Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
File: v7CXo2wjJdEDH_QJG6AKhkWdQog.cer (raw, json)
Hash identifier: xZGnMrs7BqYP/yrnU2u0wRFkibLFD6uxi2O3lTXQdAM=
Subject key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444EC80AED091CC5614894D608A8074
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8696
AS: 12301
AS: 20523
AS: 20922
AS: 34588
IP: 62.77.192.0/22
IP: 62.77.200.0 -- 62.77.239.255
IP: 62.77.242.0 -- 62.77.247.255
IP: 79.120.128.0/19
IP: 79.120.168.0/23
IP: 79.120.176.0 -- 79.120.247.255
IP: 79.120.250.0/23
IP: 81.0.64.0 -- 81.0.81.255
IP: 81.0.88.0/23
IP: 81.0.96.0/23
IP: 81.0.100.0 -- 81.0.107.255
IP: 81.0.110.0 -- 81.0.121.255
IP: 81.0.124.0/23
IP: 81.94.176.0/20
IP: 82.131.160.0 -- 82.131.181.255
IP: 82.131.192.0/22
IP: 82.131.199.0/24
IP: 82.131.208.0/21
IP: 82.141.128.0/18
IP: 82.144.160.0/22
IP: 82.144.168.0/22
IP: 82.144.178.0 -- 82.144.187.255
IP: 82.144.190.0/23
IP: 87.97.64.0/20
IP: 89.186.98.0 -- 89.186.101.255
IP: 89.186.104.0/23
IP: 89.186.116.0/23
IP: 91.82.8.0 -- 91.82.23.255
IP: 91.82.40.0 -- 91.82.55.255
IP: 91.82.58.0/23
IP: 91.82.62.0/23
IP: 91.82.72.0 -- 91.82.81.255
IP: 91.82.84.0 -- 91.82.129.255
IP: 91.82.148.0 -- 91.82.159.255
IP: 91.82.174.0/23
IP: 91.82.184.0/22
IP: 91.82.192.0 -- 91.82.209.255
IP: 91.82.216.0 -- 91.82.227.255
IP: 91.82.236.0/22
IP: 91.82.244.0 -- 91.82.249.255
IP: 91.82.252.0/22
IP: 91.83.40.0 -- 91.83.51.255
IP: 91.83.56.0 -- 91.83.93.255
IP: 91.83.96.0 -- 91.83.101.255
IP: 91.83.104.0 -- 91.83.109.255
IP: 91.83.112.0/21
IP: 91.83.122.0 -- 91.83.135.255
IP: 91.83.146.0 -- 91.83.153.255
IP: 91.83.156.0 -- 91.83.179.255
IP: 91.83.208.0 -- 91.83.251.255
IP: 91.83.254.0/23
IP: 94.125.248.0/21
IP: 185.50.28.0/22
IP: 193.68.32.0/19
IP: 193.91.64.0/19
IP: 193.226.194.0 -- 193.226.211.255
IP: 193.226.216.0 -- 193.226.225.255
IP: 193.226.228.0/22
IP: 193.226.234.0 -- 193.226.237.255
IP: 193.226.242.0/23
IP: 193.226.250.0 -- 193.226.255.255
IP: 194.143.224.0/19
IP: 194.169.253.0/24
IP: 195.184.0.0/19
IP: 212.24.160.0/19
IP: 212.108.192.0/18
IP: 213.16.64.0/18
IP: 213.163.0.0/18
IP: 213.197.64.0/21
IP: 213.197.96.0/19
IP: 213.253.192.0/18
IP: 217.150.128.0/20
IP: 2001:1aa0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ec:80:ae:d0:91:cc:56:14:89:4d:60:8a:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:75:94:1e:ee:02:30:73:d2:fe:03:be:0c:
82:1f:aa:c4:c2:ae:2f:20:8f:ad:b0:86:07:d8:f3:
85:04:e5:41:3a:b7:61:c1:82:ac:c2:14:ed:b4:f8:
a6:c5:10:08:6e:7f:31:0c:50:3f:42:60:f2:e1:a3:
4a:54:e1:79:06:6b:dd:5c:3a:74:9d:7c:49:af:02:
b4:12:3a:62:73:d7:92:01:5a:0e:3e:39:15:e1:ad:
0c:b2:5e:14:45:2b:7e:7d:c9:61:32:8a:82:14:7f:
21:bf:5f:42:a0:6e:ec:3d:ce:c6:e1:ef:99:09:a3:
ce:aa:d4:1b:bf:1f:d7:24:a3:5f:44:e1:60:0d:cb:
48:28:38:ea:63:ab:ea:c6:5c:42:32:47:4f:79:6a:
fe:a7:76:1c:57:00:7a:7c:9e:8d:20:9f:e0:6e:73:
09:50:30:a4:25:5b:c9:54:5e:25:8c:4b:29:ec:3d:
d1:19:64:46:43:40:58:cf:a5:50:1d:b8:47:85:6e:
0b:94:cc:03:fc:40:35:f2:f4:9d:5c:8a:72:46:fc:
2c:ca:37:10:e4:9b:65:61:99:67:cc:05:d6:8f:fd:
bd:20:95:0d:97:b2:0e:3b:bf:03:cd:fc:46:40:ce:
33:be:9d:7a:c1:e3:11:05:13:76:ca:4f:01:f2:1d:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.192.0/22
62.77.200.0-62.77.239.255
62.77.242.0-62.77.247.255
79.120.128.0/19
79.120.168.0/23
79.120.176.0-79.120.247.255
79.120.250.0/23
81.0.64.0-81.0.81.255
81.0.88.0/23
81.0.96.0/23
81.0.100.0-81.0.107.255
81.0.110.0-81.0.121.255
81.0.124.0/23
81.94.176.0/20
82.131.160.0-82.131.181.255
82.131.192.0/22
82.131.199.0/24
82.131.208.0/21
82.141.128.0/18
82.144.160.0/22
82.144.168.0/22
82.144.178.0-82.144.187.255
82.144.190.0/23
87.97.64.0/20
89.186.98.0-89.186.101.255
89.186.104.0/23
89.186.116.0/23
91.82.8.0-91.82.23.255
91.82.40.0-91.82.55.255
91.82.58.0/23
91.82.62.0/23
91.82.72.0-91.82.81.255
91.82.84.0-91.82.129.255
91.82.148.0-91.82.159.255
91.82.174.0/23
91.82.184.0/22
91.82.192.0-91.82.209.255
91.82.216.0-91.82.227.255
91.82.236.0/22
91.82.244.0-91.82.249.255
91.82.252.0/22
91.83.40.0-91.83.51.255
91.83.56.0-91.83.93.255
91.83.96.0-91.83.101.255
91.83.104.0-91.83.109.255
91.83.112.0/21
91.83.122.0-91.83.135.255
91.83.146.0-91.83.153.255
91.83.156.0-91.83.179.255
91.83.208.0-91.83.251.255
91.83.254.0/23
94.125.248.0/21
185.50.28.0/22
193.68.32.0/19
193.91.64.0/19
193.226.194.0-193.226.211.255
193.226.216.0-193.226.225.255
193.226.228.0/22
193.226.234.0-193.226.237.255
193.226.242.0/23
193.226.250.0-193.226.255.255
194.143.224.0/19
194.169.253.0/24
195.184.0.0/19
212.24.160.0/19
212.108.192.0/18
213.16.64.0/18
213.163.0.0/18
213.197.64.0/21
213.197.96.0/19
213.253.192.0/18
217.150.128.0/20
IPv6:
2001:1aa0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8696
12301
20523
20922
34588
Signature Algorithm: sha256WithRSAEncryption
86:69:d4:18:5f:34:33:63:36:d6:8f:b6:a5:7f:7a:6c:4f:51:
15:09:b2:52:f1:a8:63:0e:1d:d7:62:ba:12:77:b1:03:de:19:
aa:c9:03:6b:c6:8a:49:74:44:7c:69:50:a5:55:ae:ff:c4:13:
99:fa:2f:e0:f2:ab:a8:f0:8a:39:ef:aa:47:bc:a3:99:89:ca:
8c:ae:b2:64:25:f0:26:c5:ee:5d:a8:50:2f:33:9c:03:da:77:
b9:e4:ae:89:d2:6e:19:7b:9c:a1:99:57:15:de:50:72:02:94:
97:a4:2b:d0:29:f9:40:ed:c9:da:4f:80:67:1c:fe:94:fe:45:
34:ae:57:db:0c:19:0d:f2:f8:5c:8b:ed:20:21:2d:b1:7a:c2:
36:70:f7:c6:3c:8b:8f:d2:6c:ff:d1:36:5e:6b:9a:30:af:d8:
f2:fe:5c:7c:bd:c7:cd:7e:4c:ca:6e:5e:7c:13:2f:06:5b:64:
35:fb:7c:f3:fe:53:41:81:48:e6:36:06:8b:35:5a:64:a3:d7:
54:48:5d:be:93:70:d2:72:23:93:bd:77:59:93:6b:8e:cb:bc:
70:bb:74:ee:a9:81:70:59:c9:b1:c0:6e:44:6b:93:02:60:ad:
f4:ab:fe:aa:f9:99:fb:1d:4b:43:2f:4d:5a:ce:3a:fa:43:69:
62:d9:92:d5
-----BEGIN CERTIFICATE-----
MIIITjCCBzagAwIBAgISAZQkROyArtCRzFYUiU1gioB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUl1lB7uAjBz0v4DvgyCH6rEwq4v
II+tsIYH2POFBOVBOrdhwYKswhTttPimxRAIbn8xDFA/QmDy4aNKVOF5BmvdXDp0
nXxJrwK0Ejpic9eSAVoOPjkV4a0Msl4URSt+fclhMoqCFH8hv19CoG7sPc7G4e+Z
CaPOqtQbvx/XJKNfROFgDctIKDjqY6vqxlxCMkdPeWr+p3YcVwB6fJ6NIJ/gbnMJ
UDCkJVvJVF4ljEsp7D3RGWRGQ0BYz6VQHbhHhW4LlMwD/EA18vSdXIpyRvwsyjcQ
5JtlYZlnzAXWj/29IJUNl7IOO78DzfxGQM4zvp16weMRBRN2yk8B8h2rRwIDAQAB
o4IFWjCCBVYwHQYDVR0OBBYEFL+wl6NsIyXRAx/0CRugCoZFnUKIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2YyYzVl
OC04ZDM3LTQ4MzgtYTMzYi1lY2M0OWJkYzJhZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZjJjNWU4
LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRFREhfUUpH
NkFLaGtXZFFvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICxwYIKwYB
BQUHAQcBAf8EggK2MIICsjCCAp8EAgABMIIClwMEAj5NwDAMAwQDPk3IAwQEPk3g
MAwDBAE+TfIDBAM+TfADBAVPeIADBAFPeKgwDAMEBE94sAMEA0948AMEAU94+jAM
AwQGUQBAAwQBUQBQAwQBUQBYAwQBUQBgMAwDBAJRAGQDBAJRAGgwDAMEAVEAbgME
AVEAeAMEAVEAfAMEBFFesDAMAwQFUoOgAwQBUoO0AwQCUoPAAwQAUoPHAwQDUoPQ
AwQGUo2AAwQCUpCgAwQCUpCoMAwDBAFSkLIDBAJSkLgDBAFSkL4DBARXYUAwDAME
AVm6YgMEAVm6ZAMEAVm6aAMEAVm6dDAMAwQDW1IIAwQDW1IQMAwDBANbUigDBANb
UjADBAFbUjoDBAFbUj4wDAMEA1tSSAMEAVtSUDAMAwQCW1JUAwQBW1KAMAwDBAJb
UpQDBAVbUoADBAFbUq4DBAJbUrgwDAMEBltSwAMEAVtS0DAMAwQDW1LYAwQCW1Lg
AwQCW1LsMAwDBAJbUvQDBAFbUvgDBAJbUvwwDAMEA1tTKAMEAltTMDAMAwQDW1M4
AwQBW1NcMAwDBAVbU2ADBAFbU2QwDAMEA1tTaAMEAVtTbAMEA1tTcDAMAwQBW1N6
AwQDW1OAMAwDBAFbU5IDBAFbU5gwDAMEAltTnAMEAltTsDAMAwQEW1PQAwQCW1P4
AwQBW1P+AwQDXn34AwQCuTIcAwQFwUQgAwQFwVtAMAwDBAHB4sIDBALB4tAwDAME
A8Hi2AMEAcHi4AMEAsHi5DAMAwQBweLqAwQBweLsAwQBweLyMAsDBAHB4voDAwDB
4gMEBcKP4AMEAMKp/QMEBcO4AAMEBdQYoAMEBtRswAMEBtUQQAMEBtWjAAMEA9XF
QAMEBdXFYAMEBtX9wAMEBNmWgDANBAIAAjAHAwUDIAEaoDAqBggrBgEFBQcBCAEB
/wQbMBmgFzAVAgIh+AICMA0CAlArAgJRugIDAIccMA0GCSqGSIb3DQEBCwUAA4IB
AQCGadQYXzQzYzbWj7alf3psT1EVCbJS8ahjDh3XYroSd7ED3hmqyQNrxopJdER8
aVClVa7/xBOZ+i/g8quo8Io576pHvKOZicqMrrJkJfAmxe5dqFAvM5wD2ne55K6J
0m4Ze5yhmVcV3lByApSXpCvQKflA7cnaT4BnHP6U/kU0rlfbDBkN8vhci+0gIS2x
esI2cPfGPIuP0mz/0TZea5owr9jy/lx8vcfNfkzKbl58Ey8GW2Q1+3zz/lNBgUjm
NgaLNVpko9dUSF2+k3DSciOTvXdZk2uOy7xwu3TuqYFwWcmxwG5Ea5MCYK30q/6q
+Zn7HUtDL01azjr6Q2li2ZLV
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:39 2025 by rpki-client