Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer (raw, json)
Hash identifier: S1yZLG6CCkYiMQO6QxfDHUJkuizbNUgZfxQKZjLRhiM=
Subject key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424454F8843B4AF3ED33E7B1DE659F13A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51275
IP: 89.107.248.0/21
IP: 109.232.200.0/21
IP: 193.23.138.0/23
IP: 2a00:1608::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4f:88:43:b4:af:3e:d3:3e:7b:1d:e6:59:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:f5:dd:5b:26:44:18:d9:90:4c:9a:fb:be:
b8:ee:db:b1:24:24:83:56:93:99:e7:08:0f:ff:37:
62:c1:d0:49:1f:c0:94:90:2f:e1:e9:f0:46:be:bc:
8c:2a:e7:dd:bb:b8:ff:99:52:8f:16:74:8c:2d:e5:
2d:42:bd:7c:52:a0:7b:89:1a:2c:f9:db:5c:86:dd:
3c:88:e1:da:63:83:d6:86:69:b7:48:3f:db:91:ac:
fe:9f:4f:fd:61:16:82:d3:98:da:7b:eb:77:c6:ea:
58:00:05:e4:59:64:f0:b3:2c:7b:9d:73:dc:92:ff:
da:68:3c:1b:c2:5a:8b:ad:02:42:33:5e:78:2d:86:
65:f4:e2:85:80:5e:2c:68:44:52:32:cf:16:50:5a:
5b:48:24:7e:98:3f:ca:9c:a1:85:01:75:67:c9:21:
e0:41:e8:79:cf:0c:3d:75:bb:90:5f:03:3b:1b:b4:
10:98:53:3d:fc:93:60:e2:b8:b2:de:c2:d6:c9:5c:
6c:94:1d:a5:a8:2f:7a:93:6d:b5:46:7e:8f:e2:72:
ec:dd:d2:1f:cb:d5:17:ab:ce:42:7e:a1:4e:ad:1a:
e1:2a:6c:42:b3:02:6e:ca:28:be:f0:55:ec:11:25:
db:a0:26:f2:bb:32:38:10:8e:b8:c4:97:de:92:72:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.248.0/21
109.232.200.0/21
193.23.138.0/23
IPv6:
2a00:1608::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51275
Signature Algorithm: sha256WithRSAEncryption
86:81:f9:c0:a1:d4:ed:ea:dc:82:b0:a3:51:3a:be:f4:0f:41:
63:f5:78:6d:d3:d4:49:c1:d3:54:c2:15:7b:c8:72:73:f4:1a:
25:cc:0e:f1:39:30:e7:1b:81:f6:11:e7:c6:6d:28:85:89:8c:
c7:2b:63:80:84:a3:60:37:3c:0d:43:81:17:0a:46:af:44:84:
ee:2a:4f:e1:b3:b2:13:ae:26:3f:8d:60:97:f8:64:67:79:5c:
6e:f9:71:b0:07:c3:96:7b:70:99:16:1f:6d:4e:cb:61:09:f1:
01:01:a3:b4:dd:6b:6d:22:69:60:ee:d8:ce:ab:dd:0c:9d:c5:
b6:f5:fe:f0:c3:55:ff:30:6d:89:bc:ef:bc:0e:43:e2:5f:00:
e7:13:d9:76:27:d8:6b:a2:a4:d5:89:76:a8:5a:56:af:e9:01:
9d:d7:eb:7e:5b:dd:21:79:4d:2f:ad:7c:ae:b6:1e:49:71:ae:
c6:ae:eb:1c:6c:61:38:5e:76:25:ea:b0:25:c9:59:a8:11:2c:
30:b5:4b:20:94:b8:45:ca:b1:97:c1:1c:45:68:0d:f4:49:f1:
02:28:70:37:73:76:c4:09:80:43:ba:08:59:e2:b4:4c:e0:bf:
d4:e7:e8:f7:13:73:6a:ca:07:e8:83:f4:ad:25:88:8a:1a:36:
31:e0:3c:42
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQkRU+IQ7SvPtM+ex3mWfE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWIzNTBhMGFlMzJlNzNlNjYwYzQxNmMzZjE0MDZlZGQzNjE1ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qz13VsmRBjZkEya+7647tuxJCSD
VpOZ5wgP/zdiwdBJH8CUkC/h6fBGvryMKufdu7j/mVKPFnSMLeUtQr18UqB7iRos
+dtcht08iOHaY4PWhmm3SD/bkaz+n0/9YRaC05jae+t3xupYAAXkWWTwsyx7nXPc
kv/aaDwbwlqLrQJCM154LYZl9OKFgF4saERSMs8WUFpbSCR+mD/KnKGFAXVnySHg
Qeh5zww9dbuQXwM7G7QQmFM9/JNg4riy3sLWyVxslB2lqC96k221Rn6P4nLs3dIf
y9UXq85CfqFOrRrhKmxCswJuyii+8FXsESXboCbyuzI4EI64xJfeknKDTQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzYyN2U2
MC0wMGE2LTRkMjYtYjkzYS1lZjczYjdiNGNhM2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNjI3ZTYw
LTAwYTYtNGQyNi1iOTNhLWVmNzNiN2I0Y2EzYy8xL3ViTlFvSzR5NXo1bURFRnNQ
eFFHN2ROaFg0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDWWv4AwQDbejIAwQBwReKMA0EAgACMAcDBQAq
ABYIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDISzANBgkqhkiG9w0BAQsFAAOC
AQEAhoH5wKHU7ercgrCjUTq+9A9BY/V4bdPUScHTVMIVe8hyc/QaJcwO8Tkw5xuB
9hHnxm0ohYmMxytjgISjYDc8DUOBFwpGr0SE7ipP4bOyE64mP41gl/hkZ3lcbvlx
sAfDlntwmRYfbU7LYQnxAQGjtN1rbSJpYO7YzqvdDJ3FtvX+8MNV/zBtibzvvA5D
4l8A5xPZdifYa6Kk1Yl2qFpWr+kBndfrflvdIXlNL618rrYeSXGuxq7rHGxhOF52
JeqwJclZqBEsMLVLIJS4Rcqxl8EcRWgN9EnxAihwN3N2xAmAQ7oIWeK0TOC/1Ofo
9xNzasoH6IP0rSWIiho2MeA8Qg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:42:24 2025 by rpki-client