Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
File: v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer (raw, json)
Hash identifier: LrDJKJIApzcoD4LtKEkr8A6IlCMpYeVTeyhvJkwzQaM=
Subject key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5E2F7EF5A90D0FC16826107119D80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57112
AS: 197985
AS: 203623
IP: 5.104.112.0/20
IP: 31.177.32.0/21
IP: 45.84.40.0/22
IP: 45.91.56.0/22
IP: 45.92.224.0/22
IP: 81.30.64.0/20
IP: 86.111.208.0/22
IP: 185.23.140.0/22
IP: 185.33.152.0/22
IP: 185.38.152.0/22
IP: 185.70.236.0/22
IP: 185.72.160.0/22
IP: 185.82.192.0/22
IP: 185.87.104.0/22
IP: 185.87.116.0/22
IP: 185.87.156.0/22
IP: 185.103.236.0/22
IP: 185.113.172.0/22
IP: 185.127.108.0/22
IP: 185.133.108.0/22
IP: 185.192.144.0/22
IP: 185.236.16.0/22
IP: 217.76.16.0/20
IP: 2a06:c8c0::/29
IP: 2a0a:4980::/29
IP: 2a0e:c40::/29
IP: 2a0e:9680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e2:f7:ef:5a:90:d0:fc:16:82:61:07:11:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:ac:27:c7:77:23:61:31:e5:bc:7e:8e:be:
f1:ae:d1:01:e9:5b:12:0c:7d:68:c1:6f:1a:22:60:
0c:e7:0e:23:84:23:25:37:94:d5:78:13:88:68:13:
96:f4:cf:13:3c:f3:f2:74:e0:f9:6d:1a:01:64:25:
fd:a4:43:cd:73:1d:4d:5d:d9:f0:fe:21:06:41:af:
ac:62:15:20:32:36:cf:fb:aa:8b:56:8d:89:2e:12:
f5:e9:d9:01:80:75:90:f8:1d:ec:bf:22:72:6a:62:
62:a0:73:cd:cb:43:dc:f3:de:c3:aa:ab:91:22:57:
b8:ed:5c:87:1a:a4:f1:c1:90:77:37:be:dc:61:65:
d8:21:2c:c3:89:87:30:88:02:06:a6:be:a5:e6:73:
1a:d1:61:01:1c:7c:ff:a8:64:6c:19:33:4e:47:67:
e3:15:f1:9b:d1:30:26:6a:02:5f:4a:8d:20:1f:0e:
c0:03:40:0a:8a:b3:e2:60:5d:e6:ea:8b:47:b9:d5:
08:da:80:5b:d1:39:83:63:28:7d:d3:64:b9:f5:db:
cd:ef:ea:cf:61:29:5a:01:13:18:75:47:40:62:5c:
96:3a:72:6f:88:ef:f9:af:8b:7b:36:f2:13:15:bf:
e3:f3:3a:82:33:23:31:69:fa:6a:6c:57:ed:81:7d:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.112.0/20
31.177.32.0/21
45.84.40.0/22
45.91.56.0/22
45.92.224.0/22
81.30.64.0/20
86.111.208.0/22
185.23.140.0/22
185.33.152.0/22
185.38.152.0/22
185.70.236.0/22
185.72.160.0/22
185.82.192.0/22
185.87.104.0/22
185.87.116.0/22
185.87.156.0/22
185.103.236.0/22
185.113.172.0/22
185.127.108.0/22
185.133.108.0/22
185.192.144.0/22
185.236.16.0/22
217.76.16.0/20
IPv6:
2a06:c8c0::/29
2a0a:4980::/29
2a0e:c40::/29
2a0e:9680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57112
197985
203623
Signature Algorithm: sha256WithRSAEncryption
71:50:5a:6a:d3:46:6e:e5:85:50:74:cb:1f:92:ad:e0:b1:61:
22:a0:eb:dc:08:34:21:2d:74:a7:8f:f3:2a:82:df:db:a3:3b:
ec:c4:76:17:75:4b:a0:dd:e2:d7:83:39:49:8c:24:74:9e:af:
e9:06:11:46:91:43:32:97:c0:43:3f:62:33:9a:43:54:77:f1:
a5:f6:b0:6c:2a:5c:6a:f9:ed:60:24:e3:3a:bc:0c:6c:20:e7:
5b:12:2b:07:9e:7d:87:f7:66:59:c1:a5:1c:d0:f3:df:f5:56:
3b:75:39:d9:52:15:fb:73:cc:0d:4a:82:3c:46:bf:e8:0b:eb:
b2:60:71:3c:cb:29:67:66:1b:34:b9:5b:59:c3:fe:ae:2b:d9:
4e:ca:da:3b:4f:f7:fc:59:57:58:c6:c4:7c:ba:1e:dc:8c:b9:
2f:76:19:b3:64:55:c5:68:15:31:17:3b:bc:f3:67:e6:e4:12:
71:c4:0a:fa:f1:e1:24:e9:92:a3:f7:30:99:71:0d:d3:31:ac:
8c:c4:66:c8:f3:64:b0:09:26:74:eb:39:8d:04:75:bb:63:a4:
48:48:52:41:06:37:e8:dc:a5:d6:2d:52:2f:aa:6d:8c:ba:0b:
1e:2b:68:e2:93:aa:86:7c:8d:a3:44:62:a9:23:b8:f3:b2:f8:
4d:8f:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:53:18 2025 by rpki-client