Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
File: yq7leeATIY9XE4ZBPixbK8JFqDY.cer (raw, json)
Hash identifier: ZwL/u3lNGW/Y4AW5B4dIVrZW5Vj9YockapdLRoByoLI=
Subject key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FAA07A0EDF97BC7C87327768E4C03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208349
AS: 211933
IP: 5.35.120.0/22
IP: 31.10.6.0/23
IP: 45.134.124.0/22
IP: 77.105.156.0/22
IP: 185.31.133.0/24
IP: 2a0e:7e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:aa:07:a0:ed:f9:7b:c7:c8:73:27:76:8e:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caaee579e013218f571386413e2c5b2bc245a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:ed:9b:10:a6:4f:0d:ac:87:e3:02:ce:4d:
69:db:13:59:ad:48:ac:1f:9f:fd:42:8a:ff:0b:2a:
d9:ce:8a:25:f9:d8:5b:e2:5e:e7:88:87:c7:e5:0a:
2d:9d:12:f9:46:ef:16:fb:c9:6f:20:ed:80:c1:93:
42:d2:58:51:1d:53:e3:69:fd:f1:d5:ac:5a:e4:78:
52:b0:08:50:26:a1:1e:b0:87:82:9f:9b:fc:fb:93:
a5:46:4d:b3:4c:07:77:30:6e:47:24:42:c7:93:81:
d9:95:31:5d:e1:b9:f3:fe:91:fa:92:d6:35:c2:59:
de:17:43:82:3c:5e:77:e7:e2:1f:af:ff:3a:7e:a4:
d5:45:0b:d3:dc:16:50:d8:83:a6:df:1c:a1:85:27:
ad:e2:b1:a0:11:ee:98:bf:b3:20:c7:2d:4c:a2:ec:
31:f0:e4:df:32:41:fe:98:af:cd:20:67:54:15:eb:
cf:ea:b8:09:99:56:0a:93:4b:db:01:7e:94:a6:57:
a1:ff:7e:81:fd:9b:36:6e:55:38:d2:22:e0:56:f3:
59:a7:8e:a8:d3:a6:7e:e6:9b:52:e6:f1:e9:21:8a:
75:34:c7:0e:44:74:86:e5:d5:47:12:fa:00:e1:39:
55:a0:a2:27:99:a7:bb:9c:82:10:a8:28:cd:11:8a:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.120.0/22
31.10.6.0/23
45.134.124.0/22
77.105.156.0/22
185.31.133.0/24
IPv6:
2a0e:7e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208349
211933
Signature Algorithm: sha256WithRSAEncryption
51:1e:5c:3f:a6:bd:cf:a9:a0:b3:c1:e5:2e:d1:d7:02:3d:c0:
5b:25:46:e0:6f:a3:62:21:04:00:4c:91:62:b3:bc:c2:0b:18:
a8:dc:7e:19:85:74:72:7e:c2:f8:17:5f:b8:7e:42:15:33:09:
c1:60:4d:0a:b0:e3:45:98:fb:46:7e:5a:95:3f:d3:c1:c8:fe:
71:85:30:45:a5:a9:23:65:52:bb:e2:e3:9f:b4:1b:35:79:b6:
0e:3c:9b:09:ea:94:6f:63:e2:f6:66:5b:17:a3:b6:e7:39:00:
40:4c:22:be:4c:18:e6:46:66:ae:20:be:a2:74:bd:a4:5c:60:
89:79:9c:11:87:fa:b4:a8:8e:09:6d:d2:9e:90:ad:ce:f2:c5:
0f:46:6f:71:e2:90:dd:5b:fa:81:20:a0:be:a4:55:be:f9:1a:
4d:e4:cd:fc:80:26:f2:a0:45:6e:2e:8a:22:74:83:82:cb:4c:
f3:8d:00:14:dd:c0:e8:49:5d:a8:93:5d:56:61:64:5d:b2:fe:
21:d7:55:82:a1:67:b1:4a:f7:c3:7c:eb:75:fd:7d:9b:8a:77:
af:64:48:74:09:24:4b:e2:7e:9c:95:c6:f2:a8:e2:cb:e7:29:
8f:89:9f:56:27:a2:17:67:51:11:e4:fd:41:ad:43:c0:f0:91:
14:41:48:0a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAZQiH6oHoO35e8fIcyd2jkwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWFlZTU3OWUwMTMyMThmNTcxMzg2NDEzZTJjNWIyYmMyNDVhODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMntmxCmTw2sh+MCzk1p2xNZrUis
H5/9Qor/CyrZzool+dhb4l7niIfH5QotnRL5Ru8W+8lvIO2AwZNC0lhRHVPjaf3x
1axa5HhSsAhQJqEesIeCn5v8+5OlRk2zTAd3MG5HJELHk4HZlTFd4bnz/pH6ktY1
wlneF0OCPF535+Ifr/86fqTVRQvT3BZQ2IOm3xyhhSet4rGgEe6Yv7Mgxy1Mouwx
8OTfMkH+mK/NIGdUFevP6rgJmVYKk0vbAX6Upleh/36B/Zs2blU40iLgVvNZp46o
06Z+5ptS5vHpIYp1NMcORHSG5dVHEvoA4TlVoKInmae7nIIQqCjNEYoqUwIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFMqu5XngEyGPVxOGQT4sWyvCRag2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4Lzc1OTg3
NC1lN2YyLTQ1ZmQtODE5ZC1hNWQxMTQ4ZjI1YmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNzU5ODc0
LWU3ZjItNDVmZC04MTlkLWE1ZDExNDhmMjViZC8xL3lxN2xlZUFUSVk5WEU0WkJQ
aXhiSzhKRnFEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQCBSN4AwQBHwoGAwQCLYZ8AwQCTWmcAwQAuR+F
MA0EAgACMAcDBQMqDn5AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMt3QIDAzvd
MA0GCSqGSIb3DQEBCwUAA4IBAQBRHlw/pr3PqaCzweUu0dcCPcBbJUbgb6NiIQQA
TJFis7zCCxio3H4ZhXRyfsL4F1+4fkIVMwnBYE0KsONFmPtGflqVP9PByP5xhTBF
pakjZVK74uOftBs1ebYOPJsJ6pRvY+L2ZlsXo7bnOQBATCK+TBjmRmauIL6idL2k
XGCJeZwRh/q0qI4JbdKekK3O8sUPRm9x4pDdW/qBIKC+pFW++RpN5M38gCbyoEVu
LooidIOCy0zzjQAU3cDoSV2ok11WYWRdsv4h11WCoWexSvfDfOt1/X2binevZEh0
CSRL4n6clcbyqOLL5ymPiZ9WJ6IXZ1ER5P1BrUPA8JEUQUgK
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:28 2025 by rpki-client