Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer (raw, json)
Hash identifier: dDVN3se84UNDESQS1np3DIDpWIlorD/PG20qUm9Rm14=
Subject key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7C957AB5C7C36CFAE079978512C15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56322
IP: 91.219.236.0/22
IP: 185.163.204.0/24
IP: 2a10:c800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c9:57:ab:5c:7c:36:cf:ae:07:99:78:51:2c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:e1:18:14:96:f4:b4:e6:cc:79:7b:70:f9:
23:42:47:8e:54:b0:de:71:30:88:a8:cc:7d:60:29:
fd:18:8d:7c:85:ee:2c:e3:7f:df:fd:37:72:87:c0:
64:f5:7e:11:3e:fe:b5:77:d4:2d:4d:ff:13:32:df:
12:a1:d9:df:30:20:b0:04:cf:6d:78:bb:10:05:16:
4b:20:98:8e:27:51:67:fe:56:77:ff:de:e2:69:4e:
03:28:a6:57:86:b6:14:e7:8a:eb:4f:0f:23:c9:61:
23:d0:43:40:71:69:e0:ce:9f:ef:c5:49:1e:6b:17:
38:f0:c7:10:b5:38:07:f6:9e:61:d6:56:ca:7f:ce:
d7:94:cd:29:bf:11:d4:85:2f:b5:c0:54:70:34:31:
5a:4d:56:ad:99:6f:09:d1:2d:92:d0:bd:b0:38:84:
e5:cb:74:0d:d0:0b:c1:10:b5:cf:10:23:7b:ce:37:
1c:f0:5b:8d:d6:e5:24:07:ef:dc:71:ef:32:a3:19:
02:66:bf:af:7c:d5:62:8e:74:b1:3f:7d:16:3b:97:
af:59:a7:9e:73:f9:66:f8:72:ed:50:5d:26:b1:57:
c2:1f:48:cb:68:ee:d6:b3:ae:73:de:58:64:cf:3d:
f5:20:97:4c:d0:97:d1:57:2c:0b:ed:ad:99:df:fa:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.236.0/22
185.163.204.0/24
IPv6:
2a10:c800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56322
Signature Algorithm: sha256WithRSAEncryption
a7:e5:9c:2f:6b:5c:e7:b4:41:ce:b8:21:19:ef:5a:f0:37:6a:
da:5b:a0:ed:55:49:02:71:9b:39:37:df:cd:50:a7:e9:46:f2:
b9:a8:c6:18:bd:cd:0e:2b:2c:c7:45:c9:f5:9b:94:48:92:d9:
67:67:50:e7:3e:2e:70:33:f8:36:fb:f1:8d:92:b2:b6:93:36:
10:e3:e9:4b:9d:ed:b9:2e:3a:e6:86:33:ce:83:b1:3f:28:b5:
37:32:98:f2:dc:ed:1c:83:5b:cb:0a:9e:c5:c1:bb:c8:e0:4e:
18:de:74:ec:ce:ff:fb:5a:16:98:4c:dd:52:92:d3:dc:46:80:
0f:3c:54:4a:41:9f:9e:94:8d:ad:4f:78:87:d4:b7:5d:e6:f6:
3e:6b:f7:73:56:b8:bc:cf:af:d6:47:43:05:60:9b:12:ff:07:
6f:d7:e3:60:d0:d4:6d:14:3d:45:37:cd:f9:a9:98:bf:75:b8:
69:62:a5:61:73:74:0e:7b:d8:94:c1:56:24:1c:93:f3:ff:4f:
40:45:7d:8b:0d:6a:cd:1b:f9:33:3b:cf:88:12:9b:ab:56:fa:
2d:cc:99:5e:52:09:52:57:f6:80:47:69:fb:f1:4f:aa:0d:bc:
77:43:0a:c7:03:8d:29:7b:15:47:1e:96:ce:54:5d:a9:01:07:
39:a8:b0:74
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQj18lXq1x8Ns+uB5l4USwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDM2N2JjMTlmMDY2OTk2NDkwYTIwNjY3NGM4ZGE4ZjVlZDJjZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11HhGBSW9LTmzHl7cPkjQkeOVLDe
cTCIqMx9YCn9GI18he4s43/f/Tdyh8Bk9X4RPv61d9QtTf8TMt8SodnfMCCwBM9t
eLsQBRZLIJiOJ1Fn/lZ3/97iaU4DKKZXhrYU54rrTw8jyWEj0ENAcWngzp/vxUke
axc48McQtTgH9p5h1lbKf87XlM0pvxHUhS+1wFRwNDFaTVatmW8J0S2S0L2wOITl
y3QN0AvBELXPECN7zjcc8FuN1uUkB+/cce8yoxkCZr+vfNVijnSxP30WO5evWaee
c/lm+HLtUF0msVfCH0jLaO7Ws65z3lhkzz31IJdM0JfRVywL7a2Z3/oGQQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFK02e8GfBmmWSQogZnTI2o9e0s0OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzNjYzg0
OC03ODYxLTRjZTEtODcwZC04NGI2N2I0NzBiMDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvM2NjODQ4
LTc4NjEtNGNlMS04NzBkLTg0YjY3YjQ3MGIwNC8xL3JUWjd3WjhHYVpaSkNpQm1k
TWphajE3U3pRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCW9vsAwQAuaPMMA0EAgACMAcDBQMqEMgAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcAjANBgkqhkiG9w0BAQsFAAOCAQEAp+Wc
L2tc57RBzrghGe9a8Ddq2lug7VVJAnGbOTffzVCn6UbyuajGGL3NDissx0XJ9ZuU
SJLZZ2dQ5z4ucDP4NvvxjZKytpM2EOPpS53tuS465oYzzoOxPyi1NzKY8tztHINb
ywqexcG7yOBOGN507M7/+1oWmEzdUpLT3EaADzxUSkGfnpSNrU94h9S3Xeb2Pmv3
c1a4vM+v1kdDBWCbEv8Hb9fjYNDUbRQ9RTfN+amYv3W4aWKlYXN0DnvYlMFWJByT
8/9PQEV9iw1qzRv5MzvPiBKbq1b6LcyZXlIJUlf2gEdp+/FPqg28d0MKxwONKXsV
Rx6WzlRdqQEHOaiwdA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:39:12 2025 by rpki-client