IP: 2a0d:de80::/29
IP: 2a0e:6200::/29
IP: 2a10:480::/29
IP: 2a10:2600::/29
IP: 2a12:9d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:7e:7e:56:ac:4b:8b:8a:92:4a:8e:5e:43:e3:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 12:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:91:c4:d0:32:ab:4e:ae:bc:fb:7d:18:38:
81:13:06:ce:8d:4e:98:b4:a9:68:77:60:35:70:7b:
4b:2e:bb:df:fa:d9:69:a0:ab:bc:b4:cb:1a:6a:f7:
3c:67:61:d1:b5:07:e1:1f:ec:c9:3a:3d:bb:fa:da:
bb:0a:e5:ca:93:c9:09:4f:05:f5:35:a7:3b:dd:b4:
20:84:e1:42:2e:20:bd:43:27:69:14:7f:9a:6f:6f:
14:05:72:9e:8f:1c:37:c6:7f:dc:0b:84:ff:7e:0a:
d3:34:50:72:6a:0e:27:2a:c4:bb:12:c1:15:ce:36:
fd:ae:5f:d2:93:e8:7e:9d:de:7e:04:f0:7a:f2:8a:
26:f3:97:8a:db:36:a1:17:e2:31:0f:f8:d1:98:5b:
3e:e2:8b:4c:44:77:9e:94:f8:dc:b3:09:05:a3:27:
10:d8:5c:48:c6:32:a4:a7:82:b8:72:09:db:05:1e:
d7:20:78:f3:55:91:bc:ac:66:3f:4d:6b:94:99:1f:
e2:94:06:c6:d9:ff:45:f4:5a:de:9c:c1:41:27:2e:
6e:ba:3f:24:16:a9:0c:69:b6:4f:84:d2:56:04:50:
c0:a5:a6:22:2e:f4:ff:cd:b8:c2:d9:3c:48:8e:e0:
00:44:46:3a:b7:6f:55:6c:85:9a:8a:c7:fe:b8:96:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
5.253.16.0/22
45.8.32.0/22
45.8.112.0/22
45.8.220.0/22
45.11.44.0/22
45.13.196.0/22
45.14.64.0/21
45.14.104.0/22
45.66.128.0/22
45.66.216.0/22
45.80.188.0/22
45.82.76.0/22
45.87.92.0/22
45.87.164.0/22
45.89.216.0/22
45.89.232.0/22
45.90.208.0/22
45.92.156.0/22
45.94.40.0/22
45.128.208.0/22
45.129.8.0/22
45.130.20.0/22
45.130.180.0/22
45.131.152.0/22
45.134.168.0/22
45.135.40.0/22
45.136.176.0/22
45.136.184.0/22
45.139.192.0/22
45.141.44.0/22
45.142.124.0/22
45.143.128.0/22
45.143.232.0/22
45.147.48.0/22
45.149.156.0/22
45.153.244.0/22
45.159.48.0/22
62.3.15.0/24
62.106.70.0/24
62.106.75.0/24
62.133.32.0/22
77.75.225.0/24
78.142.192.0/22
78.142.228.0/22
79.110.231.0-79.110.232.255
79.143.140.0/22
80.66.196.0/22
88.214.20.0/22
88.218.192.0/22
91.200.240.0/22
91.213.17.0/24
92.60.40.0/22
92.118.188.0/22
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
109.107.137.0/24
109.107.140.0/24
141.98.196.0/22
146.19.112.0/24
146.19.116.0/24
147.78.176.0/22
147.78.240.0/21
149.62.44.0/22
176.113.68.0/22
176.119.148.0/22
176.126.114.0/24
178.22.26.0/24
178.212.76.0/24
185.49.32.0/22
185.64.79.0/24
185.120.183.0/24
185.122.207.0/24
185.184.220.0/22
185.194.52.0/22
185.198.71.0/24
185.200.64.0/22
185.207.152.0/22
185.213.148.0/22
185.222.43.0/24
185.222.216.0/21
185.241.58.0/24
185.248.84.0/22
185.254.72.0/22
185.255.52.0/22
188.95.70.0/24
193.3.174.0/24
193.8.124.0/23
193.8.168.0/23
193.17.91.0/24
193.32.86.0/24
193.32.148.0/22
193.111.30.0/23
193.111.90.0/23
193.163.19.0/24
193.177.220.0/22
193.187.116.0/22
194.36.24.0/22
194.36.222.0/23
194.36.242.0/23
194.104.144.0/22
194.104.152.0/22
194.114.136.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.229.0/24
195.245.241.0-195.245.242.255
212.23.196.0/23
213.217.9.0/24
213.232.112.0/22
213.232.238.0/23
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:46c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:c7c0::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
2a12:9d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3214
35536-35537
39220
41767
43959
43992
57969
205758
208982
Signature Algorithm: sha256WithRSAEncryption
25:39:b5:9a:4b:af:7d:cb:bf:6f:27:78:e0:8e:cf:ab:05:72:
86:6c:aa:30:b6:9e:1f:00:51:2f:e7:2c:9f:69:7a:2f:30:a7:
4f:6f:43:44:ba:18:06:e4:da:f1:97:81:6c:a4:27:07:4d:40:
bf:3f:0f:31:ec:c2:0f:5f:de:f2:97:04:3c:0b:cb:6b:55:50:
a9:a1:16:ba:7b:60:b1:1c:4d:b9:88:48:83:04:e7:e2:20:b0:
b7:ac:02:f8:2b:d7:1f:ed:eb:39:1f:7d:8f:83:19:76:52:61:
f7:a7:91:9d:23:fb:9c:d8:f7:fd:ec:e0:41:91:0a:88:fc:3f:
19:10:21:98:e4:14:28:ff:88:cd:0b:86:03:3d:5c:74:5e:65:
85:a7:f3:11:f2:a8:7d:2a:11:86:bc:c8:5a:e2:68:5f:5e:2d:
64:40:8e:2e:06:f3:61:7f:61:2d:64:47:56:57:66:e5:40:ba:
75:b6:b8:fa:b6:03:bf:7b:9d:c0:80:5b:1a:13:02:79:4e:02:
5f:0a:a7:fa:6f:47:32:85:07:76:a3:46:ab:1e:26:7f:df:4f:
45:54:9e:0c:20:1b:16:60:bc:25:cd:c7:18:34:23:b6:89:2c:
0d:94:b9:ae:73:db:cd:9f:fa:64:40:86:9b:74:25:33:41:0d:
56:93:9c:cd
-----BEGIN CERTIFICATE-----
MIIJVzCCCD+gAwIBAgISAZBzfn5WrEuLipJKjl5D4zZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNzAyMTI0OTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPyRxNAyq06uvPt9GDiBEwbOjU6Y
tKlod2A1cHtLLrvf+tlpoKu8tMsaavc8Z2HRtQfhH+zJOj27+tq7CuXKk8kJTwX1
Nac73bQghOFCLiC9QydpFH+ab28UBXKejxw3xn/cC4T/fgrTNFByag4nKsS7EsEV
zjb9rl/Sk+h+nd5+BPB68oom85eK2zahF+IxD/jRmFs+4otMRHeelPjcswkFoycQ
2FxIxjKkp4K4cgnbBR7XIHjzVZG8rGY/TWuUmR/ilAbG2f9F9FrenMFBJy5uuj8k
FqkMabZPhNJWBFDApaYiLvT/zbjC2TxIjuAAREY6t29VbIWaisf+uJY8IwIDAQAB
o4IGYzCCBl8wHQYDVR0OBBYEFKV26yzEYubkvw3mm59jSHXeu6riMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzkzMTky
Ny05ZjM4LTQxYjYtODdmYS0yNTRhY2Q5MmI0ZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvOTMxOTI3
LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVTX0RlYWJu
Mk5JZGQ2N3F1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIDsgYIKwYB
BQUHAQcBAf8EggOhMIIDnTCCAu4EAgABMIIC5jAMAwQCAjr0AwQCAjr4MAwDBAIF
t3QDBAIFt3gDBAIF/RADBAItCCADBAItCHADBAItCNwDBAItCywDBAItDcQDBAMt
DkADBAItDmgDBAItQoADBAItQtgDBAItULwDBAItUkwDBAItV1wDBAItV6QDBAIt
WdgDBAItWegDBAItWtADBAItXJwDBAItXigDBAItgNADBAItgQgDBAItghQDBAIt
grQDBAItg5gDBAIthqgDBAIthygDBAItiLADBAItiLgDBAIti8ADBAItjSwDBAIt
jnwDBAItj4ADBAItj+gDBAItkzADBAItlZwDBAItmfQDBAItnzADBAA+Aw8DBAA+
akYDBAA+aksDBAI+hSADBABNS+EDBAJOjsADBAJOjuQwDAMEAE9u5wMEAE9u6AME
Ak+PjAMEAlBCxAMEAljWFAMEAljawAMEAlvI8AMEAFvVEQMEAlw8KAMEAlx2vAME
Al58dAMEAl/WpAMEAm1eqAMEAG1riQMEAG1rjAMEAo1ixAMEAJITcAMEAJITdAME
ApNOsAMEA5NO8AMEApU+LAMEArBxRAMEArB3lAMEALB+cgMEALIWGgMEALLUTAME
ArkxIAMEALlATwMEALl4twMEALl6zwMEArm43AMEArnCNAMEALnGRwMEArnIQAME
ArnPmAMEArnVlAMEALneKwMEA7ne2AMEALnxOgMEArn4VAMEArn+SAMEArn/NAME
ALxfRgMEAMEDrgMEAcEIfAMEAcEIqAMEAMERWwMEAMEgVgMEAsEglAMEAcFvHgME
AcFvWgMEAMGjEwMEAsGx3AMEAsG7dAMEAsIkGAMEAcIk3gMEAcIk8gMEAsJokAME
AsJomAMEAsJyiAMEAMJ81QMEAMJ82DAMAwQAwnzjAwQAwnzkAwQBwqk2AwQBwqm0
AwQAw/XbAwQAw/XlMAwDBADD9fEDBADD9fIDBAHUF8QDBADV2QkDBALV6HADBAHV
6O4wgagEAgACMIGhAwUDKgPZwAMFAyoGT8ADBQMqBlfAAwUDKgdGwAMFAyoH6QAD
BQMqB/oAAwUDKgf+AAMFAyoJAAADBQAqC0CAAwUDKguJwAMFAyoMWcADBQMqDO1A
AwUDKg0fwAMFAyoNNkADBQMqDUNAAwUDKg1LwAMFAyoNdUADBQMqDcfAAwUDKg3e
gAMFAyoOYgADBQMqEASAAwUDKhAmAAMFAyoSnQAwSAYIKwYBBQUHAQgBAf8EOTA3
oDUwMwICDI4wCgIDAIrQAgMAitECAwCZNAIDAKMnAgMAq7cCAwCr2AIDAOJxAgMD
I74CAwMwVjANBgkqhkiG9w0BAQsFAAOCAQEAJTm1mkuvfcu/byd44I7PqwVyhmyq
MLaeHwBRL+csn2l6LzCnT29DRLoYBuTa8ZeBbKQnB01Avz8PMezCD1/e8pcEPAvL
a1VQqaEWuntgsRxNuYhIgwTn4iCwt6wC+CvXH+3rOR99j4MZdlJh96eRnSP7nNj3
/ezgQZEKiPw/GRAhmOQUKP+IzQuGAz1cdF5lhafzEfKofSoRhrzIWuJoX14tZECO
LgbzYX9hLWRHVldm5UC6dba4+rYDv3udwIBbGhMCeU4CXwqn+m9HMoUHdqNGqx4m
f99PRVSeDCAbFmC8Jc3HGDQjtoksDZS5rnPbzZ/6ZECGm3QlM0ENVpOczQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:11:41 2024 by rpki-client on console-ams.rpki-client.org