Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer (raw, json)
Hash identifier: /XnL6Uk7ESfBAEBUjJKSd1HU7XacGgVkA6Tsg7OY8Xk=
Subject key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD8B1274DF9CA66127806D8A9A28A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29066
IP: 37.61.208.0/20
IP: 62.75.130.0/24
IP: 62.75.136.0/24
IP: 62.75.167.0/24
IP: 62.75.179.0/24
IP: 62.75.181.0 -- 62.75.183.255
IP: 62.75.194.0 -- 62.75.198.255
IP: 62.75.201.0 -- 62.75.204.255
IP: 62.75.207.0/24
IP: 62.75.213.0 -- 62.75.224.255
IP: 62.75.228.0 -- 62.75.230.255
IP: 62.75.232.0 -- 62.75.238.255
IP: 62.75.252.0/22
IP: 62.138.0.0/22
IP: 62.138.5.0 -- 62.138.8.255
IP: 62.138.10.0 -- 62.138.12.255
IP: 62.138.14.0/24
IP: 62.138.16.0/24
IP: 62.138.18.0/23
IP: 62.138.24.0/24
IP: 62.138.26.0/24
IP: 78.138.96.0 -- 78.138.107.255
IP: 78.138.118.0/24
IP: 78.138.126.0/23
IP: 80.86.81.0 -- 80.86.87.255
IP: 80.86.90.0 -- 80.86.95.255
IP: 85.25.1.0/24
IP: 85.25.8.0/21
IP: 85.25.20.0/24
IP: 85.25.27.0/24
IP: 85.25.40.0 -- 85.25.64.255
IP: 85.25.66.0 -- 85.25.68.255
IP: 85.25.71.0 -- 85.25.79.255
IP: 85.25.92.0/22
IP: 85.25.98.0 -- 85.25.100.255
IP: 85.25.102.0 -- 85.25.110.255
IP: 85.25.116.0 -- 85.25.120.255
IP: 85.25.122.0 -- 85.25.157.255
IP: 85.25.159.0 -- 85.25.160.255
IP: 85.25.172.0 -- 85.25.174.255
IP: 85.25.176.0 -- 85.25.203.255
IP: 85.25.206.0 -- 85.25.211.255
IP: 85.25.213.0 -- 85.25.220.255
IP: 85.25.222.0/23
IP: 85.25.226.0/23
IP: 85.25.232.0/23
IP: 85.25.235.0 -- 85.25.239.255
IP: 85.25.242.0 -- 85.25.244.255
IP: 85.25.246.0/24
IP: 85.25.248.0/21
IP: 85.93.88.0 -- 85.93.93.255
IP: 85.195.64.0/18
IP: 87.119.195.0/24
IP: 87.119.220.0/22
IP: 92.42.104.0/21
IP: 92.204.40.0/23
IP: 92.204.53.0 -- 92.204.54.255
IP: 92.204.96.0/20
IP: 92.204.160.0 -- 92.204.207.255
IP: 92.204.240.0/20
IP: 92.205.32.0/21
IP: 92.205.112.0/20
IP: 92.205.152.0/22
IP: 134.119.176.0 -- 134.119.223.255
IP: 146.0.224.0/19
IP: 151.106.0.0/19
IP: 151.106.48.0/20
IP: 185.19.216.0/22
IP: 185.136.156.0 -- 185.136.171.255
IP: 188.138.0.0 -- 188.138.11.255
IP: 188.138.16.0/22
IP: 188.138.24.0 -- 188.138.47.255
IP: 188.138.56.0/21
IP: 188.138.68.0 -- 188.138.79.255
IP: 188.138.81.0 -- 188.138.127.255
IP: 195.69.240.0/22
IP: 217.118.19.0/24
IP: 217.118.23.0 -- 217.118.24.255
IP: 217.118.26.0/23
IP: 217.172.170.0 -- 217.172.172.255
IP: 217.172.176.0 -- 217.172.190.255
IP: 2a01:7a0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8b:12:74:df:9c:a6:61:27:80:6d:8a:9a:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:fd:39:c4:42:41:b9:5d:72:81:41:81:da:
da:1a:88:a8:86:62:eb:b1:ed:77:0b:1e:c8:24:4d:
46:61:29:fc:45:70:84:0e:b4:a4:33:0d:ae:36:fc:
59:23:ba:a5:44:bc:f8:1c:dd:b0:48:bc:4b:65:91:
76:7c:ac:5e:6e:17:1c:cb:42:80:bb:14:a6:11:7a:
8f:00:63:3f:62:90:62:01:fc:20:91:68:b7:9b:61:
3e:05:10:01:f0:6b:8d:2e:73:e5:59:a5:77:43:b8:
07:ef:10:ae:82:14:a2:52:4d:3f:22:61:0b:8a:dd:
bf:33:19:68:b8:3b:53:a9:e8:52:7b:6c:7e:b2:ef:
0a:3b:3f:b1:35:a5:10:ac:fa:69:de:b5:c2:70:5a:
71:fd:e4:39:c5:ae:bd:e1:3a:0d:85:b0:8f:86:6b:
05:e0:e0:4c:f8:17:f5:7d:60:9c:98:ed:14:12:18:
40:b8:9d:f6:c1:0e:5c:14:d7:16:0b:3c:0a:7a:77:
f5:f1:4f:4f:24:19:41:57:e9:cd:46:97:48:69:ae:
d3:a4:cd:17:c6:74:90:9e:7b:db:4c:0c:81:e4:82:
96:51:0f:8c:15:9a:44:95:90:f5:58:93:36:76:ca:
e1:d8:26:1c:9b:fc:90:0a:ad:c7:6a:4e:3d:13:1c:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.208.0/20
62.75.130.0/24
62.75.136.0/24
62.75.167.0/24
62.75.179.0/24
62.75.181.0-62.75.183.255
62.75.194.0-62.75.198.255
62.75.201.0-62.75.204.255
62.75.207.0/24
62.75.213.0-62.75.224.255
62.75.228.0-62.75.230.255
62.75.232.0-62.75.238.255
62.75.252.0/22
62.138.0.0/22
62.138.5.0-62.138.8.255
62.138.10.0-62.138.12.255
62.138.14.0/24
62.138.16.0/24
62.138.18.0/23
62.138.24.0/24
62.138.26.0/24
78.138.96.0-78.138.107.255
78.138.118.0/24
78.138.126.0/23
80.86.81.0-80.86.87.255
80.86.90.0-80.86.95.255
85.25.1.0/24
85.25.8.0/21
85.25.20.0/24
85.25.27.0/24
85.25.40.0-85.25.64.255
85.25.66.0-85.25.68.255
85.25.71.0-85.25.79.255
85.25.92.0/22
85.25.98.0-85.25.100.255
85.25.102.0-85.25.110.255
85.25.116.0-85.25.120.255
85.25.122.0-85.25.157.255
85.25.159.0-85.25.160.255
85.25.172.0-85.25.174.255
85.25.176.0-85.25.203.255
85.25.206.0-85.25.211.255
85.25.213.0-85.25.220.255
85.25.222.0/23
85.25.226.0/23
85.25.232.0/23
85.25.235.0-85.25.239.255
85.25.242.0-85.25.244.255
85.25.246.0/24
85.25.248.0/21
85.93.88.0-85.93.93.255
85.195.64.0/18
87.119.195.0/24
87.119.220.0/22
92.42.104.0/21
92.204.40.0/23
92.204.53.0-92.204.54.255
92.204.96.0/20
92.204.160.0-92.204.207.255
92.204.240.0/20
92.205.32.0/21
92.205.112.0/20
92.205.152.0/22
134.119.176.0-134.119.223.255
146.0.224.0/19
151.106.0.0/19
151.106.48.0/20
185.19.216.0/22
185.136.156.0-185.136.171.255
188.138.0.0-188.138.11.255
188.138.16.0/22
188.138.24.0-188.138.47.255
188.138.56.0/21
188.138.68.0-188.138.79.255
188.138.81.0-188.138.127.255
195.69.240.0/22
217.118.19.0/24
217.118.23.0-217.118.24.255
217.118.26.0/23
217.172.170.0-217.172.172.255
217.172.176.0-217.172.190.255
IPv6:
2a01:7a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29066
Signature Algorithm: sha256WithRSAEncryption
9a:49:8d:9f:18:f5:d2:3c:02:b5:ed:dc:06:6e:97:89:04:95:
c5:1a:c7:e6:c6:17:6a:ad:a5:77:77:75:d2:a2:56:e3:03:e3:
25:4b:9f:de:94:f5:4a:a2:8f:34:54:ee:9d:89:db:d9:b2:23:
f3:c7:dd:b3:bf:49:df:e8:23:29:4e:32:26:d3:3f:a6:4f:4d:
0e:e3:de:40:73:4d:02:cf:12:61:7c:a7:d0:25:e2:d3:7d:f3:
9a:84:70:d9:4e:7d:48:1d:47:7a:06:61:bb:50:01:4b:d0:bd:
8b:79:92:a4:5b:82:7f:23:79:79:43:a8:8b:8a:4c:79:3d:a9:
a6:00:9c:6c:0a:99:28:32:d4:03:39:62:d2:85:66:a1:01:62:
73:3a:ec:8a:d3:64:32:09:26:81:3a:28:c2:5d:4c:ae:a5:95:
0d:49:67:03:57:8d:d0:e7:a3:c2:49:9a:ca:61:37:50:8a:69:
5e:e6:6f:16:a9:17:cc:aa:c4:80:72:b3:c3:40:4f:bd:a7:d2:
67:a0:e4:24:6a:49:e3:fc:eb:42:36:2d:63:5d:ae:93:de:54:
1d:22:bb:98:ab:be:2d:d9:d2:e4:fe:b7:e1:6c:24:8f:df:b3:
b0:66:50:45:ce:a9:26:18:4e:06:e0:1c:6b:84:03:9e:04:18:
e0:33:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:09 2025 by rpki-client