Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
File: r0E_0q2eJchLwLWeYIpkNmPmu2g.cer (raw, json)
Hash identifier: DyGhqyEws+qtf/JBrBgWFrSmMYyNTlRXGbAlkLDQU0Q=
Subject key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948415431A40C3DFF261344B5C3C752EA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 14:19:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216275
IP: 91.226.144.0/23
IP: 91.229.203.0/24
IP: 2a13:e740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:15:43:1a:40:c3:df:f2:61:34:4b:5c:3c:75:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 14:19:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:06:72:47:c9:90:1f:ca:59:7a:0a:d3:d2:
e3:1d:a0:cf:13:7e:79:25:0e:a7:1a:b0:cc:4a:88:
4e:a9:a5:62:26:87:6e:20:a7:fe:d9:8c:31:13:67:
24:d6:90:cf:39:19:51:b1:6a:e6:62:97:dd:33:00:
c4:e5:d7:9b:5b:72:36:1b:b2:f7:ad:7e:b4:87:3f:
0a:da:64:17:a6:be:8e:ad:52:7d:f2:3c:4e:86:b7:
7e:63:d1:5c:01:26:1c:8e:27:b7:45:f3:04:55:93:
41:3b:fb:71:30:7a:d3:2a:78:0e:b1:2b:77:40:56:
df:18:b7:6e:09:2f:0a:16:48:89:8e:0d:27:80:3d:
c8:2e:48:87:4e:0f:4a:7e:19:cb:54:a2:39:51:7b:
c5:5d:96:4c:46:54:77:89:d0:aa:3b:d4:7f:93:5e:
5d:22:d3:e5:d8:61:bf:5b:63:08:47:b0:13:c8:dd:
5a:a8:50:78:a0:c2:a3:c7:26:9e:2e:57:c7:e5:c3:
59:f9:d0:e3:6a:e0:cb:49:13:93:6f:3b:3e:68:1d:
f9:5b:0b:e0:87:d3:cd:bb:f2:88:13:75:e7:3f:2e:
83:6b:e1:cc:22:1d:a8:3a:5a:08:1c:73:21:ef:69:
24:1b:e6:d5:ab:d6:fa:91:9d:a7:7a:77:db:d2:4f:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.144.0/23
91.229.203.0/24
IPv6:
2a13:e740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216275
Signature Algorithm: sha256WithRSAEncryption
1d:a6:36:fb:6a:f4:6a:47:ea:72:ed:85:81:82:b9:61:33:06:
44:b1:7c:fd:77:f5:eb:86:75:26:db:2e:03:ef:65:14:85:83:
cb:c1:b1:a6:f7:10:49:32:ce:90:6b:23:2d:be:9f:30:50:ce:
81:ed:8c:f9:96:5c:bf:65:63:e8:85:98:7f:ba:69:84:e5:de:
fc:68:5e:da:d4:6e:7a:5b:7b:16:d1:f1:66:44:52:ba:63:e6:
18:60:8c:10:d2:6f:bf:87:13:c0:8e:63:9c:0b:e7:b3:94:59:
2b:5a:bf:2f:92:78:2f:7e:ac:02:22:9a:28:a8:84:ec:52:61:
45:45:e1:90:d2:bb:7b:86:17:2c:77:88:72:1f:3c:e3:7e:37:
e4:bf:1d:de:f8:e5:a3:5c:26:36:e5:34:51:f0:30:c3:3f:b7:
48:12:0f:fd:6c:d8:68:7d:06:7d:df:9f:19:5b:2b:ff:4d:c2:
88:43:42:18:e1:42:12:af:00:fe:89:4b:30:d8:8c:d3:0e:0b:
52:6a:3d:65:a7:41:c4:70:f4:b5:23:4c:6b:8f:76:81:bf:29:
1e:44:29:7f:e9:e0:8c:03:2e:20:cc:a1:a2:b3:b0:7b:4a:93:
00:a0:c6:97:0b:4c:86:fc:61:c9:ff:92:48:a8:b7:bf:be:77:
56:68:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:41 2025 by rpki-client