Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
File: xPvoQiQycn04dLFWS66sioBVey0.cer (raw, json)
Hash identifier: P9JZ8XOk3pFmAGmxUy4Bp+jrXxbpd0DQNHWZWJmDF1A=
Subject key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748888C80CF12307D62F1C2A07A3673
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42201
IP: 45.130.84.0/22
IP: 45.148.4.0/22
IP: 91.240.64.0/22
IP: 193.104.211.0/24
IP: 193.104.222.0/24
IP: 2a10:a000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:88:8c:80:cf:12:30:7d:62:f1:c2:a0:7a:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:19:c0:53:e0:09:05:99:8c:31:5b:e2:8e:
5e:90:15:b6:43:46:77:fc:7d:57:2a:ba:c0:b2:75:
01:a5:c7:5c:09:bd:24:98:01:3d:74:c0:3a:c4:75:
8d:16:f7:c4:6e:97:92:fa:b8:00:e5:95:91:2d:87:
97:13:a0:34:c3:c1:9e:ed:7f:8d:c0:60:36:13:16:
60:54:41:c9:d1:e3:c8:6d:d6:9a:86:44:2b:2b:fd:
22:25:22:f4:17:b2:36:ce:ab:98:01:b2:99:a9:f0:
c8:07:11:a7:c5:b8:a0:e1:38:19:4f:c4:60:7a:1f:
a0:b3:4a:af:4d:25:f4:7d:78:6c:7a:78:69:c9:43:
58:46:77:dc:3b:be:2d:bc:6b:0e:95:58:a3:0b:ae:
31:70:ea:1c:18:4e:9e:55:97:bd:9d:fb:9e:69:d0:
8f:6b:a7:e0:75:f2:60:18:64:d7:fe:6e:43:b0:07:
ab:c1:42:3e:2b:f5:52:a1:04:78:e8:de:ed:e6:6e:
a3:d2:05:39:38:4e:0a:3a:10:f0:4a:31:4e:af:ce:
8b:68:19:7f:55:fc:5b:f8:2c:d4:8c:4e:b2:8f:e7:
56:f9:ed:f8:11:6c:d9:78:5e:1e:30:95:a6:82:c0:
0b:6d:8f:8f:7f:64:70:f0:ab:39:b3:32:cf:b8:25:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.84.0/22
45.148.4.0/22
91.240.64.0/22
193.104.211.0/24
193.104.222.0/24
IPv6:
2a10:a000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42201
Signature Algorithm: sha256WithRSAEncryption
09:79:af:5a:c0:25:d4:06:cc:65:d2:0f:87:b6:6d:5f:9b:7c:
2f:8a:0f:cc:16:d5:d2:90:80:7d:b0:48:48:f1:82:bd:48:9d:
89:73:51:56:c5:3a:00:63:db:64:66:f2:bd:9f:f1:39:f1:c4:
0f:50:51:e8:9e:1e:a7:d8:5e:b0:6d:89:73:85:7f:04:87:44:
ed:ed:d8:81:aa:e8:b9:38:fa:56:ee:6e:c3:f4:e7:e9:e2:32:
a6:f1:c6:3a:52:03:82:72:9d:c2:a8:7e:84:73:c8:1f:9f:85:
67:94:35:01:09:d0:de:ca:a7:05:86:b8:39:df:53:54:63:47:
be:a6:29:12:83:19:6f:0b:7e:c7:08:49:fc:ec:22:9c:0b:4d:
2c:67:8c:04:73:d9:82:2c:2a:ee:e8:d6:25:a6:a3:fb:b9:2e:
8c:84:b8:87:40:ea:06:6b:f3:4f:45:37:97:63:a4:b9:39:98:
51:d3:55:6c:6b:15:41:e6:97:3e:09:df:d1:a6:a0:80:20:61:
7b:ae:ad:3c:43:28:f6:68:d1:c2:19:07:ee:76:2b:40:e6:c7:
c6:56:29:3e:27:ed:8c:93:16:bd:d0:50:37:85:ae:d6:a8:04:
fa:41:cc:83:4e:d3:c1:29:a6:db:b7:30:e5:8c:1d:02:c6:5c:
21:e9:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:54 2025 by rpki-client