Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
File: AZaQhdv67lorEfXMh_WddBh4vR4.cer (raw, json)
Hash identifier: b4SNqZLcipyEcDiLKKb41zz2c7XxN9qGx1oXo2CmQKE=
Subject key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196642E6CAE8A0DBAA3F3B8B2A6C38A158E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 19:44:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197701
IP: 192.166.255.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:64:2e:6c:ae:8a:0d:ba:a3:f3:b8:b2:a6:c3:8a:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 19:44:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:f7:2d:97:c2:fd:da:03:23:65:a8:f4:71:
76:b7:64:49:5e:a3:09:ea:b3:7c:c6:bc:aa:9e:93:
6b:e7:7e:fb:59:f6:35:ef:7d:47:a9:21:6a:1d:23:
02:2b:16:9f:5e:70:4e:c4:b8:a7:1b:ea:42:0a:ce:
02:7f:d6:42:99:f9:7a:b0:2a:f6:4d:8b:83:33:52:
5d:fb:db:94:18:f0:c6:9d:5a:26:16:27:6a:b2:86:
9a:b6:1f:fd:34:71:f0:3b:61:2f:ae:58:c3:db:e7:
b8:75:fa:42:22:de:6d:3d:04:b0:55:cd:10:49:31:
df:ca:af:f3:b2:67:e4:03:88:aa:a6:07:a2:ca:08:
23:d5:76:da:2d:72:08:3a:3a:fb:0f:e9:ca:f2:00:
6d:97:b4:aa:45:af:db:a3:f1:2d:c8:53:89:a2:96:
e2:48:c7:e8:6a:17:70:9a:c1:ec:b4:66:23:60:7b:
47:eb:c1:56:e5:de:72:a1:7b:69:a7:a7:00:ce:4f:
b5:e6:c3:d3:8d:f2:08:40:2a:df:24:d8:1d:0e:b8:
8c:30:16:e3:c7:f9:89:1f:3f:a5:c2:01:8e:0c:91:
65:30:9f:c2:e9:85:09:b8:fa:ce:60:57:ee:69:a9:
b6:37:0d:b8:52:1a:40:38:e0:40:77:23:69:71:f9:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.255.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197701
Signature Algorithm: sha256WithRSAEncryption
97:32:ef:81:86:0f:9b:26:2f:0e:51:f4:ef:8c:32:d7:4d:fa:
88:30:b7:f3:17:7a:87:3a:9b:4d:20:b0:5c:57:cf:71:51:f9:
a5:f9:73:26:73:05:12:98:cb:9a:81:4a:0f:2b:5a:e9:d1:1d:
6e:3d:fb:47:6c:db:ce:56:9a:0a:ba:81:e8:ed:16:06:ed:4d:
f2:fb:2f:5a:8a:e8:e7:c3:82:49:52:5a:da:cd:47:0a:b1:1f:
c0:59:9f:68:a1:a1:15:7b:19:22:61:73:b7:1e:3a:a0:6e:76:
7e:ee:1b:77:f1:e5:66:49:88:79:f5:48:36:32:02:dc:0e:3e:
e4:f1:96:2f:df:11:36:f2:1b:eb:ea:18:ed:f0:c8:98:c3:67:
b2:24:29:aa:19:46:ad:d3:80:87:c9:10:4b:95:83:40:54:c0:
11:b4:d7:e9:f8:e2:79:f6:15:00:09:bc:c4:99:c2:69:1d:2c:
66:1b:73:30:f3:97:63:a2:fe:f7:cd:87:53:33:64:76:5a:91:
d3:43:f4:d0:7c:ad:d3:80:a1:36:89:25:f1:26:15:ad:02:01:
9d:81:05:30:fe:95:b3:5e:8c:68:c2:f1:cb:57:d2:39:5f:04:
bb:b6:23:e7:1a:4d:7f:65:0b:53:8d:c7:5b:d5:d9:b5:cc:0f:
24:e8:3a:67
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZZkLmyuig26o/O4sqbDihWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDIzMTk0NDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTk2OTA4NWRiZmFlZTVhMmIxMWY1Y2M4N2Y1OWQ3NDE4NzhiZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ev3LZfC/doDI2Wo9HF2t2RJXqMJ
6rN8xryqnpNr5377WfY1731HqSFqHSMCKxafXnBOxLinG+pCCs4Cf9ZCmfl6sCr2
TYuDM1Jd+9uUGPDGnVomFidqsoaath/9NHHwO2EvrljD2+e4dfpCIt5tPQSwVc0Q
STHfyq/zsmfkA4iqpgeiyggj1XbaLXIIOjr7D+nK8gBtl7SqRa/bo/EtyFOJopbi
SMfoahdwmsHstGYjYHtH68FW5d5yoXtpp6cAzk+15sPTjfIIQCrfJNgdDriMMBbj
x/mJHz+lwgGODJFlMJ/C6YUJuPrOYFfuaam2Nw24UhpAOOBAdyNpcfnDSQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAGWkIXb+u5aKxH1zIf1nXQYeL0eMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2M0MDRk
YS0wNGU1LTQ1ZWQtOTA3Mi02NjdkOTc0ZjhiMTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvYzQwNGRh
LTA0ZTUtNDVlZC05MDcyLTY2N2Q5NzRmOGIxNC8xL0FaYVFoZHY2N2xvckVmWE1o
X1dkZEJoNHZSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwKb/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMERTANBgkqhkiG9w0BAQsFAAOCAQEAlzLvgYYPmyYvDlH074wy1036iDC38xd6
hzqbTSCwXFfPcVH5pflzJnMFEpjLmoFKDyta6dEdbj37R2zbzlaaCrqB6O0WBu1N
8vsvWoro58OCSVJa2s1HCrEfwFmfaKGhFXsZImFztx46oG52fu4bd/HlZkmIefVI
NjIC3A4+5PGWL98RNvIb6+oY7fDImMNnsiQpqhlGrdOAh8kQS5WDQFTAEbTX6fji
efYVAAm8xJnCaR0sZhtzMPOXY6L+982HUzNkdlqR00P00Hyt04ChNokl8SYVrQIB
nYEFMP6Vs16MaMLxy1fSOV8Eu7Yj5xpNf2ULU43HW9XZtcwPJOg6Zw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:49:41 2025 by rpki-client