Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
File: r6R0pepgHICSke55uuORiWTQhx4.cer (raw, json)
Hash identifier: 4YxvTmHxVoBjZeczqb3P/sroa83dlyDI+tVbviYOgvQ=
Subject key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274827D5E831313A29D30748EB9F35A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39803
AS: 48736
IP: 91.209.241.0/24
IP: 195.189.138.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:d5:e8:31:31:3a:29:d3:07:48:eb:9f:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa474a5ea601c809291ee79bae3918964d0871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:b9:86:4f:69:61:c5:8e:28:1c:cc:db:46:
51:c2:f3:94:4e:7b:06:b2:8a:74:8f:40:46:dc:07:
ff:4e:b1:20:30:fe:7d:0b:61:a3:38:b8:42:7f:9c:
24:ef:b4:16:9c:94:1f:79:94:ac:e8:fd:39:c6:8c:
e8:9e:67:01:5b:36:7f:01:bc:7d:72:de:11:ea:23:
0e:9f:ff:51:d8:65:e4:26:f9:8d:6e:dd:5b:4f:02:
83:ae:87:f7:54:7d:0b:24:6e:f0:31:f0:69:ab:71:
ea:f1:ce:01:c6:fe:be:97:64:f7:27:47:3c:54:19:
b1:9d:14:e0:a2:94:47:2f:9b:99:0b:a9:06:54:fb:
49:ec:e5:2e:b7:7b:61:bd:0a:55:46:f2:e2:00:db:
98:27:ba:e6:99:e4:57:b1:fc:bf:ff:c0:b9:6b:db:
cc:07:00:30:15:4c:85:70:e8:ad:63:c6:75:60:b5:
9b:fe:fb:f7:7c:92:91:f0:83:17:4d:36:5a:48:17:
bd:0d:b8:62:2a:e6:8e:32:78:54:68:f6:50:db:52:
87:6a:4f:c3:aa:41:2d:2d:67:0d:12:77:f7:c5:46:
c7:b0:b7:be:ea:94:b1:9b:68:63:4c:e9:3f:84:7b:
fc:8d:73:75:20:48:b0:67:a4:ae:76:ab:b7:2f:8f:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.241.0/24
195.189.138.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39803
48736
Signature Algorithm: sha256WithRSAEncryption
ab:49:42:df:c7:60:c0:c3:70:29:8f:01:ef:4e:31:43:33:ea:
2e:36:51:94:a4:6c:3e:17:a6:47:f6:46:3f:d0:af:0c:1f:c2:
d6:64:03:67:02:d1:32:8c:e8:3a:33:2d:3c:58:1f:b2:bf:c3:
28:77:d2:07:4b:4f:4b:cf:16:fd:1a:8a:1f:c2:26:5a:d6:96:
04:7f:d8:cb:79:b6:70:fc:28:34:c2:56:e1:71:a3:47:69:37:
8a:e0:65:39:cd:ee:f9:59:54:27:9c:5d:28:ff:26:e1:2e:f4:
06:df:d5:1a:d4:9a:bd:8a:4d:df:a5:3d:50:46:2d:e2:f9:1e:
d2:2b:93:42:84:e1:d9:ba:e3:74:72:33:ee:b1:bb:bd:dc:e9:
a7:d6:17:8d:0e:4f:52:50:8e:83:f4:76:08:ee:55:86:10:29:
18:19:bc:a4:27:c3:a0:90:4a:29:fb:36:a6:c3:8b:36:79:be:
33:38:f8:52:ad:c7:c4:f2:7b:bf:84:cf:cd:8b:76:36:b1:b0:
d2:06:6a:df:8f:70:32:af:19:79:ae:14:3e:22:e2:da:6e:d2:
9d:ea:d0:48:47:2d:2b:db:dd:b7:b6:3f:90:19:de:52:a0:ca:
53:03:51:2e:e9:84:63:51:a4:15:af:55:fa:ca:de:e7:23:e7:
7b:7b:b6:9c
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZQnSCfV6DExOinTB0jrnzWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmE0NzRhNWVhNjAxYzgwOTI5MWVlNzliYWUzOTE4OTY0ZDA4NzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklm5hk9pYcWOKBzM20ZRwvOUTnsG
sop0j0BG3Af/TrEgMP59C2GjOLhCf5wk77QWnJQfeZSs6P05xozonmcBWzZ/Abx9
ct4R6iMOn/9R2GXkJvmNbt1bTwKDrof3VH0LJG7wMfBpq3Hq8c4Bxv6+l2T3J0c8
VBmxnRTgopRHL5uZC6kGVPtJ7OUut3thvQpVRvLiANuYJ7rmmeRXsfy//8C5a9vM
BwAwFUyFcOitY8Z1YLWb/vv3fJKR8IMXTTZaSBe9DbhiKuaOMnhUaPZQ21KHak/D
qkEtLWcNEnf3xUbHsLe+6pSxm2hjTOk/hHv8jXN1IEiwZ6Sudqu3L48XswIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFK+kdKXqYByAkpHuebrjkYlk0IceMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2NjNGQ3
Ni0zYWU5LTQ5MWUtOWJkMi0xOTNjYzYxYmNlNjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvY2M0ZDc2
LTNhZTktNDkxZS05YmQyLTE5M2NjNjFiY2U2MS8xL3I2UjBwZXBnSElDU2tlNTV1
dU9SaVdUUWh4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW9HxAwQBw72KMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwCbewIDAL5gMA0GCSqGSIb3DQEBCwUAA4IBAQCrSULfx2DAw3ApjwHv
TjFDM+ouNlGUpGw+F6ZH9kY/0K8MH8LWZANnAtEyjOg6My08WB+yv8Mod9IHS09L
zxb9GoofwiZa1pYEf9jLebZw/Cg0wlbhcaNHaTeK4GU5ze75WVQnnF0o/ybhLvQG
39Ua1Jq9ik3fpT1QRi3i+R7SK5NChOHZuuN0cjPusbu93Omn1heNDk9SUI6D9HYI
7lWGECkYGbykJ8OgkEop+zamw4s2eb4zOPhSrcfE8nu/hM/Ni3Y2sbDSBmrfj3Ay
rxl5rhQ+IuLabtKd6tBIRy0r2923tj+QGd5SoMpTA1Eu6YRjUaQVr1X6yt7nI+d7
e7ac
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:28 2025 by rpki-client