Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.cer (raw, json)
Hash identifier: P4M+afnQ4Z6PFGRcQW+xXdL/xk3m5gUCXM8lfebSmQo=
Subject key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B3D2904347C67BAE0C393E95A00617
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51167
IP: 5.189.128.0/18
IP: 62.171.128.0/18
IP: 75.119.128.0/19
IP: 79.143.176.0/20
IP: 80.241.208.0/20
IP: 91.194.90.0/23
IP: 91.205.172.0/22
IP: 95.111.224.0/19
IP: 109.205.176.0/21
IP: 144.91.64.0/18
IP: 161.97.64.0 -- 161.97.189.255
IP: 164.68.96.0/19
IP: 167.86.66.0 -- 167.86.127.255
IP: 173.212.192.0/18
IP: 173.249.0.0/18
IP: 178.18.240.0/20
IP: 178.238.224.0/20
IP: 185.2.100.0/22
IP: 193.34.144.0/23
IP: 193.37.152.0/24
IP: 193.164.131.0 -- 193.164.133.255
IP: 193.200.241.0/24
IP: 194.163.128.0/18
IP: 207.180.192.0/18
IP: 213.136.64.0/19
IP: 2a02:c200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:d2:90:43:47:c6:7b:ae:0c:39:3e:95:a0:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:e1:c0:0f:b0:75:89:b2:9a:a5:3b:0b:46:
49:0d:2a:a8:a5:5a:7a:51:83:5a:d7:df:13:b5:c9:
1d:70:fd:15:96:f2:5e:be:c1:27:05:81:f4:d1:c6:
00:19:d8:73:0d:aa:20:66:fd:d2:45:4e:f4:26:dd:
4b:f7:35:8b:eb:b6:17:e3:13:16:0a:a0:82:eb:0d:
5b:32:ae:c7:63:68:9b:1a:dc:49:d8:3e:da:0f:95:
22:43:e1:b3:b6:e2:1d:40:65:d1:3b:6c:85:93:3c:
68:1c:5b:63:78:a0:be:bc:1f:2a:56:32:a9:32:f9:
49:bc:f2:a6:10:6c:9c:86:a3:44:d4:11:1b:98:a8:
26:be:2b:bf:df:91:20:e4:f7:e1:dc:c7:6b:6e:42:
f6:1e:90:c5:7a:db:70:a2:a1:d5:0b:67:fe:16:f3:
f4:7d:75:2d:19:9d:cf:1d:f8:c7:fa:47:82:d8:54:
f5:c2:bc:e3:ea:70:27:d2:06:50:94:04:65:49:9c:
1d:58:1e:83:36:bd:6e:42:8c:3f:13:4a:43:07:c2:
ee:81:dd:ed:81:7b:85:a1:33:7e:86:30:ef:54:4a:
06:70:a8:64:f7:96:8c:aa:45:03:d0:41:d9:dd:46:
f0:28:d8:ec:8f:79:aa:91:3f:19:e1:63:74:8b:03:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.189.128.0/18
62.171.128.0/18
75.119.128.0/19
79.143.176.0/20
80.241.208.0/20
91.194.90.0/23
91.205.172.0/22
95.111.224.0/19
109.205.176.0/21
144.91.64.0/18
161.97.64.0-161.97.189.255
164.68.96.0/19
167.86.66.0-167.86.127.255
173.212.192.0/18
173.249.0.0/18
178.18.240.0/20
178.238.224.0/20
185.2.100.0/22
193.34.144.0/23
193.37.152.0/24
193.164.131.0-193.164.133.255
193.200.241.0/24
194.163.128.0/18
207.180.192.0/18
213.136.64.0/19
IPv6:
2a02:c200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51167
Signature Algorithm: sha256WithRSAEncryption
58:23:0a:33:50:1f:82:e6:d4:ba:c7:23:75:38:90:fc:9e:df:
fe:7a:eb:30:52:8d:1d:01:92:87:5c:3e:f6:38:4c:fd:5a:4d:
77:5b:7d:e7:b4:84:d4:af:33:00:8e:00:5e:b2:fd:57:f4:e1:
a6:ea:73:2d:b3:0f:10:c8:bc:fd:de:20:2c:23:ae:5b:c5:a7:
e7:ec:ea:6b:c8:ff:57:20:ff:08:d0:5d:a0:72:be:ca:e2:53:
9c:f5:15:b0:b6:bc:54:1e:b6:9e:ca:6c:5b:3f:2f:7f:19:a1:
83:a9:b7:8e:a8:7a:bd:3b:fc:49:a3:7c:f0:c1:a7:e4:5d:ff:
c3:ef:df:6a:3e:42:1f:ae:23:cf:0e:11:87:1d:ba:be:5c:8f:
86:2b:12:37:83:ae:fc:ef:b8:84:86:e9:11:98:0d:b5:bc:a7:
4d:44:e6:e8:fc:58:69:2b:a1:7e:39:f1:c9:e8:fd:65:dd:c1:
d9:c0:95:17:a3:cc:6c:5d:2c:9c:bc:95:83:7a:8b:5a:ca:ec:
4b:15:da:77:88:06:2d:04:36:ab:42:4b:f3:af:fc:56:36:e1:
e5:91:fa:c3:8a:1a:9b:b8:54:64:d3:18:4f:62:45:7e:8f:fd:
81:fd:06:e5:e8:8e:e0:44:43:7b:a4:ff:39:59:05:b6:db:be:
50:e0:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 00:11:37 2025 by rpki-client