Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
File: pat5hX5owCBczi8RpTh6avofiJU.cer (raw, json)
Hash identifier: lwRjvQUDquRnIPYJbxTEx86NaIdQeT/DwUdds+Zfvdc=
Subject key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC25B7344CF83B867B13E351A8D6F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206642
IP: 185.179.140.0/22
IP: 2a0a:8780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:b7:34:4c:f8:3b:86:7b:13:e3:51:a8:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:73:00:1a:1a:9f:c1:a6:4e:c5:72:f0:95:
90:a2:45:f8:9c:04:e6:d9:a6:ea:3b:3f:2b:e4:88:
25:67:ac:8d:12:bb:a7:48:a4:f6:e6:5a:22:ba:a6:
fb:af:86:f6:4e:62:10:f0:05:37:a2:0d:67:ac:da:
66:4e:65:e1:66:a1:a0:e1:33:28:5d:ea:e4:64:39:
35:2c:a8:c3:ac:5a:31:c4:fc:f5:ed:08:3c:c6:b8:
fa:d5:ed:61:92:c8:01:d1:49:cd:8b:ae:8f:3d:42:
84:3a:e0:72:92:4b:d7:59:8d:28:d0:bb:f0:d5:27:
cd:c4:76:35:8c:a2:84:7a:0e:99:07:3d:5a:ef:53:
fa:f3:55:a1:85:c9:23:36:fa:ef:fd:c0:27:41:9b:
18:0a:5e:a6:8f:47:4c:94:11:17:20:3a:42:3c:14:
81:b5:f3:70:b7:bb:a9:3d:01:be:b2:31:85:9b:e8:
ed:3a:55:34:26:d8:14:98:46:f5:39:5d:e7:cd:2d:
5f:0c:49:78:3b:39:4e:8e:17:a5:47:2a:ce:b2:1c:
b0:a1:07:11:f3:b6:4e:f9:c6:43:68:83:af:a7:36:
ac:25:98:ef:49:2e:f5:bb:7f:a9:84:87:a7:e9:02:
1b:0b:fb:c6:42:f3:4c:ca:a5:45:27:d8:97:77:c6:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/22
IPv6:
2a0a:8780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206642
Signature Algorithm: sha256WithRSAEncryption
8d:b2:50:85:de:8c:b3:35:e6:c1:a6:48:5e:fb:70:6d:d2:2a:
c8:ff:18:3c:88:cd:4c:0a:4e:1a:bc:71:71:ec:88:82:41:87:
a3:ce:c3:e1:2a:62:da:7e:73:74:7a:6e:fe:d3:b5:a0:11:d7:
5a:10:d0:ba:96:d8:2f:77:0f:cc:f8:1c:89:4d:fa:95:91:cc:
20:3b:1b:21:0f:8a:6b:21:f6:a5:18:fc:85:e2:cd:ea:d1:c6:
fe:cb:62:7b:ad:fe:f6:71:eb:50:45:06:08:b4:86:24:93:97:
f0:cd:9b:c6:99:e0:c5:2d:84:8a:8f:cb:98:55:81:94:57:fa:
0e:7d:9a:24:8a:ef:d8:0c:26:99:e0:d6:6a:1d:a7:d8:59:a6:
e2:77:d9:15:53:a0:b4:b8:ee:6e:03:6c:50:96:ec:29:2d:f1:
8f:fc:01:d2:07:f9:43:2b:12:9b:d1:7a:5b:5f:12:31:33:23:
4e:0c:9b:f9:4d:cc:de:d7:66:b9:4c:5f:36:23:85:ad:dd:cc:
d6:d2:2b:41:90:b3:4e:49:77:45:f3:37:7b:02:ba:b8:c0:3d:
6a:3a:80:92:44:38:cd:8a:36:f5:eb:80:c9:82:49:1d:4d:df:
e6:f1:39:f4:02:f9:e5:e1:8a:a1:d2:73:fa:b6:95:01:f4:16:
74:50:31:44
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi/CW3NEz4O4Z7E+NRqNb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWFiNzk4NTdlNjhjMDIwNWNjZTJmMTFhNTM4N2E2YWZhMWY4ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NdzABoan8GmTsVy8JWQokX4nATm
2abqOz8r5IglZ6yNErunSKT25loiuqb7r4b2TmIQ8AU3og1nrNpmTmXhZqGg4TMo
XerkZDk1LKjDrFoxxPz17Qg8xrj61e1hksgB0UnNi66PPUKEOuBykkvXWY0o0Lvw
1SfNxHY1jKKEeg6ZBz1a71P681WhhckjNvrv/cAnQZsYCl6mj0dMlBEXIDpCPBSB
tfNwt7upPQG+sjGFm+jtOlU0JtgUmEb1OV3nzS1fDEl4OzlOjhelRyrOshywoQcR
87ZO+cZDaIOvpzasJZjvSS71u3+phIen6QIbC/vGQvNMyqVFJ9iXd8ZKgwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKWreYV+aMAgXM4vEaU4emr6H4iVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2UyYTU1
Yy1iNWU2LTQ5OWEtYjcyOS0xZTU4YWM4NzkyNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvZTJhNTVj
LWI1ZTYtNDk5YS1iNzI5LTFlNThhYzg3OTI0YS8xL3BhdDVoWDVvd0NCY3ppOFJw
VGg2YXZvZmlKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCubOMMA0EAgACMAcDBQMqCoeAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMnMjANBgkqhkiG9w0BAQsFAAOCAQEAjbJQhd6MszXm
waZIXvtwbdIqyP8YPIjNTApOGrxxceyIgkGHo87D4Spi2n5zdHpu/tO1oBHXWhDQ
upbYL3cPzPgciU36lZHMIDsbIQ+KayH2pRj8heLN6tHG/stie63+9nHrUEUGCLSG
JJOX8M2bxpngxS2Eio/LmFWBlFf6Dn2aJIrv2AwmmeDWah2n2Fmm4nfZFVOgtLju
bgNsUJbsKS3xj/wB0gf5QysSm9F6W18SMTMjTgyb+U3M3tdmuUxfNiOFrd3M1tIr
QZCzTkl3RfM3ewK6uMA9ajqAkkQ4zYo29euAyYJJHU3f5vE59AL55eGKodJz+raV
AfQWdFAxRA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:27 2025 by rpki-client