Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
File: A4Toj7eaN3bLBYPitnoL7G38aLg.cer (raw, json)
Hash identifier: Ah9KC8JUPdLeAHhxT4rQRl04dAvNMVWRg0udCXawdv0=
Subject key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01965DDACADE1FE3929FB7B0BD979CC8A0CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Apr 2025 14:15:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6753
IP: 176.118.193.0/24
IP: 185.115.205.0/24
IP: 192.35.206.0/24
IP: 198.135.220.0/24
IP: 212.11.93.0/24
IP: 212.104.211.0/24
IP: 2a0c:a300::/29
IP: 2a12:ea80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:da:ca:de:1f:e3:92:9f:b7:b0:bd:97:9c:c8:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 14:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:e1:0c:3e:d0:3f:c2:b4:40:0e:9d:f0:90:
c7:25:49:da:db:60:a4:82:66:88:35:42:21:8b:bb:
52:78:96:fd:8f:64:39:07:58:34:c6:b3:e9:f8:9f:
d6:a1:29:9b:9d:0c:1e:8e:53:5c:6a:f9:83:f6:bf:
8e:c6:ec:01:52:13:73:95:f0:b6:a8:d2:bb:c0:81:
a1:01:da:17:24:44:b7:c2:b2:2a:ae:60:45:44:99:
50:58:2d:55:24:1d:2c:05:14:e7:d5:89:d5:5c:54:
c4:c0:5f:97:64:08:ae:11:47:64:c7:fe:f0:0b:89:
3b:ad:64:73:3a:6e:8a:70:38:27:15:05:18:c9:d4:
94:9c:2f:26:ae:e3:3f:17:db:8c:e2:2c:45:a6:2c:
a6:3e:ce:e8:99:73:73:e5:1e:b3:61:2d:d0:d3:dd:
1b:9c:d5:4e:26:48:bb:4e:16:bf:2d:a1:0e:db:a5:
6b:99:d6:db:03:c5:32:ed:11:f2:6b:40:40:15:7e:
8b:ec:8f:9b:32:6c:d3:bd:4b:f2:4c:6a:e6:45:87:
33:d4:15:4a:bb:19:63:36:a5:ba:27:47:b1:e0:5f:
57:2e:8c:20:f4:30:5d:12:ea:5f:54:2c:91:e7:0a:
f7:d9:8b:c5:31:3a:8b:14:d4:f8:30:b2:e5:b6:6b:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.193.0/24
185.115.205.0/24
192.35.206.0/24
198.135.220.0/24
212.11.93.0/24
212.104.211.0/24
IPv6:
2a0c:a300::/29
2a12:ea80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6753
Signature Algorithm: sha256WithRSAEncryption
58:2e:7e:4c:d5:ea:ff:44:91:4e:15:7a:44:71:15:59:07:12:
c4:72:5f:92:9c:d0:10:c1:9c:da:8c:aa:ca:c2:aa:59:89:4c:
bf:40:ae:8a:59:40:fd:73:96:7a:47:f9:fa:6b:11:75:19:a8:
37:9b:a4:55:2c:86:28:25:a5:8c:68:c2:55:ca:91:18:64:6f:
f5:e2:9c:42:82:f1:fc:fa:4d:39:0c:af:17:f1:f0:44:c7:4d:
c2:af:21:a6:1c:07:91:e1:12:3f:b4:b0:11:a3:83:9c:10:be:
fe:ba:3c:fc:35:32:23:4f:ec:54:06:36:71:7e:95:51:85:c0:
d0:68:aa:b2:40:67:16:64:58:bb:bd:2c:8a:fd:aa:28:19:75:
75:a3:06:6b:6b:ab:09:1f:68:91:f5:e3:52:af:62:f4:63:0a:
52:47:e4:b5:0d:e9:50:e0:b1:6c:90:c4:85:47:9a:df:92:30:
4a:55:12:9e:a9:26:3e:80:6f:09:b3:35:12:91:65:9f:0d:68:
c1:81:90:19:c0:af:9c:63:5a:8d:3b:da:09:7d:2c:17:77:c4:
d9:54:70:61:3c:ed:e4:43:e5:9e:23:48:46:10:64:a9:a8:f2:
4d:72:b1:c6:71:d3:d2:7c:4b:e8:97:53:36:69:0f:ed:d8:6c:
74:2e:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:52:09 2025 by rpki-client