Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.cer (raw, json)
Hash identifier: CLQyP8JdWyYK1M7YB0KSFtRRjHzRBip+bzixzk/3Mng=
Subject key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266A208F61B62D78A8D2F3F90975FF87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24763
AS: 29104
IP: 37.35.0.0/21
IP: 185.116.132.0/22
IP: 192.54.144.0/24
IP: 192.93.158.0 -- 192.93.161.255
IP: 192.93.166.0/23
IP: 193.56.124.0/23
IP: 193.56.130.0/23
IP: 2a00:4f40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:20:8f:61:b6:2d:78:a8:d2:f3:f9:09:75:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:1c:0d:c7:79:30:87:44:52:03:8d:74:e7:
e3:e5:a0:bf:22:36:26:a5:55:45:8a:a1:88:5f:82:
89:b6:38:0f:ac:4c:22:d2:5a:be:cd:80:16:c8:75:
d3:b9:f0:8e:d7:a8:72:40:fc:32:1d:da:f6:a6:c6:
4a:32:6e:9c:43:20:32:6b:2d:fc:bc:2d:f5:a2:c7:
76:88:9e:d4:3d:25:b0:b0:8b:b7:16:87:44:0d:e6:
14:16:ac:8f:60:fd:d8:d6:4b:09:17:a9:3a:5f:a8:
44:71:91:96:cc:86:00:dc:5b:c5:b2:cc:ea:a5:85:
7a:fe:af:9b:88:ce:d3:90:e6:30:f6:c8:38:69:65:
97:a0:c4:ea:ac:de:38:ee:77:e3:fe:cc:6e:8b:f0:
1d:dd:39:e2:d3:2f:7f:b9:58:60:d5:3f:bb:64:78:
b8:1f:de:c0:9e:cc:75:30:49:34:53:56:6d:72:cd:
9b:1d:67:63:42:51:b2:7e:b8:3a:38:6b:55:26:7c:
02:7b:15:8c:07:f1:c7:7c:32:ca:6f:61:3c:99:45:
b4:8c:dd:15:fe:1d:e2:6e:d6:f2:a9:40:e7:10:44:
5e:8b:34:9a:58:a3:0c:5d:cf:4c:e2:0f:95:ee:59:
4d:25:8b:d3:95:f9:96:1c:13:bd:63:45:8a:68:ff:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.0.0/21
185.116.132.0/22
192.54.144.0/24
192.93.158.0-192.93.161.255
192.93.166.0/23
193.56.124.0/23
193.56.130.0/23
IPv6:
2a00:4f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24763
29104
Signature Algorithm: sha256WithRSAEncryption
21:8d:fe:fe:08:31:03:d4:05:72:3d:a9:fc:4e:18:3b:0a:f0:
01:b3:92:a5:e6:a0:06:f6:d6:6f:6e:52:2d:47:09:ad:e9:4a:
02:00:d6:0f:44:1e:be:20:ee:67:bb:d1:07:86:1d:43:88:f7:
53:44:3b:1f:4c:3e:65:f1:a1:e2:38:b5:03:1b:14:9a:93:aa:
a7:0c:db:2c:85:04:b8:48:1f:fc:ae:c0:d4:62:85:40:b2:a8:
d2:5c:27:a1:6e:3b:87:fd:ff:84:5d:a0:5e:04:22:34:10:3e:
ff:6c:b3:d1:8d:ca:4c:c1:b8:3b:0d:2e:80:76:fa:0d:48:85:
af:7e:0e:57:bc:90:8a:78:dd:98:12:3c:08:e7:a4:e4:0e:26:
8e:bf:1b:02:80:9a:19:5d:d7:6a:82:17:1b:0c:dc:57:29:4e:
4a:b3:a7:f0:c3:c1:dd:cd:57:09:fd:f2:7c:4c:3c:7d:3a:80:
c5:dc:51:ed:37:78:00:d7:e0:00:ed:18:78:1b:19:91:35:75:
4b:e2:57:56:29:7b:6b:ee:78:31:7f:7f:70:76:f7:35:f1:73:
3a:51:e3:68:6d:71:24:e1:cf:d5:e3:b0:dc:7c:71:89:03:b7:
52:52:5e:14:13:6c:eb:89:92:a3:28:7d:d4:1e:34:0b:25:22:
b3:22:31:99
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAZQmaiCPYbYteKjS8/kJdf+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzllMmVmY2RjMjEzYWM1YjFiMDg3OWQ5MjJhMTc4Yjg1MGY0NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql4cDcd5MIdEUgONdOfj5aC/IjYm
pVVFiqGIX4KJtjgPrEwi0lq+zYAWyHXTufCO16hyQPwyHdr2psZKMm6cQyAyay38
vC31osd2iJ7UPSWwsIu3FodEDeYUFqyPYP3Y1ksJF6k6X6hEcZGWzIYA3FvFsszq
pYV6/q+biM7TkOYw9sg4aWWXoMTqrN447nfj/sxui/Ad3Tni0y9/uVhg1T+7ZHi4
H97Ansx1MEk0U1Ztcs2bHWdjQlGyfrg6OGtVJnwCexWMB/HHfDLKb2E8mUW0jN0V
/h3ibtbyqUDnEEReizSaWKMMXc9M4g+V7llNJYvTlfmWHBO9Y0WKaP+R6wIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFKyeLvzcITrFsbCHnZIqF4uFD0UfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2QxZmFh
OS1iNWEzLTRkNDktODY4YS03YzdiZjI3MTc1YzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvZDFmYWE5
LWI1YTMtNGQ0OS04NjhhLTdjN2JmMjcxNzVjNS8xL3JKNHVfTndoT3NXeHNJZWRr
aW9YaTRVUFJSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF
BwEHAQH/BEswSTA4BAIAATAyAwQDJSMAAwQCuXSEAwQAwDaQMAwDBAHAXZ4DBAHA
XaADBAHAXaYDBAHBOHwDBAHBOIIwDQQCAAIwBwMFACoAT0AwHQYIKwYBBQUHAQgB
Af8EDjAMoAowCAICYLsCAnGwMA0GCSqGSIb3DQEBCwUAA4IBAQAhjf7+CDED1AVy
Pan8Thg7CvABs5Kl5qAG9tZvblItRwmt6UoCANYPRB6+IO5nu9EHhh1DiPdTRDsf
TD5l8aHiOLUDGxSak6qnDNsshQS4SB/8rsDUYoVAsqjSXCehbjuH/f+EXaBeBCI0
ED7/bLPRjcpMwbg7DS6AdvoNSIWvfg5XvJCKeN2YEjwI56TkDiaOvxsCgJoZXddq
ghcbDNxXKU5Ks6fww8HdzVcJ/fJ8TDx9OoDF3FHtN3gA1+AA7Rh4GxmRNXVL4ldW
KXtr7ngxf39wdvc18XM6UeNobXEk4c/V47DcfHGJA7dSUl4UE2zriZKjKH3UHjQL
JSKzIjGZ
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:26 2025 by rpki-client