Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
File: AV8OZlqcdCI8S_4nChZZreTO8x8.cer (raw, json)
Hash identifier: 8BNmy1Bu3by7bL1pTden0dvkmRf7qvLJpuD3oWB+fFE=
Subject key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196429A9D2EA35BC8C29BD3DCD8C5FBCEFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Apr 2025 07:15:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210601
IP: 80.244.1.0/24
IP: 185.137.167.0/24
IP: 2a05:2dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:9a:9d:2e:a3:5b:c8:c2:9b:d3:dc:d8:c5:fb:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 07:15:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:5b:71:1a:ae:ea:ee:de:0d:ab:42:23:18:
c6:39:1b:d2:30:58:3e:d1:ee:19:7a:a4:c5:f8:1b:
85:74:33:32:8d:09:3c:d6:2e:bd:0f:19:44:e9:35:
18:8a:4f:81:32:71:71:1b:fe:46:99:3f:9d:e2:d6:
df:72:f3:9a:3b:c0:d4:ba:b0:a7:83:5f:c4:42:ca:
8b:73:67:28:cd:72:78:cd:ec:f4:d3:0e:9c:7f:0e:
a8:f2:c2:49:bb:08:64:14:1f:d5:fd:50:06:4b:32:
cd:50:b7:dd:25:2c:ce:f6:73:d5:60:5e:b3:69:86:
0e:0d:26:1f:05:f1:7f:a7:d0:81:ec:4b:4c:a0:3b:
1c:a9:f7:f9:0b:0a:00:53:67:8f:d7:97:3e:f5:e7:
2e:e7:0c:d7:3e:df:06:c9:32:9b:e2:f4:cd:73:63:
73:96:1e:1c:b0:54:a7:25:ee:20:1f:e6:ef:e9:91:
6b:23:e2:1a:ef:b5:ea:fd:67:6e:bf:a0:ad:0e:83:
8e:74:dd:6f:c9:c0:e9:26:c7:a0:f6:8b:c8:28:48:
7f:2a:51:ed:5a:17:3b:4b:99:08:b1:10:9f:d6:23:
ce:db:fa:21:d6:1b:77:93:2f:50:7d:6e:9e:9d:42:
67:2e:6a:ed:89:fe:35:2f:0f:8a:0c:49:2c:a8:c8:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.1.0/24
185.137.167.0/24
IPv6:
2a05:2dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210601
Signature Algorithm: sha256WithRSAEncryption
5f:4f:33:31:b4:c0:42:f6:94:8b:d3:3c:85:c3:a4:3f:79:e5:
8f:ca:bf:2f:9e:a4:48:de:c3:82:9c:01:cb:96:a7:3f:b1:91:
ec:8d:35:54:14:a4:ed:9d:f5:e5:4a:29:ac:04:97:7d:be:b2:
a7:f0:f4:73:69:10:1c:b3:84:2e:bd:c9:d4:5e:47:60:a4:c8:
25:a3:8d:66:72:ba:20:82:fa:86:50:bb:a7:1f:9d:70:7a:58:
29:fd:84:f6:73:d3:c8:d0:74:a2:32:c8:c2:bd:05:89:2e:b2:
e9:97:b9:c9:12:5a:d6:92:24:b8:26:6b:8f:e4:ba:71:52:5e:
65:a2:b1:c1:2e:51:79:5a:99:eb:eb:14:b7:72:65:fc:9b:31:
f8:60:2e:fe:f1:01:f9:e3:b8:d1:a1:13:86:50:47:e0:72:19:
34:f6:e5:f7:14:7a:52:4e:1f:5b:c3:75:fb:8d:30:b4:96:71:
01:da:10:83:dc:2f:29:45:66:a8:ca:7c:c1:ef:bc:ad:7d:9e:
20:55:82:e8:90:8d:0a:2f:3c:d7:75:2e:03:51:25:ce:20:e3:
7c:23:47:c1:85:18:c6:f0:a6:aa:61:9c:a5:9c:50:f9:5c:39:
d5:1a:fc:bc:ab:8c:2d:5b:84:b1:8e:d6:85:47:a6:1a:7c:53:
88:6e:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:28:50 2025 by rpki-client