Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.cer (raw, json)
Hash identifier: /CMm9aa7VFqhbaV0rPRzj9jQRnQEBx4y/Es+qDgrmsk=
Subject key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FA82CF77E04AB7ED420A86D7692D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6663
IP: 5.154.236.0/24
IP: 5.154.239.0/24
IP: 81.24.16.0/20
IP: 85.204.32.0/22
IP: 85.204.100.0/22
IP: 89.238.192.0/18
IP: 93.113.104.0/22
IP: 93.114.100.0/22
IP: 185.63.4.0/22
IP: 2a02:2720::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:2c:f7:7e:04:ab:7e:d4:20:a8:6d:76:92:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:7c:5e:da:45:a6:dd:75:f4:cf:05:ff:79:
4d:89:9a:4c:0a:1d:f2:dc:60:35:58:68:d3:8a:d9:
b4:d4:62:d5:c2:c7:4a:a2:f7:4e:5f:f0:69:8e:4f:
a7:6b:3d:03:58:18:98:4d:23:0f:03:05:61:b0:e1:
23:56:e1:e9:68:a7:ac:7e:44:c5:9e:68:21:ff:ba:
8a:3e:01:cb:fc:a0:64:2b:60:31:87:ca:73:74:9e:
62:66:89:13:1e:68:81:58:2f:dd:48:67:5f:84:1d:
dc:dd:6f:ad:d7:07:78:3f:3a:46:ae:85:74:54:51:
41:df:57:87:4e:2e:da:d6:e8:1d:71:cd:2c:a5:3e:
92:8a:52:10:33:18:d6:9f:1d:bf:b5:83:83:00:18:
56:b1:27:48:00:f0:0a:78:02:1b:04:bc:02:64:2d:
c9:24:02:47:06:6f:31:ac:e5:47:8b:94:65:88:0d:
1e:c7:67:c9:e8:bc:c9:5e:a6:a3:d7:f4:77:62:95:
80:9f:1a:54:d2:95:43:b8:b3:a9:5f:50:e6:99:fe:
38:39:8e:13:33:5d:15:db:54:8d:4a:d4:0d:c3:03:
5c:d6:09:bb:e1:a3:84:fc:34:d7:5d:d7:31:6a:e5:
c8:75:8f:30:70:1a:d4:c3:c1:a5:80:d2:e3:1c:41:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.236.0/24
5.154.239.0/24
81.24.16.0/20
85.204.32.0/22
85.204.100.0/22
89.238.192.0/18
93.113.104.0/22
93.114.100.0/22
185.63.4.0/22
IPv6:
2a02:2720::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6663
Signature Algorithm: sha256WithRSAEncryption
1f:e3:20:a6:b6:9f:c1:be:f2:50:f3:3d:4c:4e:97:0e:39:aa:
96:e2:86:f4:4e:5b:7c:e6:c0:11:0e:e7:c9:52:53:5a:2d:f3:
72:8e:52:61:d7:fa:83:0d:b0:58:fd:8f:66:87:0f:5e:9a:46:
8a:7a:55:33:82:03:a4:c3:c5:ff:7e:01:c2:58:a6:75:1b:47:
08:7a:ac:89:e4:d9:50:05:c0:87:8b:c5:74:eb:c5:9f:3c:83:
69:98:1f:22:62:1d:85:dc:35:04:db:f6:48:de:cc:3b:1b:b9:
81:7f:df:25:4f:91:75:f6:0c:7d:7e:2a:80:ba:2b:9c:4d:9a:
90:37:b8:44:11:a4:2f:2c:67:fb:b3:dc:08:fe:77:e3:b1:86:
da:89:26:79:5c:1c:05:60:cb:54:b7:c2:bc:ca:2d:7b:28:fe:
0c:66:eb:6b:7d:4c:ee:e8:4e:c4:2a:13:7f:7e:b9:df:68:4c:
87:d9:10:76:ec:c7:31:05:26:1c:d6:05:e1:b1:d5:36:15:a6:
ce:2b:2f:62:57:c1:e4:70:17:0f:51:e4:f2:f8:c0:34:90:af:
11:47:0e:3a:ab:03:dc:b2:de:c6:9a:1a:01:25:d8:75:de:a9:
8a:79:84:38:0c:38:8d:c5:7d:70:20:e4:c5:6a:4b:94:e2:84:
bd:74:04:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:45 2025 by rpki-client