Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
File: saew2N6CUdNtfIP69rx-_sc7UDQ.cer (raw, json)
Hash identifier: aKSCZiKtv8H2MB20+qSuCuA1d4Kyo3+RolHOZXggwfk=
Subject key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D860C13740AD1496626A5BD994E39CFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 May 2025 09:15:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.56.164.0/22
IP: 5.182.48.0/22
IP: 45.81.20.0/22
IP: 45.90.144.0/22
IP: 45.140.220.0/22
IP: 77.83.240.0/22
IP: 78.108.216.0/22
IP: 83.143.116.0/22
IP: 85.202.160.0/22
IP: 89.190.156.0/22
IP: 178.218.144.0/22
IP: 185.185.40.0/23
IP: 185.185.43.0/24
IP: 185.186.64.0/22
IP: 185.227.68.0/22
IP: 185.234.72.0/22
IP: 185.242.224.0/22
IP: 193.31.28.0/22
IP: 193.34.76.0/22
IP: 193.105.165.0/24
IP: 193.105.177.0/24
IP: 193.221.192.0/22
IP: 194.31.140.0/22
IP: 194.50.16.0/22
IP: 194.56.224.0/22
IP: 212.107.12.0/22
IP: 2a0b:b80::/29
IP: 2a0b:7080::/29
IP: 2a0d:77c0::/29
IP: 2a0e:c7c0::/29
IP: 2a0e:e800::/29
IP: 2a0f:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:60:c1:37:40:ad:14:96:62:6a:5b:d9:94:e3:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 09:15:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:41:50:47:07:28:b3:34:60:89:30:38:b2:
8f:f3:76:94:f2:f7:97:4f:e5:0a:a0:2c:d6:63:53:
8d:34:e0:b1:70:e3:ad:15:47:29:ac:24:7c:67:57:
2b:34:b8:74:e8:65:04:4e:b8:dc:6b:27:f0:a6:5d:
8c:b6:e5:e2:8e:97:84:5c:78:ea:ff:48:f6:ec:96:
04:3e:d0:8a:2d:8d:5b:53:2b:18:1b:47:18:ca:94:
dd:94:cb:a5:31:97:42:17:e3:8d:f3:70:e8:38:80:
8d:bd:08:db:36:63:44:29:20:e5:fe:48:27:1c:14:
f7:71:23:3a:bd:56:bf:05:97:85:fe:37:ec:19:24:
ab:39:9d:43:00:89:05:74:fa:38:b4:7a:c5:f6:d8:
bb:e8:79:33:b3:bd:2c:d9:59:52:d9:7d:09:32:59:
ca:33:38:27:fa:23:04:f5:96:30:81:01:2b:14:9f:
1d:c8:08:bf:ab:eb:1f:f3:28:34:ad:c1:3c:f4:fc:
90:ab:44:83:e3:81:f5:6e:d3:cd:fd:72:20:f0:ac:
78:5d:52:41:39:7c:4e:48:d4:7f:b1:78:a5:f1:fd:
ed:2c:d6:b9:2f:e8:6d:d3:11:8b:bd:f2:62:56:fb:
eb:90:a5:0a:1c:54:04:af:34:09:e6:13:a8:c1:0d:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/23
185.185.43.0/24
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.165.0/24
193.105.177.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b80::/29
2a0b:7080::/29
2a0d:77c0::/29
2a0e:c7c0::/29
2a0e:e800::/29
2a0f:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:c0:6b:af:c5:b7:ed:e3:8a:ee:3e:3b:87:e1:96:e2:4c:aa:
45:c0:4b:9e:21:5c:79:6b:f4:53:d1:37:ee:50:47:fa:ca:53:
52:bb:18:cc:bb:0e:53:ff:06:5a:d1:3c:29:5a:13:d6:b9:a6:
e2:34:6d:0e:a7:a3:fd:6b:93:8f:a2:3d:73:80:66:e2:76:ed:
44:c5:e5:1a:5f:63:a5:af:33:1a:79:2a:37:c5:29:15:e4:fc:
1f:86:55:71:28:aa:18:68:83:40:0c:85:ec:f2:57:af:9f:6f:
ac:b7:02:4e:5f:0f:97:13:0f:b3:e0:4c:4d:51:24:7d:6f:23:
19:b4:d5:3b:12:30:a5:6d:23:68:ae:e6:df:40:f3:cc:b7:fd:
a3:68:6b:76:ab:e9:42:1e:8e:60:45:92:3e:83:a4:e8:4a:30:
79:e1:a6:e0:53:fa:02:e4:11:05:38:36:28:7b:00:23:6d:5e:
39:b7:6b:eb:ed:4c:f4:7d:cc:c4:2b:03:8e:88:ef:ff:f8:c7:
1e:1c:6b:5c:5c:90:8d:5c:bd:d0:62:43:e5:07:a7:6a:b2:99:
9f:06:14:88:d0:08:ca:c9:db:62:53:42:5d:0a:fb:03:5c:77:
6a:6f:64:e9:fd:da:57:99:d2:a0:41:d3:91:9f:7c:58:d2:59:
97:19:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:56:04 2025 by rpki-client