Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
File: yciBJHytvL9SqirXYsx0VKeocm4.cer (raw, json)
Hash identifier: EL0j+QNeIUrPoVEUXpZG6x06KNtneeu59MJKWGIx0wc=
Subject key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424457EA2371A087EC6B05493FA585351
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206405
IP: 37.122.192.0/21
IP: 185.156.188.0/22
IP: 2a00:9e40::/32
IP: 2a0d:5400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7e:a2:37:1a:08:7e:c6:b0:54:93:fa:58:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:f8:ba:df:f0:1e:5c:3e:ea:78:f2:90:8e:
42:79:e8:c1:1a:c8:05:78:f9:46:46:79:2f:fe:17:
40:24:ee:ec:79:4e:2a:29:be:b1:99:5a:d0:cf:a4:
02:e4:1b:aa:04:d3:fe:35:00:35:86:d1:4b:60:49:
c5:9e:17:45:72:5d:23:a3:d1:1d:98:46:ce:0c:05:
67:dd:89:8e:e8:cb:9f:9d:dc:0f:37:7b:be:e2:ac:
d2:d8:9e:e4:38:1a:d3:a7:05:eb:99:56:a0:c8:04:
c0:8a:18:f7:36:07:da:62:48:ff:72:2e:4c:4d:b3:
79:4d:a8:f8:41:2d:52:c2:e1:72:46:54:e4:8e:64:
90:8d:01:f9:a7:9c:8d:06:00:c1:2a:ea:7c:b9:82:
4c:5c:30:e9:54:ce:4e:3f:53:f3:6e:07:18:ee:d1:
8d:ff:6c:00:89:f5:6d:64:96:a9:70:26:e8:18:9c:
7c:80:fa:39:c5:4c:b3:e0:8a:80:e4:c1:c1:b6:17:
75:ba:34:6e:0e:04:7f:5b:06:b4:e0:2f:a5:d9:9a:
6e:d4:89:52:67:9a:68:b7:7d:0e:04:39:34:50:fb:
16:08:b0:56:28:1a:ac:76:63:c0:69:01:b2:1b:21:
c7:43:c1:e8:ba:02:9e:d2:b4:56:3c:29:a1:90:7c:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.192.0/21
185.156.188.0/22
IPv6:
2a00:9e40::/32
2a0d:5400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206405
Signature Algorithm: sha256WithRSAEncryption
8a:37:b2:8b:77:d4:be:02:16:d0:f7:4c:91:54:e6:c1:73:df:
e9:85:7e:08:f1:ff:05:bd:11:6a:90:b5:f3:8f:d7:a8:06:4d:
8c:d7:0d:66:68:9f:13:ff:fa:4d:15:80:bf:3e:f7:a5:bf:25:
cc:07:38:5f:bf:18:b4:f0:e4:9f:43:5c:9e:d0:f5:e9:7a:c8:
23:3b:dc:86:3d:8a:ec:a8:a1:ad:ea:9a:7d:02:f5:89:2f:c1:
9a:fe:2c:75:b4:e0:0e:e7:94:27:85:66:55:73:e5:c1:0e:53:
23:f0:59:33:15:96:9a:bd:90:65:11:5e:3e:36:5f:bb:ad:2a:
83:28:66:5c:88:44:ed:73:6e:18:58:6a:e9:41:36:84:9f:e5:
db:48:54:47:dd:91:f0:1e:1f:46:4b:1d:3a:9d:61:e4:64:63:
c4:91:09:26:60:be:73:db:bd:be:96:55:46:b3:04:16:a0:17:
75:06:90:97:55:11:42:27:43:97:8e:b5:85:1a:08:fc:5e:64:
b5:7f:cc:d2:5f:c0:be:e8:8b:2a:12:c6:e6:a9:80:2d:33:3b:
63:10:9a:7f:ca:a8:f7:d6:5c:35:33:41:ed:37:68:2c:49:18:
2f:4c:74:f6:63:6e:33:a1:19:8b:ee:70:c9:a7:21:18:b8:5c:
d2:63:63:ff
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQkRX6iNxoIfsawVJP6WFNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWM4ODEyNDdjYWRiY2JmNTJhYTJhZDc2MmNjNzQ1NGE3YTg3MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxer4ut/wHlw+6njykI5CeejBGsgF
ePlGRnkv/hdAJO7seU4qKb6xmVrQz6QC5BuqBNP+NQA1htFLYEnFnhdFcl0jo9Ed
mEbODAVn3YmO6MufndwPN3u+4qzS2J7kOBrTpwXrmVagyATAihj3NgfaYkj/ci5M
TbN5Taj4QS1SwuFyRlTkjmSQjQH5p5yNBgDBKup8uYJMXDDpVM5OP1PzbgcY7tGN
/2wAifVtZJapcCboGJx8gPo5xUyz4IqA5MHBthd1ujRuDgR/Wwa04C+l2Zpu1IlS
Z5pot30OBDk0UPsWCLBWKBqsdmPAaQGyGyHHQ8HougKe0rRWPCmhkHzb8wIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFMnIgSR8rby/Uqoq12LMdFSnqHJuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzZkNmI1
My05NWE5LTRkNjAtYjQ2ZC03ZWZlOTA1ZmYyOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNmQ2YjUz
LTk1YTktNGQ2MC1iNDZkLTdlZmU5MDVmZjI5MS8xL3ljaUJKSHl0dkw5U3FpclhZ
c3gwVktlb2NtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQDJXrAAwQCuZy8MBQEAgACMA4DBQAqAJ5AAwUD
Kg1UADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJkUwDQYJKoZIhvcNAQELBQAD
ggEBAIo3sot31L4CFtD3TJFU5sFz3+mFfgjx/wW9EWqQtfOP16gGTYzXDWZonxP/
+k0VgL8+96W/JcwHOF+/GLTw5J9DXJ7Q9el6yCM73IY9iuyooa3qmn0C9YkvwZr+
LHW04A7nlCeFZlVz5cEOUyPwWTMVlpq9kGURXj42X7utKoMoZlyIRO1zbhhYaulB
NoSf5dtIVEfdkfAeH0ZLHTqdYeRkY8SRCSZgvnPbvb6WVUazBBagF3UGkJdVEUIn
Q5eOtYUaCPxeZLV/zNJfwL7oiyoSxuapgC0zO2MQmn/KqPfWXDUzQe03aCxJGC9M
dPZjbjOhGYvucMmnIRi4XNJjY/8=
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:21 2025 by rpki-client