Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
File: IzlKEl-jrODEem_jT0CGtNO6VYg.cer (raw, json)
Hash identifier: xbCdgZnh930vuu7QxxqW1pgnGCHjNDUMO1sGRQIiv4M=
Subject key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963E6B4DE00D2E0EF86E7A12F8FB374E94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Apr 2025 11:45:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21229
AS: 197248
IP: 62.112.192.0/21
IP: 62.112.208.0/21
IP: 77.111.88.0/21
IP: 93.88.192.0/21
IP: 109.61.0.0/22
IP: 109.61.8.0/21
IP: 109.61.20.0 -- 109.61.31.255
IP: 109.61.48.0 -- 109.61.79.255
IP: 109.61.96.0/21
IP: 109.61.112.0/21
IP: 185.229.249.0/24
IP: 2a01:be00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:6b:4d:e0:0d:2e:0e:f8:6e:7a:12:f8:fb:37:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 11:45:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:5f:0d:17:43:5d:95:87:86:d1:7c:92:7e:
00:05:26:d0:68:9d:68:2a:f4:e2:54:4f:a7:0a:79:
3d:d1:5c:52:1a:be:5d:78:5e:63:19:95:9b:7b:53:
75:fd:5f:dd:8c:f9:e0:d5:5b:d1:e9:24:d7:67:a5:
a0:cb:1e:e9:cf:91:01:e0:9f:13:d8:41:b5:ba:34:
7d:e2:5d:a0:52:06:aa:1a:d6:b8:20:d5:38:ea:a5:
83:46:06:55:b1:de:d0:75:cc:4a:e0:ed:a9:07:b3:
33:08:8b:c6:af:b1:a1:9c:7d:bf:30:46:34:e8:64:
8c:2f:3b:1d:74:bc:27:7f:26:db:84:5f:43:42:89:
4e:af:b2:2a:21:36:7f:cf:40:48:96:d2:43:42:f9:
79:25:12:a4:61:57:60:61:26:f2:f2:26:ae:db:3d:
94:ca:6b:0b:8b:97:55:de:1d:dd:34:08:b4:e4:13:
56:6d:50:a0:d3:85:32:db:fe:44:2d:91:6d:9f:13:
95:dc:5b:98:ea:0a:d3:85:0b:b5:fc:64:b6:12:fc:
02:9a:82:a2:6e:af:a4:96:02:a5:27:09:b7:18:2d:
5c:b4:b8:6f:1e:ad:da:3e:45:0f:f3:58:78:91:c6:
f7:30:2f:27:d5:6c:0c:e5:97:75:da:c5:ec:61:4a:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0/21
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
185.229.249.0/24
IPv6:
2a01:be00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21229
197248
Signature Algorithm: sha256WithRSAEncryption
7c:e1:57:3e:e0:48:58:a4:69:96:8a:bc:c1:38:98:74:8c:8d:
ef:af:49:b2:4a:6e:3d:28:1e:04:36:34:ec:a7:f1:33:36:ee:
80:1f:21:75:6a:20:af:f6:28:51:26:c9:62:24:ea:18:c4:d1:
a0:e0:ea:96:08:51:c8:b5:56:e0:63:05:1d:77:bd:f3:9f:47:
14:4a:67:5d:df:de:6c:4d:3e:82:8e:e1:15:c2:10:94:bb:30:
29:5f:e8:40:83:71:4e:74:5a:80:cc:df:38:67:c9:eb:1a:21:
50:3b:1f:b9:f2:c9:7b:d4:83:90:f4:3d:f1:06:85:05:f5:a7:
74:b2:70:8e:43:3b:86:01:02:5a:c5:fd:b3:e8:ed:35:b1:21:
74:eb:2d:01:29:c4:5a:77:92:9f:e8:b2:25:21:53:d3:d4:c5:
4d:45:7d:18:0d:1f:05:6b:c4:72:7b:7e:47:ea:0c:47:76:c0:
fa:87:c0:91:23:6f:fa:94:3b:7b:a1:05:54:a0:14:16:21:07:
f4:bc:d5:64:c5:bd:df:d1:a8:82:41:6e:b4:ba:03:59:a9:bf:
6c:42:6e:bc:91:36:ce:0c:02:13:41:95:3e:f0:27:10:4a:59:
f2:fc:92:00:a8:ff:8b:3d:e0:3e:54:6c:74:f5:99:17:4e:d0:
85:cb:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:22:05 2025 by rpki-client