Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
File: zbg8_lSJg18pTQr03U2249wl8fM.cer (raw, json)
Hash identifier: EPeEgDCnufnvVmE+HeEPZNjlU3kp1Sr0VqSDxiXsiwM=
Subject key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F66A84B9EDE6BC5A1441F4D865726
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2647
AS: 198528
IP: 57.7.0.0/16
IP: 57.21.0.0/16
IP: 57.35.0.0/16
IP: 57.66.0.0 -- 57.74.255.255
IP: 57.76.0.0 -- 57.83.255.255
IP: 57.86.0.0/15
IP: 57.90.0.0/16
IP: 57.92.0.0/16
IP: 57.96.0.0 -- 57.98.255.255
IP: 57.100.0.0/16
IP: 57.194.0.0/15
IP: 57.197.0.0/16
IP: 57.199.0.0 -- 57.200.255.255
IP: 57.202.0.0/15
IP: 57.205.0.0/16
IP: 57.207.0.0 -- 57.223.255.255
IP: 185.126.35.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:66:a8:4b:9e:de:6b:c5:a1:44:1f:4d:86:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:0d:0d:f4:49:a4:ba:aa:08:63:d3:dd:8b:
94:03:3e:25:09:b7:09:bb:3e:51:17:09:ae:d4:eb:
5b:aa:5f:bc:82:27:05:af:36:f7:68:be:69:93:e5:
b8:99:60:20:75:a4:60:04:43:3d:ec:31:be:11:f0:
09:0c:ce:e0:61:2e:c9:6c:e4:d3:34:f6:78:fd:7c:
5c:8b:da:71:c7:6a:b2:9c:30:5f:3f:1e:b4:17:05:
da:5f:59:51:c3:40:1f:98:7f:84:ea:dd:3e:65:6c:
2d:68:8c:4f:3a:13:19:03:8f:b5:14:a7:e0:50:cf:
19:d4:59:e1:06:3a:9d:48:32:bd:37:a0:e6:f4:b9:
fd:db:3e:30:c7:aa:46:42:03:df:a9:13:d9:48:55:
67:51:f0:75:5f:e6:f3:b5:a2:0f:2f:da:39:7a:96:
8f:e0:f7:53:dd:0b:06:ce:5d:1f:83:32:61:90:c0:
1d:90:d4:e2:34:0d:8b:48:67:db:fe:d6:87:78:67:
55:73:f2:eb:42:df:12:23:ea:ca:5d:5c:d5:58:a8:
3f:5f:39:51:5b:80:4a:a3:e7:92:85:b2:eb:c2:c5:
06:a0:3c:0f:0c:1c:a6:d3:dd:34:de:6f:de:6a:d8:
e4:2b:fc:f0:bd:d9:24:d9:e8:7b:a7:f7:98:94:3e:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.7.0.0/16
57.21.0.0/16
57.35.0.0/16
57.66.0.0-57.74.255.255
57.76.0.0-57.83.255.255
57.86.0.0/15
57.90.0.0/16
57.92.0.0/16
57.96.0.0-57.98.255.255
57.100.0.0/16
57.194.0.0/15
57.197.0.0/16
57.199.0.0-57.200.255.255
57.202.0.0/15
57.205.0.0/16
57.207.0.0-57.223.255.255
185.126.35.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2647
198528
Signature Algorithm: sha256WithRSAEncryption
6d:6e:64:5c:de:33:84:8b:46:e4:c5:19:b0:56:82:f1:a8:27:
4d:6a:bf:53:51:dd:93:e2:b3:b4:69:22:c0:a1:3a:55:db:4c:
ab:cd:b8:05:80:2d:6c:02:ab:ef:d9:02:7a:ae:fc:60:05:10:
fe:f3:18:5d:37:a8:ee:04:6c:e9:4d:3c:98:b9:1a:83:a2:53:
16:99:86:8a:bb:50:8b:42:f4:66:c1:79:aa:33:ec:bf:1c:c4:
22:8d:87:9e:f2:cc:2d:e0:18:15:e8:f0:f9:0e:9a:63:0e:85:
67:19:ad:18:fe:90:8d:9c:c8:46:13:f8:a4:14:d8:79:6b:87:
65:6e:25:8d:29:69:3f:6f:c1:69:20:28:05:4c:bc:3a:04:c4:
3e:f2:55:24:25:d6:1a:01:f3:ad:36:0c:08:3d:a9:ff:fd:4a:
d1:83:96:e9:ee:26:4f:73:f6:61:02:65:b8:52:d3:c9:57:3a:
0a:ec:f4:53:ea:6c:5f:b3:d0:d9:33:b2:26:c5:15:ed:dd:28:
2e:be:d7:d9:24:8e:27:93:06:5f:e7:8a:1d:af:98:cd:01:8a:
50:8d:42:7e:b1:8f:93:a9:78:bc:d3:76:71:c4:e1:5d:d3:01:
ff:c6:4f:4e:00:64:2c:ce:96:cf:d4:7f:b8:a6:09:a0:49:dc:
49:52:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:38:00 2025 by rpki-client