Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
File: uZVEmZdyeKdVcLNAP006oAsbNug.cer (raw, json)
Hash identifier: 18/J9Ogu7tUZsHWN9Xj3sRFWvVJZjB26rkePSphWWk8=
Subject key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E50A93BA8F9ADB1CF5D782FFBD423463A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Mar 2024 08:24:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8459
AS: 12741
AS: 12887
AS: 12968
AS: 13086
AS: 15503
AS: 15587
AS: 15857
AS: 28982
AS: 29167
AS: 30793
AS: 38944
AS: 41398
AS: 41809
AS: 42401
AS: 43939
AS: 49876
AS: 50408
AS: 51620
AS: 56324
IP: 5.57.128.0/18
IP: 5.226.64.0 -- 5.226.135.255
IP: 37.128.0.0/17
IP: 62.69.192.0/18
IP: 62.87.128.0/17
IP: 62.89.64.0/18
IP: 62.111.128.0/17
IP: 62.148.64.0/19
IP: 62.181.160.0/19
IP: 62.233.128.0/17
IP: 62.244.128.0/19
IP: 77.65.128.0/17
IP: 77.87.136.0/21
IP: 77.88.128.0/18
IP: 77.252.0.0/14
IP: 78.8.0.0/14
IP: 80.238.64.0/19
IP: 81.168.128.0/17
IP: 81.210.0.0/17
IP: 81.219.0.0/16
IP: 82.143.128.0/18
IP: 83.142.56.0/21
IP: 83.142.112.0/21
IP: 83.143.96.0/21
IP: 83.238.0.0/16
IP: 84.38.96.0/20
IP: 84.40.128.0/17
IP: 84.234.0.0/20
IP: 84.234.32.0/20
IP: 85.31.240.0/20
IP: 85.128.0.0/17
IP: 85.202.48.0/20
IP: 85.202.208.0/20
IP: 87.99.0.0/18
IP: 87.105.0.0/16
IP: 87.204.0.0/15
IP: 87.239.72.0/21
IP: 87.239.216.0/21
IP: 89.171.0.0/16
IP: 89.187.224.0/19
IP: 89.200.152.0/21
IP: 90.156.0.0/17
IP: 91.142.192.0/20
IP: 91.145.128.0/18
IP: 91.146.192.0/18
IP: 91.150.128.0/19
IP: 91.192.88.0/22
IP: 91.193.196.0/22
IP: 91.195.232.0/23
IP: 91.202.172.0/22
IP: 91.213.255.0/24
IP: 91.215.228.0/22
IP: 91.220.225.0/24
IP: 93.159.0.0/18
IP: 93.180.160.0/19
IP: 93.181.128.0/18
IP: 95.155.64.0/18
IP: 159.205.0.0/16
IP: 178.16.112.0/20
IP: 178.36.0.0/15
IP: 178.214.128.0/19
IP: 178.252.0.0/18
IP: 185.2.36.0/22
IP: 185.18.176.0/22
IP: 185.58.160.0/22
IP: 185.72.184.0/22
IP: 185.164.140.0/22
IP: 185.244.96.0/22
IP: 188.114.64.0/19
IP: 188.127.0.0/19
IP: 193.19.104.0/23
IP: 193.19.122.0/23
IP: 193.58.232.0/24
IP: 193.91.16.0/20
IP: 193.93.144.0/22
IP: 193.105.180.0/24
IP: 193.107.196.0/22
IP: 193.138.140.0/22
IP: 193.151.64.0/22
IP: 193.192.160.0/19
IP: 193.227.100.0/24
IP: 193.238.40.0/22
IP: 193.239.224.0/23
IP: 194.6.204.0/22
IP: 194.9.78.0/23
IP: 194.33.185.0/24
IP: 194.146.128.0/22
IP: 194.150.238.0/23
IP: 194.187.180.0/22
IP: 194.242.0.0/23
IP: 195.38.31.0/24
IP: 195.74.56.0/22
IP: 195.85.209.0/24
IP: 195.114.160.0/19
IP: 195.128.172.0/23
IP: 195.128.180.0/23
IP: 195.160.174.0/23
IP: 195.222.100.0/22
IP: 195.225.248.0/22
IP: 212.49.32.0/19
IP: 212.106.0.0/19
IP: 213.17.128.0/17
IP: 213.134.128.0/19
IP: 213.146.32.0/19
IP: 213.186.64.0/19
IP: 213.195.128.0/18
IP: 213.216.64.0/18
IP: 213.238.64.0/18
IP: 213.241.0.0/17
IP: 217.30.128.0/19
IP: 217.197.64.0/20
IP: 2001:16b0::/32
IP: 2001:41b0::/32
IP: 2a00:1d00::/32
IP: 2a00:1d18::/32
IP: 2a00:7340::/32
IP: 2a01:6800::/32
IP: 2a01:af40::/32
IP: 2a02:2270::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:a9:3b:a8:f9:ad:b1:cf:5d:78:2f:fb:d4:23:46:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 18 08:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:fb:73:7e:a9:68:bb:64:38:d5:52:43:89:
0e:af:ab:ee:c7:46:c6:62:75:1d:22:f6:70:e4:3b:
35:5e:60:be:46:cc:da:c3:a2:78:90:cd:e9:25:e5:
42:9a:1f:20:f3:76:c4:e7:eb:aa:b6:5f:f3:36:43:
39:e2:8a:e5:18:e0:36:c2:3b:1d:a2:b5:25:58:5b:
d7:f6:02:be:14:41:bc:40:17:5f:02:53:1e:36:1c:
e6:91:65:75:02:60:23:1a:12:be:01:56:62:58:dc:
20:08:3f:fd:30:b7:6e:e2:88:90:1a:91:79:00:1b:
c4:e2:56:d0:1a:09:37:80:56:a5:8f:15:90:b5:ff:
aa:c7:7e:e7:59:33:6c:75:cf:e2:5f:dc:27:26:aa:
02:3b:31:db:88:1e:45:e7:0a:8d:90:76:ec:d6:82:
e4:6a:36:13:e4:6c:3e:f2:83:15:ee:8e:22:75:02:
3d:2f:5b:bb:9f:9e:e1:7b:b6:3b:95:79:9a:bf:eb:
4b:73:5e:08:bf:e6:e3:47:61:46:5e:3f:1f:e7:d0:
fc:5e:d6:e4:b3:78:4f:c5:4f:df:94:10:52:6a:78:
46:4b:c5:74:02:55:bc:af:c3:cf:ef:bf:e3:31:2f:
0c:05:13:6b:35:a1:3e:9d:75:eb:c2:80:1b:51:b0:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.128.0/18
5.226.64.0-5.226.135.255
37.128.0.0/17
62.69.192.0/18
62.87.128.0/17
62.89.64.0/18
62.111.128.0/17
62.148.64.0/19
62.181.160.0/19
62.233.128.0/17
62.244.128.0/19
77.65.128.0/17
77.87.136.0/21
77.88.128.0/18
77.252.0.0/14
78.8.0.0/14
80.238.64.0/19
81.168.128.0/17
81.210.0.0/17
81.219.0.0/16
82.143.128.0/18
83.142.56.0/21
83.142.112.0/21
83.143.96.0/21
83.238.0.0/16
84.38.96.0/20
84.40.128.0/17
84.234.0.0/20
84.234.32.0/20
85.31.240.0/20
85.128.0.0/17
85.202.48.0/20
85.202.208.0/20
87.99.0.0/18
87.105.0.0/16
87.204.0.0/15
87.239.72.0/21
87.239.216.0/21
89.171.0.0/16
89.187.224.0/19
89.200.152.0/21
90.156.0.0/17
91.142.192.0/20
91.145.128.0/18
91.146.192.0/18
91.150.128.0/19
91.192.88.0/22
91.193.196.0/22
91.195.232.0/23
91.202.172.0/22
91.213.255.0/24
91.215.228.0/22
91.220.225.0/24
93.159.0.0/18
93.180.160.0/19
93.181.128.0/18
95.155.64.0/18
159.205.0.0/16
178.16.112.0/20
178.36.0.0/15
178.214.128.0/19
178.252.0.0/18
185.2.36.0/22
185.18.176.0/22
185.58.160.0/22
185.72.184.0/22
185.164.140.0/22
185.244.96.0/22
188.114.64.0/19
188.127.0.0/19
193.19.104.0/23
193.19.122.0/23
193.58.232.0/24
193.91.16.0/20
193.93.144.0/22
193.105.180.0/24
193.107.196.0/22
193.138.140.0/22
193.151.64.0/22
193.192.160.0/19
193.227.100.0/24
193.238.40.0/22
193.239.224.0/23
194.6.204.0/22
194.9.78.0/23
194.33.185.0/24
194.146.128.0/22
194.150.238.0/23
194.187.180.0/22
194.242.0.0/23
195.38.31.0/24
195.74.56.0/22
195.85.209.0/24
195.114.160.0/19
195.128.172.0/23
195.128.180.0/23
195.160.174.0/23
195.222.100.0/22
195.225.248.0/22
212.49.32.0/19
212.106.0.0/19
213.17.128.0/17
213.134.128.0/19
213.146.32.0/19
213.186.64.0/19
213.195.128.0/18
213.216.64.0/18
213.238.64.0/18
213.241.0.0/17
217.30.128.0/19
217.197.64.0/20
IPv6:
2001:16b0::/32
2001:41b0::/32
2a00:1d00::/32
2a00:1d18::/32
2a00:7340::/32
2a01:6800::/32
2a01:af40::/32
2a02:2270::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8459
12741
12887
12968
13086
15503
15587
15857
28982
29167
30793
38944
41398
41809
42401
43939
49876
50408
51620
56324
Signature Algorithm: sha256WithRSAEncryption
b0:0c:a4:fd:10:f8:12:86:a5:56:5d:d6:19:77:22:5e:0f:b4:
af:44:0c:f5:3f:b5:55:50:30:ec:bd:18:65:e6:a6:07:45:bd:
94:9b:2d:b2:d9:b1:13:af:09:e4:8f:d9:f2:ba:b7:15:80:1f:
39:db:2d:00:7f:17:4e:d3:6a:e0:2c:e0:30:c8:39:c0:48:83:
83:e3:77:fa:08:03:10:ed:4f:56:b5:66:6c:fb:f1:71:62:73:
0d:5a:a3:ec:1b:80:99:b3:5b:6d:5d:9c:87:ff:91:e8:bf:fb:
6d:6e:9c:88:97:52:07:17:1b:3f:cd:39:b9:4e:dc:14:c0:c3:
8e:00:55:69:e5:2a:21:a7:b9:ae:56:ec:81:2e:7d:93:f5:2f:
f3:43:3c:1c:40:eb:f7:95:92:92:71:11:6f:e5:0c:35:89:38:
50:e3:c7:2f:31:83:1f:78:b5:90:a4:f1:0b:99:cd:76:13:35:
1a:0f:d0:05:96:55:30:aa:f9:c2:d6:b9:30:49:fb:a4:bd:e3:
21:31:9f:af:1d:ca:87:0b:c2:f8:a7:3a:fd:38:61:60:e0:b0:
59:4c:f4:94:7c:9e:2e:94:05:0c:7b:8c:1b:fd:9e:0f:8f:9f:
9e:86:58:ef:25:1b:d2:ba:2a:06:e4:12:50:e5:84:1f:c8:f3:
b1:92:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:17:54 2024 by rpki-client on console-ams.rpki-client.org