Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.cer (raw, json)
Hash identifier: Rg9jl3KBS+8i3MowBk87xtfc/Z7tK9+iPdZzYvQu2d0=
Subject key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B27DC826374E51F280EAD26F042E49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29513
IP: 37.60.184.0/21
IP: 46.31.208.0/21
IP: 89.251.48.0/20
IP: 146.66.144.0/21
IP: 193.105.225.0/24
IP: 194.180.228.0/22
IP: 217.64.48.0/20
IP: 2a01:1c0::/32
IP: 2a06:15c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7d:c8:26:37:4e:51:f2:80:ea:d2:6f:04:2e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:83:c1:cb:3b:fa:23:85:1e:e0:f3:07:14:
e8:4e:12:9f:d1:8a:70:43:7b:88:a6:09:88:24:06:
cf:4c:4f:18:48:eb:79:94:a7:18:23:84:dc:79:83:
6b:43:4e:78:dc:bd:25:fc:b1:63:05:1c:76:6f:b0:
e9:7b:49:db:fd:19:d8:cd:d4:11:ff:06:4f:70:33:
45:f3:36:87:a2:bb:c6:53:2d:05:d4:25:94:d8:b1:
a9:a8:f1:d3:48:76:36:b4:39:86:b1:40:ae:58:be:
a5:ff:54:23:40:3e:59:c2:69:83:9c:39:45:d8:a5:
ac:67:ef:74:2c:45:a4:50:d0:e0:de:97:c3:06:ba:
9a:78:79:cf:9f:6d:1a:69:24:82:61:0e:47:71:49:
1d:f5:8b:12:86:b7:3e:36:d6:2a:14:b9:c6:b2:f8:
2a:6f:00:fb:f0:16:10:bd:e4:db:8d:68:b8:a6:17:
42:66:b3:9d:32:e4:c8:81:e6:71:38:87:31:fe:44:
45:42:08:a5:78:48:ba:37:63:a3:f1:52:48:31:46:
86:fb:dc:11:81:9b:95:4d:91:c8:1c:ec:47:4d:fa:
be:01:08:e2:50:4c:2a:f6:6b:e8:74:7a:07:b5:90:
8d:68:f1:40:3a:46:2f:59:b9:15:1c:4e:92:85:fc:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.184.0/21
46.31.208.0/21
89.251.48.0/20
146.66.144.0/21
193.105.225.0/24
194.180.228.0/22
217.64.48.0/20
IPv6:
2a01:1c0::/32
2a06:15c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29513
Signature Algorithm: sha256WithRSAEncryption
25:8f:6f:87:5a:3e:24:a7:98:91:9f:2e:e8:4e:42:81:c8:0b:
11:9c:63:b9:c5:ab:6c:35:0b:cb:66:f5:e6:b7:17:a2:f3:f0:
76:bb:39:cd:30:b9:c4:8d:e9:e4:3a:bb:fd:f2:3d:89:d7:b4:
de:34:c3:c4:88:6a:49:63:8a:7a:18:36:0f:cf:a3:78:12:f0:
01:c9:7f:9d:e5:a5:dc:ca:c2:db:81:26:9a:b8:ef:21:3a:21:
1b:fe:c0:dc:75:73:7e:a7:b2:95:d7:86:67:7c:01:8a:e5:a7:
b1:96:54:d9:ad:05:20:55:26:1c:90:9e:d3:d6:34:6e:37:5c:
85:04:58:81:15:f0:9f:76:45:4d:56:c8:cc:dc:25:49:71:7a:
7f:b4:17:74:49:c0:b8:6b:54:cc:8d:3b:db:bf:43:a7:5d:c4:
5a:eb:9c:d2:8f:26:ef:95:9c:19:1d:bb:23:da:15:69:ce:a9:
18:04:db:cb:94:d5:98:de:46:9b:86:1c:ea:19:b9:aa:f1:0e:
70:5e:55:64:e3:72:5e:5f:de:a1:86:8c:dc:13:df:52:a9:7b:
bc:3e:ab:e3:60:1c:e9:d3:d4:56:e2:02:cb:6a:54:44:1e:ad:
35:1a:db:59:29:7b:76:29:a2:c1:6b:43:b6:85:cc:0e:63:14:
f1:08:89:23
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAZQksn3IJjdOUfKA6tJvBC5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWM2M2I4N2E4YWVjMDkzZGJlNDdkY2NhOTI4NjBlYTg0MTIyOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3uDwcs7+iOFHuDzBxToThKf0Ypw
Q3uIpgmIJAbPTE8YSOt5lKcYI4TceYNrQ0543L0l/LFjBRx2b7Dpe0nb/RnYzdQR
/wZPcDNF8zaHorvGUy0F1CWU2LGpqPHTSHY2tDmGsUCuWL6l/1QjQD5ZwmmDnDlF
2KWsZ+90LEWkUNDg3pfDBrqaeHnPn20aaSSCYQ5HcUkd9YsShrc+NtYqFLnGsvgq
bwD78BYQveTbjWi4phdCZrOdMuTIgeZxOIcx/kRFQgileEi6N2Oj8VJIMUaG+9wR
gZuVTZHIHOxHTfq+AQjiUEwq9mvodHoHtZCNaPFAOkYvWbkVHE6Shfy8rwIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFM7GO4eorsCT2+R9zKkoYOqEEijgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2E4MmY0
My01MDJiLTQyZmItODhlYi04M2JkNjZmNGU2ZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYTgyZjQz
LTUwMmItNDJmYi04OGViLTgzYmQ2NmY0ZTZmNi8xL3pzWTdoNml1d0pQYjVIM01x
U2hnNm9RU0tPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF
BwEHAQH/BEowSDAwBAIAATAqAwQDJTy4AwQDLh/QAwQEWfswAwQDkkKQAwQAwWnh
AwQCwrTkAwQE2UAwMBQEAgACMA4DBQAqAQHAAwUDKgYVwDAZBggrBgEFBQcBCAEB
/wQKMAigBjAEAgJzSTANBgkqhkiG9w0BAQsFAAOCAQEAJY9vh1o+JKeYkZ8u6E5C
gcgLEZxjucWrbDULy2b15rcXovPwdrs5zTC5xI3p5Dq7/fI9ide03jTDxIhqSWOK
ehg2D8+jeBLwAcl/neWl3MrC24EmmrjvITohG/7A3HVzfqeyldeGZ3wBiuWnsZZU
2a0FIFUmHJCe09Y0bjdchQRYgRXwn3ZFTVbIzNwlSXF6f7QXdEnAuGtUzI07279D
p13EWuuc0o8m75WcGR27I9oVac6pGATby5TVmN5Gm4Yc6hm5qvEOcF5VZONyXl/e
oYaM3BPfUql7vD6r42Ac6dPUVuICy2pURB6tNRrbWSl7dimiwWtDtoXMDmMU8QiJ
Iw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:00 2025 by rpki-client