Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
File: ylIg5T5PgcoljM_qGHKAKA9fYho.cer (raw, json)
Hash identifier: OFoP1DcO/dVjwZofu5zQUexPde4gJatWrNAlWgY0ZEM=
Subject key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445A358AD4814F9435DE345123703E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.5.24.0/22
IP: 2a02:78c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:58:ad:48:14:f9:43:5d:e3:45:12:37:03:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:61:5b:3a:ec:28:8a:e3:42:a8:a8:87:85:
8d:fe:27:3a:c3:af:68:43:84:13:51:e5:91:a9:80:
62:24:f7:ca:51:ca:d2:fa:cd:b3:5f:ef:55:68:67:
4a:2d:5a:4a:5f:9c:9c:22:d7:4f:21:ba:ea:d7:4e:
f8:66:3c:2c:7e:4f:de:26:74:54:ca:35:4b:05:89:
d7:1b:91:58:cc:ea:62:76:35:79:fc:d3:5d:3e:45:
3f:e1:e5:ca:1a:2b:2f:62:98:5b:86:60:be:63:b7:
d2:d1:1d:a3:f8:9a:97:02:4d:db:49:69:b4:2f:39:
d2:b1:06:76:6c:f2:e0:d0:39:8d:8c:d0:57:db:4d:
51:05:33:c9:84:a6:09:15:63:c6:70:66:69:3d:5b:
23:a4:ae:fe:d3:af:eb:79:d4:7e:71:85:83:a0:30:
ee:f3:b5:e4:ff:86:c7:54:93:d9:fc:5f:f5:63:af:
e1:ff:34:37:24:81:b2:6a:85:b9:6d:e2:61:bf:4c:
6f:42:e9:42:ad:b4:02:5b:c5:fb:bb:1a:0c:f9:4d:
16:85:82:68:b2:4a:79:76:f0:60:63:fb:2a:95:eb:
14:08:69:b9:76:5f:b0:38:fe:1d:39:7a:4f:40:f5:
90:58:6f:86:e7:c3:a3:18:67:c9:f5:bc:8d:98:a1:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.24.0/22
IPv6:
2a02:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:22:5e:8f:9b:01:7d:7f:68:28:95:d7:81:ee:f6:5e:33:e0:
52:1f:a0:fd:c4:a8:c4:63:5e:3b:ce:8e:96:1c:5a:e0:13:3a:
b1:f1:70:cb:10:a9:a2:7e:f5:2b:55:ea:43:d8:0b:02:89:b8:
d9:92:1f:63:df:b3:31:3b:90:61:f0:31:f8:5b:23:c3:04:2b:
6c:d7:b5:e8:19:2c:c1:9e:49:f9:c9:c4:bc:77:db:77:72:60:
69:99:dc:22:b7:94:58:73:0f:0a:46:ad:15:1c:53:58:37:53:
e5:0d:86:d7:34:92:6d:f2:b6:69:d3:5a:26:f5:93:50:55:90:
00:52:a2:5b:94:1d:7e:9d:2a:0d:4e:13:e1:0b:c3:fc:0a:59:
8b:81:11:47:0d:0d:17:d0:3c:fe:68:09:c7:d2:f6:75:9b:82:
87:ba:4f:0c:3c:01:bb:1f:fb:44:04:e4:37:17:1e:c2:70:b3:
48:a0:c8:33:78:a5:49:a8:5a:12:75:ee:9c:db:78:f4:2b:25:
32:42:67:8e:32:da:f1:91:6e:f4:c5:53:7c:13:e2:8b:60:7c:
4e:ff:fe:f7:29:cc:d3:ca:aa:8f:1f:d1:8b:4f:56:9b:66:b5:
37:b5:37:46:c3:27:e4:7f:b2:b7:5c:51:e2:99:f1:4b:3d:14:
73:5b:b4:f6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQkRaNYrUgU+UNd40USNwPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTUyMjBlNTNlNGY4MWNhMjU4Y2NmZWExODcyODAyODBmNWY2MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1BhWzrsKIrjQqioh4WN/ic6w69o
Q4QTUeWRqYBiJPfKUcrS+s2zX+9VaGdKLVpKX5ycItdPIbrq1074Zjwsfk/eJnRU
yjVLBYnXG5FYzOpidjV5/NNdPkU/4eXKGisvYphbhmC+Y7fS0R2j+JqXAk3bSWm0
LznSsQZ2bPLg0DmNjNBX201RBTPJhKYJFWPGcGZpPVsjpK7+06/redR+cYWDoDDu
87Xk/4bHVJPZ/F/1Y6/h/zQ3JIGyaoW5beJhv0xvQulCrbQCW8X7uxoM+U0WhYJo
skp5dvBgY/sqlesUCGm5dl+wOP4dOXpPQPWQWG+G58OjGGfJ9byNmKG+LQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMpSIOU+T4HKJYzP6hhygCgPX2IaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzQyNDk0
Ny0xYzZhLTQ4ZTktYjI4OS1mMjNjNWE1MzE4MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNDI0OTQ3
LTFjNmEtNDhlOS1iMjg5LWYyM2M1YTUzMTgyMy8xL3lsSWc1VDVQZ2NvbGpNX3FH
SEtBS0E5Zlloby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQUYMA0EAgACMAcDBQAqAnjAMA0GCSqGSIb3
DQEBCwUAA4IBAQCRIl6PmwF9f2goldeB7vZeM+BSH6D9xKjEY147zo6WHFrgEzqx
8XDLEKmifvUrVepD2AsCibjZkh9j37MxO5Bh8DH4WyPDBCts17XoGSzBnkn5ycS8
d9t3cmBpmdwit5RYcw8KRq0VHFNYN1PlDYbXNJJt8rZp01om9ZNQVZAAUqJblB1+
nSoNThPhC8P8ClmLgRFHDQ0X0Dz+aAnH0vZ1m4KHuk8MPAG7H/tEBOQ3Fx7CcLNI
oMgzeKVJqFoSde6c23j0KyUyQmeOMtrxkW70xVN8E+KLYHxO//73KczTyqqPH9GL
T1abZrU3tTdGwyfkf7K3XFHimfFLPRRzW7T2
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:46 2025 by rpki-client