Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer (raw, json)
Hash identifier: EtaUs1W4/3mObUufopywjaSMl7Ms7Vbuy1vylR7JcNc=
Subject key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F19F80967AD48299D8C2F79C18715F6F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Apr 2024 10:33:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29066
IP: 37.61.208.0/20
IP: 62.75.130.0/24
IP: 62.75.136.0/24
IP: 62.75.167.0/24
IP: 62.75.179.0/24
IP: 62.75.181.0 -- 62.75.183.255
IP: 62.75.194.0 -- 62.75.198.255
IP: 62.75.201.0 -- 62.75.204.255
IP: 62.75.207.0/24
IP: 62.75.213.0 -- 62.75.224.255
IP: 62.75.228.0 -- 62.75.230.255
IP: 62.75.232.0 -- 62.75.238.255
IP: 62.75.252.0/22
IP: 62.138.0.0/22
IP: 62.138.5.0 -- 62.138.8.255
IP: 62.138.10.0 -- 62.138.12.255
IP: 62.138.14.0/24
IP: 62.138.16.0/24
IP: 62.138.18.0/23
IP: 62.138.24.0/24
IP: 62.138.26.0/24
IP: 78.138.96.0 -- 78.138.107.255
IP: 78.138.118.0/24
IP: 78.138.126.0/23
IP: 80.86.81.0 -- 80.86.87.255
IP: 80.86.90.0 -- 80.86.95.255
IP: 85.25.1.0/24
IP: 85.25.8.0/21
IP: 85.25.20.0/24
IP: 85.25.27.0/24
IP: 85.25.40.0 -- 85.25.64.255
IP: 85.25.66.0 -- 85.25.68.255
IP: 85.25.71.0 -- 85.25.79.255
IP: 85.25.92.0/22
IP: 85.25.98.0 -- 85.25.100.255
IP: 85.25.102.0 -- 85.25.110.255
IP: 85.25.116.0 -- 85.25.120.255
IP: 85.25.122.0 -- 85.25.157.255
IP: 85.25.159.0 -- 85.25.160.255
IP: 85.25.172.0 -- 85.25.174.255
IP: 85.25.176.0 -- 85.25.203.255
IP: 85.25.206.0 -- 85.25.211.255
IP: 85.25.213.0 -- 85.25.220.255
IP: 85.25.222.0/23
IP: 85.25.226.0/23
IP: 85.25.232.0/23
IP: 85.25.235.0 -- 85.25.239.255
IP: 85.25.242.0 -- 85.25.244.255
IP: 85.25.246.0/24
IP: 85.25.248.0/21
IP: 85.93.88.0 -- 85.93.93.255
IP: 85.195.64.0/18
IP: 87.119.195.0/24
IP: 87.119.220.0/22
IP: 92.42.104.0/21
IP: 92.204.40.0/23
IP: 92.204.53.0 -- 92.204.54.255
IP: 92.204.96.0/20
IP: 92.204.160.0 -- 92.204.207.255
IP: 92.204.240.0/20
IP: 92.205.32.0/21
IP: 92.205.112.0/20
IP: 92.205.152.0/22
IP: 134.119.176.0 -- 134.119.223.255
IP: 146.0.224.0/19
IP: 151.106.0.0/19
IP: 151.106.48.0/20
IP: 185.19.216.0/22
IP: 185.136.156.0 -- 185.136.171.255
IP: 188.138.0.0 -- 188.138.11.255
IP: 188.138.16.0/22
IP: 188.138.24.0 -- 188.138.47.255
IP: 188.138.56.0/21
IP: 188.138.68.0 -- 188.138.79.255
IP: 188.138.81.0 -- 188.138.127.255
IP: 195.69.240.0/22
IP: 217.118.19.0/24
IP: 217.118.23.0 -- 217.118.24.255
IP: 217.118.26.0/23
IP: 217.172.170.0 -- 217.172.172.255
IP: 217.172.176.0 -- 217.172.190.255
IP: 2a01:7a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:f8:09:67:ad:48:29:9d:8c:2f:79:c1:87:15:f6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 10:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:fd:39:c4:42:41:b9:5d:72:81:41:81:da:
da:1a:88:a8:86:62:eb:b1:ed:77:0b:1e:c8:24:4d:
46:61:29:fc:45:70:84:0e:b4:a4:33:0d:ae:36:fc:
59:23:ba:a5:44:bc:f8:1c:dd:b0:48:bc:4b:65:91:
76:7c:ac:5e:6e:17:1c:cb:42:80:bb:14:a6:11:7a:
8f:00:63:3f:62:90:62:01:fc:20:91:68:b7:9b:61:
3e:05:10:01:f0:6b:8d:2e:73:e5:59:a5:77:43:b8:
07:ef:10:ae:82:14:a2:52:4d:3f:22:61:0b:8a:dd:
bf:33:19:68:b8:3b:53:a9:e8:52:7b:6c:7e:b2:ef:
0a:3b:3f:b1:35:a5:10:ac:fa:69:de:b5:c2:70:5a:
71:fd:e4:39:c5:ae:bd:e1:3a:0d:85:b0:8f:86:6b:
05:e0:e0:4c:f8:17:f5:7d:60:9c:98:ed:14:12:18:
40:b8:9d:f6:c1:0e:5c:14:d7:16:0b:3c:0a:7a:77:
f5:f1:4f:4f:24:19:41:57:e9:cd:46:97:48:69:ae:
d3:a4:cd:17:c6:74:90:9e:7b:db:4c:0c:81:e4:82:
96:51:0f:8c:15:9a:44:95:90:f5:58:93:36:76:ca:
e1:d8:26:1c:9b:fc:90:0a:ad:c7:6a:4e:3d:13:1c:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/20
92.204.160.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.176.0-134.119.223.255
146.0.224.0/19
151.106.0.0/19
151.106.48.0/20
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29066
Signature Algorithm: sha256WithRSAEncryption
9e:2f:99:1d:77:eb:e2:92:d6:c1:b9:51:cd:c3:2d:fa:8c:3a:
34:3e:d8:bb:80:f7:2f:03:31:6c:c2:d5:66:54:19:14:9f:66:
c5:bb:25:1e:55:54:7b:74:f0:8d:31:c7:79:cb:a9:04:a1:4d:
08:6c:31:ca:84:e4:92:69:ec:20:af:b0:1e:79:01:95:1c:c1:
86:3a:bc:b6:05:29:9d:6c:e3:95:ff:62:d5:f2:cb:d1:48:a2:
cb:fe:0b:14:77:50:72:97:08:cc:58:63:e0:9e:9c:27:0a:26:
1f:d4:4d:0b:ce:83:cf:d6:e5:8b:6d:2d:64:54:d5:18:9d:f4:
5a:3d:a4:70:41:3f:8b:19:44:14:5a:34:b6:99:c9:79:e3:f3:
e1:4b:be:c7:db:75:59:11:f4:9b:00:c1:7e:e4:a1:fc:3f:09:
47:15:22:f4:d6:be:a9:c1:e9:11:92:f8:ea:e9:ea:75:53:f3:
31:df:01:8f:78:57:9e:79:18:e2:b3:d2:96:62:95:02:94:4c:
2d:e8:e6:a7:5c:c4:81:22:09:50:d2:b8:aa:eb:96:2e:3f:e9:
bf:8c:14:0b:44:2e:86:de:38:ff:44:78:67:7c:1d:33:ee:48:
05:60:ce:ef:7d:9b:30:c2:80:47:c8:20:cd:dd:48:8c:7d:cb:
dc:35:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:00:14 2024 by rpki-client on console-fra.rpki-client.org