Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
File: yE1hzRftkuVLszl_HlprOQSsbwU.cer (raw, json)
Hash identifier: 5KBHjZb+uFFJc6IG19r2WXCBvn6AAKfWNdekeTzKybg=
Subject key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274859FDAF0E98AA70CAA52003017B4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16376
AS: 39537
AS: 48973
AS: 51491
AS: 201657
AS: 203425
IP: 31.210.128.0/21
IP: 37.35.88.0/21
IP: 45.145.180.0/22
IP: 87.237.64.0/21
IP: 93.95.8.0/21
IP: 94.190.240.0/21
IP: 94.199.184.0/21
IP: 109.69.80.0/21
IP: 151.236.208.0/21
IP: 185.11.240.0/22
IP: 185.31.252.0/22
IP: 185.33.184.0/22
IP: 185.49.236.0/22
IP: 185.68.0.0/22
IP: 185.71.24.0/22
IP: 185.122.216.0/22
IP: 195.94.112.0/20
IP: 195.189.124.0/22
IP: 2a00:e620::/32
IP: 2a01:500::/29
IP: 2a01:b280::/29
IP: 2a03:25e0::/32
IP: 2a04:5ac0::/29
IP: 2a0a:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:59:fd:af:0e:98:aa:70:ca:a5:20:03:01:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:48:36:04:69:f8:5e:81:4d:94:c1:f4:ff:
9e:f3:a7:81:66:c1:ea:03:4a:f1:a8:a3:48:7a:c7:
25:b9:0f:61:d0:81:0f:40:0d:00:54:dc:4a:fa:62:
f3:7e:28:d9:de:36:7d:3a:53:e4:06:9d:b5:0c:c6:
91:c6:fe:dc:df:2f:d9:03:52:d3:7e:07:9b:ac:6e:
5c:34:b0:df:07:d6:b7:0b:39:8c:e2:38:49:fa:0c:
d4:de:6f:eb:81:14:e8:0c:42:b4:e9:77:ad:30:0e:
06:9b:41:e2:8a:51:5c:27:d2:f5:98:0f:f1:de:85:
db:92:2f:00:b0:5b:96:b5:51:d5:d9:73:f0:03:e8:
5e:ad:e8:3e:1e:b8:76:61:e0:3a:36:7a:dd:cd:61:
3f:26:ef:94:0a:2c:02:88:b0:9a:57:03:f1:7a:b6:
c6:28:ef:e9:f9:0c:7a:e4:94:05:ac:aa:ba:25:65:
f6:2c:fa:8c:3f:f4:4a:bb:c7:ad:02:e8:44:a3:a2:
d5:f3:11:fa:2a:57:b1:b6:94:08:f0:c6:c5:be:c9:
d7:d9:22:6a:6d:8a:bc:34:d2:91:ba:34:a3:44:f7:
6b:e5:47:7a:3b:b8:90:e3:14:29:68:d3:7b:9b:4a:
7b:6d:64:0d:88:6f:a3:7d:64:bc:8d:e5:67:be:f8:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.128.0/21
37.35.88.0/21
45.145.180.0/22
87.237.64.0/21
93.95.8.0/21
94.190.240.0/21
94.199.184.0/21
109.69.80.0/21
151.236.208.0/21
185.11.240.0/22
185.31.252.0/22
185.33.184.0/22
185.49.236.0/22
185.68.0.0/22
185.71.24.0/22
185.122.216.0/22
195.94.112.0/20
195.189.124.0/22
IPv6:
2a00:e620::/32
2a01:500::/29
2a01:b280::/29
2a03:25e0::/32
2a04:5ac0::/29
2a0a:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16376
39537
48973
51491
201657
203425
Signature Algorithm: sha256WithRSAEncryption
a7:da:55:04:6f:13:62:e0:07:61:74:0f:ed:f3:7e:cf:20:80:
45:88:15:94:15:e6:ee:8d:4c:80:cb:34:37:2a:ee:81:c1:c6:
8f:f2:fd:bc:b5:b4:d7:0d:71:36:66:83:b8:94:62:48:fc:ef:
37:4d:ce:de:ed:37:bd:94:37:72:d6:ca:d0:3f:e5:27:b7:f7:
2c:67:37:3e:b4:39:61:14:f8:f8:ba:98:0b:a2:5f:dc:41:b7:
fa:91:51:93:69:97:86:b0:cb:b4:1d:54:60:d5:38:50:e0:a1:
21:74:6d:05:e3:a1:c2:3b:18:71:75:4c:f6:dc:da:f6:90:40:
4f:85:5e:e7:d0:85:48:19:6b:f5:6f:b8:3e:c6:c3:f2:d0:8e:
08:c0:dd:a6:d8:bd:f8:7a:7d:db:bd:02:62:05:02:26:99:b2:
c5:a8:40:3b:45:e4:e5:46:48:5b:cc:8d:a2:cd:f3:76:91:8a:
f7:a1:72:7e:55:1c:5d:b2:fb:67:b1:a2:de:61:42:1b:98:d3:
71:b6:cb:5e:42:75:f2:d1:3c:e2:64:e2:83:60:ad:45:fc:16:
a4:58:05:42:be:59:35:4a:a6:d5:64:e4:02:05:9b:10:18:39:
b5:8f:b9:9f:64:d3:b7:c9:ba:2e:55:64:15:38:58:b5:df:e7:
31:e4:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:08 2025 by rpki-client