Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.cer (raw, json)
Hash identifier: AF49WQjhlK/5yvLwwzit4MwPYGrB1y2YvrXThgXZ+PM=
Subject key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA75B488610B4321B9B55C56C36ECE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204016
IP: 217.18.88.0/24
IP: 2a13:3f00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:b4:88:61:0b:43:21:b9:b5:5c:56:c3:6e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:78:e5:50:bd:d4:b4:41:60:37:24:0e:36:
f8:11:2f:2e:48:fc:e5:65:9d:bf:44:da:2b:3f:16:
e5:97:98:60:12:43:71:3b:34:d0:71:6f:44:07:29:
bb:48:58:1c:e3:ec:31:61:07:e1:1c:75:e2:e2:4e:
c8:60:f0:86:27:c3:00:64:3d:70:c3:d3:c2:29:d7:
56:ad:d6:d5:6e:38:49:96:c5:1f:8e:3f:b6:95:23:
c6:b4:1e:da:a6:aa:0b:08:02:5c:73:07:a5:6e:bd:
de:32:ba:b7:77:35:86:ea:53:78:e0:12:91:4a:9f:
5f:2e:13:3c:3a:cc:75:c0:f8:c2:94:a2:8a:03:21:
05:9c:f5:64:26:f5:2d:4c:0e:9b:ed:40:de:a0:f7:
b5:e0:14:3b:16:11:39:ed:7b:f7:de:46:8a:16:12:
db:80:09:4c:35:86:43:f6:ad:5b:b6:a6:27:ed:69:
be:95:c1:4d:bc:68:10:bc:ed:03:1b:df:23:eb:f2:
65:9e:64:7c:49:6e:8e:d7:14:8f:31:59:61:f7:24:
49:66:0b:c6:e2:bc:f6:c8:03:e2:08:bc:ba:f0:72:
de:4f:0f:f8:78:dc:52:c1:e4:76:08:19:b7:a6:b9:
57:a7:8e:e2:c2:fe:4a:b7:7d:be:76:8e:ff:a1:6d:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.88.0/24
IPv6:
2a13:3f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204016
Signature Algorithm: sha256WithRSAEncryption
99:b8:71:e1:ea:63:82:2e:46:19:ad:3a:a6:6a:37:72:8a:33:
79:ef:5a:84:d1:b7:be:9c:79:a9:99:78:00:35:ff:ab:c5:52:
ee:c9:d6:7d:0c:a0:81:f4:eb:71:5d:d6:18:00:aa:02:ef:2b:
44:30:77:24:44:af:c6:f2:c2:fc:e9:fe:44:44:a9:ac:24:3c:
ad:88:6f:fc:86:fa:99:b4:23:b1:3f:cb:c1:cd:aa:6b:53:6d:
26:22:46:b7:1d:dd:67:a3:bd:8e:af:57:ba:13:5f:84:9f:f9:
04:65:6b:74:9a:48:10:d1:d5:fb:33:83:55:58:25:14:85:84:
c4:f9:95:ba:82:75:2c:4a:fc:39:b9:db:fc:cf:64:19:7d:03:
51:42:28:58:41:e7:0a:66:26:ef:88:4b:66:3c:5b:67:7b:5b:
93:ea:e2:36:cf:b1:84:3b:65:ed:dd:a1:bc:ea:61:95:bf:37:
e8:ee:94:1c:41:0a:72:c5:73:2e:9e:c6:b6:68:8a:cf:ef:67:
cd:c2:14:2d:6f:c9:99:a7:86:fd:47:e4:a5:57:8e:fd:71:eb:
13:a6:5e:d4:15:d4:2b:62:56:88:43:d0:3c:5d:c2:81:bf:27:
dc:67:51:50:5a:d7:ae:e8:8f:52:77:0d:aa:86:22:ca:e9:81:
10:cf:59:dd
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQf+nW0iGELQyG5tVxWw27OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTM1NzQ3ZGI0MTcwZWQ0NTc1NmNjOWEzYTRlNzY4OWEwZWI2MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ545VC91LRBYDckDjb4ES8uSPzl
ZZ2/RNorPxbll5hgEkNxOzTQcW9EBym7SFgc4+wxYQfhHHXi4k7IYPCGJ8MAZD1w
w9PCKddWrdbVbjhJlsUfjj+2lSPGtB7apqoLCAJccwelbr3eMrq3dzWG6lN44BKR
Sp9fLhM8Osx1wPjClKKKAyEFnPVkJvUtTA6b7UDeoPe14BQ7FhE57Xv33kaKFhLb
gAlMNYZD9q1btqYn7Wm+lcFNvGgQvO0DG98j6/JlnmR8SW6O1xSPMVlh9yRJZgvG
4rz2yAPiCLy68HLeTw/4eNxSweR2CBm3prlXp47iwv5Kt32+do7/oW3BEwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKo1dH20Fw7UV1bMmjpOdomg62LHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzRhNWMz
NC00ZGYzLTQ5YzMtODc3Yi0xYThjZDA0NmRhOTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvNGE1YzM0
LTRkZjMtNDljMy04NzdiLTFhOGNkMDQ2ZGE5Mi8xL3FqVjBmYlFYRHRSWFZzeWFP
azUyaWFEcllzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA2RJYMA0EAgACMAcDBQAqEz8AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMc8DANBgkqhkiG9w0BAQsFAAOCAQEAmbhx4epjgi5G
Ga06pmo3coozee9ahNG3vpx5qZl4ADX/q8VS7snWfQyggfTrcV3WGACqAu8rRDB3
JESvxvLC/On+RESprCQ8rYhv/Ib6mbQjsT/Lwc2qa1NtJiJGtx3dZ6O9jq9XuhNf
hJ/5BGVrdJpIENHV+zODVVglFIWExPmVuoJ1LEr8Obnb/M9kGX0DUUIoWEHnCmYm
74hLZjxbZ3tbk+riNs+xhDtl7d2hvOphlb836O6UHEEKcsVzLp7GtmiKz+9nzcIU
LW/JmaeG/UfkpVeO/XHrE6Ze1BXUK2JWiEPQPF3Cgb8n3GdRUFrXruiPUncNqoYi
yumBEM9Z3Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:50:58 2025 by rpki-client