Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer (raw, json)
Hash identifier: m9EYnOJsGBOgISvPmCBLx0bEw0krnF6mUT8uP6PqYpM=
Subject key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143A93F109C1EF3BF0ECA775D3085EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34555
IP: 31.6.72.0/21
IP: 77.95.176.0/21
IP: 78.158.32.0/20
IP: 91.203.72.0/22
IP: 178.248.32.0/21
IP: 185.7.148.0/22
IP: 188.92.232.0/21
IP: 194.12.0.0/20
IP: 2a01:5e40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a9:3f:10:9c:1e:f3:bf:0e:ca:77:5d:30:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:e1:fd:4e:9b:c5:c0:6a:80:aa:50:e8:55:
77:8e:2f:71:21:48:84:ea:f8:ec:7a:ab:14:52:7e:
13:2d:da:2c:59:86:db:a8:d7:5c:a8:27:bc:89:16:
27:e4:ba:d2:38:a5:66:3e:1f:d9:04:56:5b:a9:1f:
82:55:4d:43:ec:f3:43:b1:b2:19:9a:8c:fc:a9:4d:
23:fb:85:65:e2:30:e2:81:69:1f:71:7a:01:6e:5d:
4c:c6:2f:c8:f9:4f:40:98:18:73:19:87:96:20:36:
87:77:37:74:f6:0d:87:d6:53:70:4e:ea:6d:26:8e:
88:5d:33:64:5c:96:da:1c:1c:0e:4e:9f:f8:59:d5:
85:f1:43:05:f3:b9:f5:f2:73:a8:d5:f2:b7:f8:1f:
3c:0c:a9:a7:84:a9:f0:6f:62:6f:f3:24:3b:07:fc:
72:c0:53:50:f6:11:2d:24:d9:28:3b:b9:6b:49:b3:
a5:0b:25:24:c8:2f:a0:96:6c:bc:47:75:02:3c:21:
6c:f8:df:2b:49:b6:84:1c:7d:ee:5d:d5:d5:0a:8c:
2a:e5:e6:b0:93:bc:22:37:8a:42:68:45:34:54:4a:
26:ed:61:bf:4d:27:11:28:d1:9b:5e:ee:c9:11:97:
e2:0c:00:cf:68:3a:2c:bd:92:9a:e2:98:fd:d2:96:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.72.0/21
77.95.176.0/21
78.158.32.0/20
91.203.72.0/22
178.248.32.0/21
185.7.148.0/22
188.92.232.0/21
194.12.0.0/20
IPv6:
2a01:5e40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34555
Signature Algorithm: sha256WithRSAEncryption
51:e7:85:d2:6b:ee:e8:a2:ba:31:03:8c:87:95:8e:f7:a2:cc:
57:36:78:7f:7b:2a:b8:86:39:f3:f3:21:e7:95:11:6a:f3:df:
d2:ab:65:b7:a7:c4:c9:40:6d:1d:da:a4:a4:24:e4:76:06:fc:
22:69:ee:b4:1e:61:03:7c:a7:e3:be:00:15:0c:f0:f1:bf:f7:
f2:7c:e7:bf:30:ac:b6:3f:f0:ca:00:ba:d5:0f:99:00:23:2e:
d0:1c:37:39:ea:0a:f8:97:ee:dd:a3:9d:70:37:36:97:b2:c1:
f4:83:54:57:a5:fa:a2:71:aa:c6:38:6a:16:1c:0f:d1:9c:87:
d8:5a:79:89:7d:4e:c2:3b:98:f5:6c:e8:0e:3b:6a:0d:40:1a:
12:5a:08:4b:d0:11:9c:b7:04:17:7b:a5:03:2b:fb:78:b1:fd:
2e:c5:e4:21:bd:92:25:a5:a7:e8:7c:62:39:10:5e:fb:6f:d7:
0d:64:9b:cb:95:2b:21:c4:05:a6:75:ae:32:9d:fd:63:c2:e0:
ab:64:87:1a:2c:83:1d:38:1a:72:93:db:ca:c4:50:5e:db:54:
f0:31:92:48:8d:31:ee:80:2b:76:80:74:5a:6b:18:4d:9c:62:
33:b8:2d:da:14:03:e6:38:86:6f:7f:64:df:e5:02:d2:b5:7f:
cc:de:a4:79
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAZQhQ6k/EJwe878OynddMIXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmUzYTJhNDkwOGRkOTY4MjFjODBjNjRkMTVkMTcxNDE0M2FhYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNTh/U6bxcBqgKpQ6FV3ji9xIUiE
6vjseqsUUn4TLdosWYbbqNdcqCe8iRYn5LrSOKVmPh/ZBFZbqR+CVU1D7PNDsbIZ
moz8qU0j+4Vl4jDigWkfcXoBbl1Mxi/I+U9AmBhzGYeWIDaHdzd09g2H1lNwTupt
Jo6IXTNkXJbaHBwOTp/4WdWF8UMF87n18nOo1fK3+B88DKmnhKnwb2Jv8yQ7B/xy
wFNQ9hEtJNkoO7lrSbOlCyUkyC+glmy8R3UCPCFs+N8rSbaEHH3uXdXVCowq5eaw
k7wiN4pCaEU0VEom7WG/TScRKNGbXu7JEZfiDADPaDosvZKa4pj90pbEZwIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFLbjoqSQjdloIcgMZNFdFxQUOqqUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2IzNmYz
MS0xY2NkLTRkYTMtOWNmOS0wZWRiZGZmOWY4ZjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYjM2ZjMx
LTFjY2QtNGRhMy05Y2Y5LTBlZGJkZmY5ZjhmMi8xL3R1T2lwSkNOMldnaHlBeGsw
VjBYRkJRNnFwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF
BwEHAQH/BEkwRzA2BAIAATAwAwQDHwZIAwQDTV+wAwQETp4gAwQCW8tIAwQDsvgg
AwQCuQeUAwQDvFzoAwQEwgwAMA0EAgACMAcDBQAqAV5AMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwCG+zANBgkqhkiG9w0BAQsFAAOCAQEAUeeF0mvu6KK6MQOMh5WO
96LMVzZ4f3squIY58/Mh55URavPf0qtlt6fEyUBtHdqkpCTkdgb8ImnutB5hA3yn
474AFQzw8b/38nznvzCstj/wygC61Q+ZACMu0Bw3OeoK+Jfu3aOdcDc2l7LB9INU
V6X6onGqxjhqFhwP0ZyH2Fp5iX1OwjuY9WzoDjtqDUAaEloIS9ARnLcEF3ulAyv7
eLH9LsXkIb2SJaWn6HxiORBe+2/XDWSby5UrIcQFpnWuMp39Y8Lgq2SHGiyDHTga
cpPbysRQXttU8DGSSI0x7oArdoB0WmsYTZxiM7gt2hQD5jiGb39k3+UC0rV/zN6k
eQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:56:21 2025 by rpki-client