Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.cer (raw, json)
Hash identifier: 5vX7BiES85PTaVRUyIHU61lN5ch8JQ0I3g3YfwnQatU=
Subject key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C0DD5052EB8AFFA1D33B22E195397
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49222
IP: 185.166.244.0/22
IP: 188.92.168.0/21
IP: 2a06:c240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0d:d5:05:2e:b8:af:fa:1d:33:b2:2e:19:53:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:e0:f1:af:e4:13:04:11:ac:5a:0b:37:47:
a8:cd:9b:94:f3:5a:b7:d6:3d:30:06:d6:9f:e2:83:
9a:3d:08:01:d7:dc:26:12:cb:63:6b:e3:2f:85:82:
ab:13:1b:8f:99:26:41:1d:fd:ee:e7:8b:48:c8:b4:
ee:eb:7e:d3:8b:80:7c:84:0a:6a:6c:71:d2:93:cb:
50:6d:ff:f8:15:fb:1b:49:82:47:33:4a:41:ec:fc:
12:cd:b9:45:5c:0a:ab:56:3c:2f:93:ed:67:6b:55:
cc:fd:a8:9d:92:1d:e2:61:60:95:4b:5c:d5:87:38:
e9:9f:a8:5c:c0:dc:2b:63:c5:d1:48:2a:25:54:d2:
54:ea:21:54:8a:66:91:61:d3:b7:54:7d:01:45:98:
a1:80:0e:1f:47:7f:52:05:71:bc:ab:50:65:08:bd:
5a:ff:f9:c9:69:b1:be:40:4e:ff:77:1f:9e:19:e6:
cd:da:5c:ab:e6:6f:d1:ba:5c:02:33:54:bb:b4:6b:
68:b8:7d:57:57:9b:de:ed:e3:ce:4e:de:c8:29:b4:
3c:8c:0c:ff:9c:6b:c1:59:e1:cc:49:f2:c5:ac:f3:
e0:50:d0:d8:e0:5e:56:16:78:6a:9a:aa:e9:f6:f5:
d1:c1:f5:e3:39:8c:72:7d:d8:dd:0b:ec:ea:94:a8:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.244.0/22
188.92.168.0/21
IPv6:
2a06:c240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49222
Signature Algorithm: sha256WithRSAEncryption
1c:2d:f0:58:c6:01:8c:5d:56:49:ef:08:2b:4b:57:34:df:b5:
bf:6c:b2:53:e8:de:8b:a0:80:c2:8c:cb:93:45:42:e9:cc:ad:
6c:1c:5a:8b:54:38:3d:24:e5:38:b8:58:f0:79:1e:1e:39:e3:
56:ef:dc:b0:52:90:4a:e3:ac:18:f0:57:db:5c:e2:1f:28:e4:
0c:60:1e:45:9d:b8:a4:ca:dc:f2:92:b0:cd:a9:c8:df:48:d0:
20:60:9f:02:22:92:c3:11:8b:be:18:21:af:9e:93:68:ea:f4:
5e:25:2d:e6:68:c2:4a:43:a7:af:5b:0a:9f:17:d0:be:ea:94:
40:6e:75:d3:c1:28:25:ff:93:f9:4b:95:d3:f9:2b:6c:b5:9f:
43:96:34:1b:96:93:1c:81:7c:d5:b6:d3:1a:49:6e:93:9e:e2:
59:46:91:19:f0:c4:3b:7a:4d:a0:d8:0e:c4:9d:99:90:3c:e5:
fd:e6:7c:1d:74:e7:8e:ea:dc:a7:a2:cb:e2:a5:4b:c5:11:c4:
54:0c:47:7a:b0:67:e5:a6:9e:d6:53:5f:95:ab:37:1b:d9:bc:
a5:1f:41:0e:a2:d3:b7:ad:0e:c5:d5:d5:cd:99:4e:e5:ed:d0:
18:0b:b6:51:21:be:13:74:77:6d:f5:e7:c0:40:f2:6b:9b:32:
b0:14:b4:82
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQfjA3VBS64r/odM7IuGVOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg2YjNjYjEzZmQyMTY3ZDg5ZDEyMTg1ZTkzNTA2ZGQ0NWM5YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZng8a/kEwQRrFoLN0eozZuU81q3
1j0wBtaf4oOaPQgB19wmEstja+MvhYKrExuPmSZBHf3u54tIyLTu637Ti4B8hApq
bHHSk8tQbf/4FfsbSYJHM0pB7PwSzblFXAqrVjwvk+1na1XM/aidkh3iYWCVS1zV
hzjpn6hcwNwrY8XRSColVNJU6iFUimaRYdO3VH0BRZihgA4fR39SBXG8q1BlCL1a
//nJabG+QE7/dx+eGebN2lyr5m/RulwCM1S7tGtouH1XV5ve7ePOTt7IKbQ8jAz/
nGvBWeHMSfLFrPPgUNDY4F5WFnhqmqrp9vXRwfXjOYxyfdjdC+zqlKjRtQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFLiGs8sT/SFn2J0SGF6TUG3UXJr5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzQyYWMz
Yy1jNTgzLTRiODItYmNiNy0wNDczOTQwMmUyN2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvNDJhYzNj
LWM1ODMtNGI4Mi1iY2I3LTA0NzM5NDAyZTI3Yi8xL3VJYXp5eFA5SVdmWW5SSVlY
cE5RYmRSY212ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuab0AwQDvFyoMA0EAgACMAcDBQMqBsJAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDARjANBgkqhkiG9w0BAQsFAAOCAQEAHC3w
WMYBjF1WSe8IK0tXNN+1v2yyU+jei6CAwozLk0VC6cytbBxai1Q4PSTlOLhY8Hke
HjnjVu/csFKQSuOsGPBX21ziHyjkDGAeRZ24pMrc8pKwzanI30jQIGCfAiKSwxGL
vhghr56TaOr0XiUt5mjCSkOnr1sKnxfQvuqUQG5108EoJf+T+UuV0/krbLWfQ5Y0
G5aTHIF81bbTGkluk57iWUaRGfDEO3pNoNgOxJ2ZkDzl/eZ8HXTnjurcp6LL4qVL
xRHEVAxHerBn5aae1lNflas3G9m8pR9BDqLTt60OxdXVzZlO5e3QGAu2USG+E3R3
bfXnwEDya5sysBS0gg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:47 2025 by rpki-client