Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
File: rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer (raw, json)
Hash identifier: QWiClNzt3uDLgXOdQ/Di+Q5qsZUgZ7v4ILHKXR47nNQ=
Subject key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FBECDDFCC70B7A6AF9A50D2C617F1D54D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 May 2024 10:45:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15941
AS: 20818
AS: 39251
AS: 47624
IP: 77.76.16.0/20
IP: 85.217.224.0/19
IP: 91.92.72.0 -- 91.92.103.255
IP: 91.206.138.0/23
IP: 91.207.190.0/23
IP: 91.223.66.0/24
IP: 91.245.192.0/24
IP: 185.111.212.0/22
IP: 185.163.140.0/22
IP: 185.225.84.0/22
IP: 185.229.252.0/22
IP: 193.37.238.0/24
IP: 194.169.223.0/24
IP: 194.169.230.0/24
IP: 194.169.237.0/24
IP: 194.169.242.0/24
IP: 195.238.84.0/23
IP: 212.70.140.0 -- 212.70.147.255
IP: 213.232.88.0/22
IP: 2a0b:f800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:cd:df:cc:70:b7:a6:af:9a:50:d2:c6:17:f1:d5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 10:45:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:80:23:85:ae:18:04:5f:03:14:9c:c0:00:
95:1e:2f:7d:67:51:8f:dc:e7:11:ff:41:7f:85:d2:
26:89:bb:22:30:d7:70:70:77:f5:10:78:00:3c:5c:
fd:a5:c4:3d:0d:49:25:ad:29:01:1c:b2:5c:10:75:
45:2d:9a:80:f8:2b:db:85:c7:12:e0:d9:ca:ff:17:
e3:ae:5b:05:cc:36:c5:7b:69:b1:4e:6b:7b:9b:19:
01:54:3b:28:4b:e6:0d:45:2b:83:fa:8c:d0:02:56:
45:b1:57:d6:54:93:e5:f8:32:40:a6:55:08:aa:ee:
60:dd:77:71:45:03:02:05:cd:cd:af:d2:e3:e5:99:
e0:56:b1:fa:5d:a0:91:96:77:1a:72:ec:42:e4:cb:
ac:b3:1f:38:da:b2:bd:03:97:43:82:2c:84:24:b4:
49:13:8c:b3:b1:4f:ce:56:3d:08:06:b1:d3:50:dd:
4f:e8:1d:30:88:35:6b:8f:ee:5f:39:f4:60:04:1e:
10:f9:dc:08:a6:76:41:06:40:82:ac:02:ea:8c:63:
65:48:13:91:6f:c7:53:b6:1d:04:99:f7:8d:39:12:
76:bc:e5:c8:75:04:9c:07:81:f5:37:c9:15:3a:cc:
e7:9c:34:7c:96:b0:a3:fa:b5:60:db:2f:2a:ca:d4:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.16.0/20
85.217.224.0/19
91.92.72.0-91.92.103.255
91.206.138.0/23
91.207.190.0/23
91.223.66.0/24
91.245.192.0/24
185.111.212.0/22
185.163.140.0/22
185.225.84.0/22
185.229.252.0/22
193.37.238.0/24
194.169.223.0/24
194.169.230.0/24
194.169.237.0/24
194.169.242.0/24
195.238.84.0/23
212.70.140.0-212.70.147.255
213.232.88.0/22
IPv6:
2a0b:f800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15941
20818
39251
47624
Signature Algorithm: sha256WithRSAEncryption
35:25:2e:3d:ae:5f:e0:fb:72:11:e2:21:e5:df:68:3d:49:06:
a9:24:2c:d4:6e:6e:8b:b0:47:ac:af:c9:ab:c1:0a:06:6d:76:
ff:5a:0f:09:a3:c3:0b:a8:90:f7:46:c7:43:31:e2:f8:9e:69:
34:03:da:e4:9d:7b:29:0d:a9:9b:ab:9d:b2:e1:f2:29:9a:db:
0d:77:99:71:4c:b8:b6:60:9f:9b:59:9a:11:5c:ba:98:ae:bb:
65:7c:1a:72:eb:7f:52:e3:60:6b:10:dd:82:f8:49:88:2f:2a:
c0:72:ce:dc:4b:a2:93:79:e6:a6:68:c7:2e:22:fd:c8:98:e0:
c9:06:4d:37:8a:14:67:51:bc:39:f6:fe:ee:d1:26:0c:33:43:
22:f1:50:79:56:d5:29:9c:6b:fe:29:a7:dc:9c:78:e2:8b:4d:
63:87:bf:5d:66:74:0e:45:ca:fe:eb:22:42:ee:50:6a:8d:17:
a0:30:09:71:40:8f:ac:ed:5f:7a:55:93:62:a3:9e:7c:a6:3a:
20:06:cf:08:1b:a2:3c:ea:6d:f2:83:47:7b:2c:88:7c:51:88:
00:1c:6f:06:26:3a:b1:47:19:67:11:15:34:e7:71:02:0d:be:
db:82:e0:04:6c:6e:ad:f2:49:14:ee:61:1b:c0:36:6c:3f:a0:
e5:16:04:7a
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgISAY++zd/McLemr5pQ0sYX8dVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTI4MTA0NTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzFmNzIxYjdiN2U2ZDA0OWZiZmU1MjBlMWNhODljMWNhMjU2ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2+AI4WuGARfAxScwACVHi99Z1GP
3OcR/0F/hdImibsiMNdwcHf1EHgAPFz9pcQ9DUklrSkBHLJcEHVFLZqA+CvbhccS
4NnK/xfjrlsFzDbFe2mxTmt7mxkBVDsoS+YNRSuD+ozQAlZFsVfWVJPl+DJAplUI
qu5g3XdxRQMCBc3Nr9Lj5ZngVrH6XaCRlncacuxC5Mussx842rK9A5dDgiyEJLRJ
E4yzsU/OVj0IBrHTUN1P6B0wiDVrj+5fOfRgBB4Q+dwIpnZBBkCCrALqjGNlSBOR
b8dTth0EmfeNORJ2vOXIdQScB4H1N8kVOsznnDR8lrCj+rVg2y8qytSN5QIDAQAB
o4IDPTCCAzkwHQYDVR0OBBYEFKwfcht7fm0En7/lIOHKicHKJWgTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzU2ZDI2
Ny0xYzQzLTQ3YzgtYWZiMi02NGQyOWM4NmJmM2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNTZkMjY3
LTFjNDMtNDdjOC1hZmIyLTY0ZDI5Yzg2YmYzZS8xL3JCOXlHM3QtYlFTZnYtVWc0
Y3FKd2NvbGFCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGuBggrBgEF
BQcBBwEB/wSBnjCBmzCBiQQCAAEwgYIDBARNTBADBAVV2eAwDAMEA1tcSAMEA1tc
YAMEAVvOigMEAVvPvgMEAFvfQgMEAFv1wAMEArlv1AMEArmjjAMEArnhVAMEArnl
/AMEAMEl7gMEAMKp3wMEAMKp5gMEAMKp7QMEAMKp8gMEAcPuVDAMAwQC1EaMAwQC
1EaQAwQC1ehYMA0EAgACMAcDBQMqC/gAMCcGCCsGAQUFBwEIAQH/BBgwFqAUMBIC
Aj5FAgJRUgIDAJlTAgMAuggwDQYJKoZIhvcNAQELBQADggEBADUlLj2uX+D7chHi
IeXfaD1JBqkkLNRubouwR6yvyavBCgZtdv9aDwmjwwuokPdGx0Mx4vieaTQD2uSd
eykNqZurnbLh8ima2w13mXFMuLZgn5tZmhFcupiuu2V8GnLrf1LjYGsQ3YL4SYgv
KsByztxLopN55qZoxy4i/ciY4MkGTTeKFGdRvDn2/u7RJgwzQyLxUHlW1Smca/4p
p9yceOKLTWOHv11mdA5Fyv7rIkLuUGqNF6AwCXFAj6ztX3pVk2KjnnymOiAGzwgb
ojzqbfKDR3ssiHxRiAAcbwYmOrFHGWcRFTTncQINvtuC4ARsbq3ySRTuYRvANmw/
oOUWBHo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:46:58 2024 by rpki-client on console-fra.rpki-client.org