Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
File: uQ9AvbnmZHaekXWQ942253GT11E.cer (raw, json)
Hash identifier: R6EDRvn1T7bhFJ3GhP4uryPVRFmsXa/L2xE0c6QOEYM=
Subject key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3C11B49E7E08E405753E3A7E90605
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204851
IP: 185.237.240.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c1:1b:49:e7:e0:8e:40:57:53:e3:a7:e9:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90f40bdb9e664769e917590f78db6e77193d751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:b0:c0:bf:e2:0c:17:5b:af:69:bc:87:d0:
dc:d5:fc:05:70:52:7a:b4:ab:c4:a5:26:4b:a6:09:
1c:3f:21:d3:86:8a:72:b8:a5:97:83:b1:70:f1:37:
b0:61:dd:93:35:c8:bf:14:1e:2f:81:f0:38:64:b7:
e9:df:d7:63:f9:ac:a6:a4:4a:2d:b9:eb:53:fa:de:
0c:a2:94:70:c2:3c:e8:4f:67:6a:ab:f7:26:79:4d:
2f:2d:a8:5e:8b:11:a8:0c:6b:d1:47:a9:3a:41:9d:
09:6b:cb:ce:77:35:ea:53:fc:92:28:a7:49:a8:fd:
0b:86:c5:1e:04:3b:41:cf:30:8f:46:4d:53:e9:16:
34:47:31:88:fe:d0:8e:e8:7b:86:78:7d:6f:c5:fb:
4a:31:b4:6b:16:e5:be:b0:b0:18:c1:e5:85:96:28:
22:53:65:bd:25:08:ee:b7:d0:c0:87:a3:78:1e:f1:
05:e0:25:90:c9:2c:4a:23:96:c1:5f:af:d0:c1:90:
e6:72:fe:b4:a1:c6:60:71:3e:c3:13:41:26:b8:d9:
1d:64:06:5b:70:59:c7:e8:84:8a:e4:91:73:06:23:
e3:83:78:45:de:b2:ba:e5:a7:64:1a:4e:80:4a:bb:
57:fc:56:c7:fb:c2:bb:28:e5:35:4d:70:b0:be:55:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.240.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204851
Signature Algorithm: sha256WithRSAEncryption
ae:ff:c3:f8:98:9f:bf:45:75:39:87:32:e8:69:25:6a:b9:72:
06:8a:db:de:42:cc:25:6c:86:35:82:b4:24:6d:88:39:29:1f:
3e:4b:ff:0c:11:d1:73:5f:98:38:1f:00:cd:0f:7d:81:70:33:
4a:b5:be:af:c0:db:2b:c6:a2:56:a4:fd:65:3b:af:bc:13:77:
54:cc:0f:30:2e:6a:61:f0:a4:1d:34:04:44:3e:7b:c5:1a:6e:
a3:e6:f2:97:c7:59:6f:c9:2f:9c:8c:22:47:ae:80:c4:21:e8:
49:ae:ec:5c:0e:76:45:ba:66:96:bb:5c:c7:89:ea:02:e8:70:
f7:5d:92:10:aa:56:50:57:bd:11:a7:7f:eb:3e:9f:66:8b:55:
ce:65:56:6e:a9:05:b2:02:c0:47:67:ba:ea:2e:38:03:fe:17:
cc:e1:ba:f7:5e:ca:bc:3a:a5:e7:bf:8c:48:e4:67:e8:78:d4:
25:b3:8e:fe:72:29:73:2b:b0:54:7b:34:d0:8e:66:fb:73:34:
99:b4:38:0d:2e:ff:d3:61:e4:9b:8d:64:e5:2a:a8:bf:a7:2a:
c9:8d:14:cc:51:9b:ab:63:28:26:c5:c6:c1:a6:d5:06:25:06:
6b:84:5f:49:2a:79:ea:ff:55:9b:d8:75:31:76:21:b5:1d:65:
e6:ed:1d:51
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQks8EbSefgjkBXU+On6QYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTBmNDBiZGI5ZTY2NDc2OWU5MTc1OTBmNzhkYjZlNzcxOTNkNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUywwL/iDBdbr2m8h9Dc1fwFcFJ6
tKvEpSZLpgkcPyHThopyuKWXg7Fw8TewYd2TNci/FB4vgfA4ZLfp39dj+aympEot
uetT+t4MopRwwjzoT2dqq/cmeU0vLaheixGoDGvRR6k6QZ0Ja8vOdzXqU/ySKKdJ
qP0LhsUeBDtBzzCPRk1T6RY0RzGI/tCO6HuGeH1vxftKMbRrFuW+sLAYweWFligi
U2W9JQjut9DAh6N4HvEF4CWQySxKI5bBX6/QwZDmcv60ocZgcT7DE0EmuNkdZAZb
cFnH6ISK5JFzBiPjg3hF3rK65adkGk6ASrtX/FbH+8K7KOU1TXCwvlWUEQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLkPQL255mR2npF1kPeNtudxk9dRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2I5MmNj
My1kZGYxLTQzY2ItYjRiMS00MTU0ZGE1Y2ViOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYjkyY2Mz
LWRkZjEtNDNjYi1iNGIxLTQxNTRkYTVjZWI5Yi8xL3VROUF2Ym5tWkhhZWtYV1E5
NDIyNTNHVDExRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCue3wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMgMzANBgkqhkiG9w0BAQsFAAOCAQEArv/D+Jifv0V1OYcy6GklarlyBorb3kLM
JWyGNYK0JG2IOSkfPkv/DBHRc1+YOB8AzQ99gXAzSrW+r8DbK8aiVqT9ZTuvvBN3
VMwPMC5qYfCkHTQERD57xRpuo+byl8dZb8kvnIwiR66AxCHoSa7sXA52Rbpmlrtc
x4nqAuhw912SEKpWUFe9Ead/6z6fZotVzmVWbqkFsgLAR2e66i44A/4XzOG6917K
vDql57+MSORn6HjUJbOO/nIpcyuwVHs00I5m+3M0mbQ4DS7/02Hkm41k5Sqov6cq
yY0UzFGbq2MoJsXGwabVBiUGa4RfSSp56v9Vm9h1MXYhtR1l5u0dUQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:03 2025 by rpki-client