Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer (raw, json)
Hash identifier: 7GOcnxG6ZaqhUJdbuk9YDGXZ7uNXdw8z5RKOAgM7IRA=
Subject key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E8B0CD2732C97CAA294229033B842
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12902
AS: 60341
AS: 199816
IP: 79.98.168.0/21
IP: 185.32.232.0/22
IP: 185.44.244.0/22
IP: 185.45.116.0/22
IP: 185.47.20.0/22
IP: 185.50.92.0/22
IP: 185.82.188.0/22
IP: 185.187.20.0/22
IP: 185.225.220.0/22
IP: 185.240.112.0/22
IP: 194.180.197.0/24
IP: 194.180.216.0/24
IP: 194.180.219.0/24
IP: 194.180.227.0/24
IP: 217.77.128.0/19
IP: 2001:9c0::/29
IP: 2a00:c660::/29
IP: 2a01:77e0::/29
IP: 2a05:92c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:8b:0c:d2:73:2c:97:ca:a2:94:22:90:33:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca1f4713024804c445403af63fa644b2a935d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:f2:81:4b:36:df:e9:05:94:f4:db:03:6a:
3e:8c:39:8a:f8:77:d1:23:bd:31:dc:31:eb:a2:24:
d0:c0:70:bc:c7:3d:3d:dd:a1:3d:53:30:26:70:ae:
9a:68:f9:36:78:b5:d6:a9:23:6c:56:bf:10:d9:12:
b6:95:d1:1b:1f:b8:aa:3e:c6:6f:b9:04:55:41:0c:
5a:b9:27:ea:62:ef:fe:f2:fe:17:0a:19:1d:1f:6b:
7f:c1:92:fc:0b:1d:74:a6:70:1c:bb:d0:78:bd:42:
0b:a4:89:2d:4e:4e:90:ca:20:c4:dc:56:a3:2d:21:
16:52:10:2a:a7:ac:38:09:58:bf:83:5b:9b:f8:1d:
2f:fa:36:3f:66:64:34:13:85:9e:40:40:28:05:62:
fb:5d:bc:e2:bc:48:48:08:dd:d7:44:6b:d2:6d:f6:
0a:fc:07:7a:94:ef:65:c8:a3:08:50:ec:f2:b2:01:
ae:4a:cc:e7:2f:fa:b0:f7:67:27:9a:86:30:04:96:
47:e8:72:1a:4e:c4:ea:54:16:a5:67:b0:c3:ca:56:
c7:40:b3:db:4b:67:c9:02:e1:ed:60:c4:dc:39:7d:
49:8f:39:8d:49:28:24:6f:2a:ee:ec:1d:00:c7:d7:
9b:66:5d:a3:7f:8e:9d:3c:5e:eb:5b:93:8e:e6:52:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.168.0/21
185.32.232.0/22
185.44.244.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
185.82.188.0/22
185.187.20.0/22
185.225.220.0/22
185.240.112.0/22
194.180.197.0/24
194.180.216.0/24
194.180.219.0/24
194.180.227.0/24
217.77.128.0/19
IPv6:
2001:9c0::/29
2a00:c660::/29
2a01:77e0::/29
2a05:92c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12902
60341
199816
Signature Algorithm: sha256WithRSAEncryption
6f:86:3e:fa:fe:a8:15:28:21:f0:1e:bb:91:10:3c:e7:50:75:
45:3f:11:c6:5a:fb:5e:2c:1c:51:7f:88:90:e6:3c:86:f5:91:
49:50:79:7d:56:db:41:84:85:c9:e2:c2:bf:bf:cf:46:e5:1b:
5b:e5:e6:c6:72:69:9a:6d:a8:44:06:ce:95:7c:ee:df:62:76:
08:ae:0c:25:c1:fa:02:fd:45:5a:70:7e:e0:07:8e:33:a3:1d:
8a:1c:d8:a2:fe:73:e1:69:80:8c:0c:b7:b8:05:70:4b:fa:96:
ba:78:f1:1e:f9:82:8d:3d:72:a2:8a:8b:0f:18:4a:a5:f8:f5:
6a:3e:3f:38:2a:a1:57:08:ea:26:59:7b:c5:18:c5:dd:ae:65:
dc:8e:ee:eb:78:b4:53:ca:17:63:c8:01:0f:f6:57:3f:bb:69:
b3:5a:8f:d2:b6:62:a8:bf:8d:05:e6:b8:85:c5:85:f9:79:fc:
73:0a:9d:8c:76:be:3a:7b:ce:80:11:b0:46:b3:03:e5:ab:f2:
71:af:df:b9:8c:2f:eb:7e:ce:ef:0d:9d:c3:26:0c:5f:95:3f:
d0:1b:77:52:00:b4:22:d8:d4:7e:7a:da:db:3a:f0:73:27:08:
f8:98:c9:49:22:13:e8:6c:67:77:4a:54:47:da:1c:ef:05:8f:
3d:c6:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:43 2025 by rpki-client