Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.cer (raw, json)
Hash identifier: fsBthPC3E9ZhA759rkNSRAJ4pjd9Okp97iVpJavNPqs=
Subject key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195AE37111D7A37402E11DA5783F077709D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Mar 2025 11:43:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29513
AS: 31697
IP: 37.60.184.0/21
IP: 46.31.208.0/21
IP: 80.64.224.0/21
IP: 89.251.48.0/20
IP: 146.66.144.0/21
IP: 193.105.225.0/24
IP: 194.180.228.0/22
IP: 217.64.48.0/20
IP: 2a01:1c0::/32
IP: 2a06:15c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:37:11:1d:7a:37:40:2e:11:da:57:83:f0:77:70:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 19 11:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:83:c1:cb:3b:fa:23:85:1e:e0:f3:07:14:
e8:4e:12:9f:d1:8a:70:43:7b:88:a6:09:88:24:06:
cf:4c:4f:18:48:eb:79:94:a7:18:23:84:dc:79:83:
6b:43:4e:78:dc:bd:25:fc:b1:63:05:1c:76:6f:b0:
e9:7b:49:db:fd:19:d8:cd:d4:11:ff:06:4f:70:33:
45:f3:36:87:a2:bb:c6:53:2d:05:d4:25:94:d8:b1:
a9:a8:f1:d3:48:76:36:b4:39:86:b1:40:ae:58:be:
a5:ff:54:23:40:3e:59:c2:69:83:9c:39:45:d8:a5:
ac:67:ef:74:2c:45:a4:50:d0:e0:de:97:c3:06:ba:
9a:78:79:cf:9f:6d:1a:69:24:82:61:0e:47:71:49:
1d:f5:8b:12:86:b7:3e:36:d6:2a:14:b9:c6:b2:f8:
2a:6f:00:fb:f0:16:10:bd:e4:db:8d:68:b8:a6:17:
42:66:b3:9d:32:e4:c8:81:e6:71:38:87:31:fe:44:
45:42:08:a5:78:48:ba:37:63:a3:f1:52:48:31:46:
86:fb:dc:11:81:9b:95:4d:91:c8:1c:ec:47:4d:fa:
be:01:08:e2:50:4c:2a:f6:6b:e8:74:7a:07:b5:90:
8d:68:f1:40:3a:46:2f:59:b9:15:1c:4e:92:85:fc:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.184.0/21
46.31.208.0/21
80.64.224.0/21
89.251.48.0/20
146.66.144.0/21
193.105.225.0/24
194.180.228.0/22
217.64.48.0/20
IPv6:
2a01:1c0::/32
2a06:15c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29513
31697
Signature Algorithm: sha256WithRSAEncryption
57:42:1c:b6:6c:93:70:55:0a:84:29:f5:52:32:ab:8d:e2:53:
b4:e2:39:fc:b3:aa:5a:8c:0a:92:18:2f:7a:6e:2c:8e:b4:7c:
ff:31:f1:5f:90:a2:5c:53:09:f1:54:d4:7f:e3:18:be:8e:31:
3c:8d:6f:35:35:7a:71:18:f8:43:df:41:0d:34:66:31:71:6a:
9f:23:3a:ba:43:3b:48:38:a4:da:c4:ce:ef:81:7e:e6:cc:f9:
2f:b1:23:e1:be:71:db:7b:15:d5:ac:f3:0d:61:10:80:7a:a3:
80:f8:6f:df:74:9c:ec:89:3e:2b:95:5e:62:5c:26:65:ee:e0:
c0:24:62:b8:ee:fc:b6:a0:ad:65:fa:b1:ad:44:23:f1:80:a4:
e7:77:c9:a6:2c:68:a2:75:e8:0a:2f:72:ca:18:7d:84:34:6b:
61:07:7d:ae:cd:97:1b:19:31:95:a5:d3:3b:e1:e2:0c:5f:af:
ac:1c:e9:ce:63:4f:35:b7:87:45:9c:c6:7a:95:9a:43:b5:4b:
07:b8:86:0c:58:f0:f0:73:58:a0:13:4b:6d:2d:54:80:ec:19:
9d:52:14:38:d4:1a:e1:f3:24:9a:6d:bf:f7:26:b4:1b:6d:96:
c9:18:77:e8:1c:8f:21:1a:26:7b:56:bc:00:e3:ee:71:35:41:
83:6d:97:17
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZWuNxEdejdALhHaV4Pwd3CdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzE5MTE0MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWM2M2I4N2E4YWVjMDkzZGJlNDdkY2NhOTI4NjBlYTg0MTIyOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3uDwcs7+iOFHuDzBxToThKf0Ypw
Q3uIpgmIJAbPTE8YSOt5lKcYI4TceYNrQ0543L0l/LFjBRx2b7Dpe0nb/RnYzdQR
/wZPcDNF8zaHorvGUy0F1CWU2LGpqPHTSHY2tDmGsUCuWL6l/1QjQD5ZwmmDnDlF
2KWsZ+90LEWkUNDg3pfDBrqaeHnPn20aaSSCYQ5HcUkd9YsShrc+NtYqFLnGsvgq
bwD78BYQveTbjWi4phdCZrOdMuTIgeZxOIcx/kRFQgileEi6N2Oj8VJIMUaG+9wR
gZuVTZHIHOxHTfq+AQjiUEwq9mvodHoHtZCNaPFAOkYvWbkVHE6Shfy8rwIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFM7GO4eorsCT2+R9zKkoYOqEEijgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2E4MmY0
My01MDJiLTQyZmItODhlYi04M2JkNjZmNGU2ZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYTgyZjQz
LTUwMmItNDJmYi04OGViLTgzYmQ2NmY0ZTZmNi8xL3pzWTdoNml1d0pQYjVIM01x
U2hnNm9RU0tPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF
BwEHAQH/BFAwTjA2BAIAATAwAwQDJTy4AwQDLh/QAwQDUEDgAwQEWfswAwQDkkKQ
AwQAwWnhAwQCwrTkAwQE2UAwMBQEAgACMA4DBQAqAQHAAwUDKgYVwDAdBggrBgEF
BQcBCAEB/wQOMAygCjAIAgJzSQICe9EwDQYJKoZIhvcNAQELBQADggEBAFdCHLZs
k3BVCoQp9VIyq43iU7TiOfyzqlqMCpIYL3puLI60fP8x8V+QolxTCfFU1H/jGL6O
MTyNbzU1enEY+EPfQQ00ZjFxap8jOrpDO0g4pNrEzu+BfubM+S+xI+G+cdt7FdWs
8w1hEIB6o4D4b990nOyJPiuVXmJcJmXu4MAkYrju/LagrWX6sa1EI/GApOd3yaYs
aKJ16AovcsoYfYQ0a2EHfa7NlxsZMZWl0zvh4gxfr6wc6c5jTzW3h0WcxnqVmkO1
Swe4hgxY8PBzWKATS20tVIDsGZ1SFDjUGuHzJJptv/cmtBttlskYd+gcjyEaJntW
vADj7nE1QYNtlxc=
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:54:00 2025 by rpki-client