Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.cer (raw, json)
Hash identifier: 3RqgDgXLaL+51P5CGRx7PQcVG8So7tHIXAgLQ5DJJXk=
Subject key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195FBE453963D3178DBCA8A24129ACEF02D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Apr 2025 13:43:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210855
IP: 5.181.53.0/24
IP: 193.200.175.0/24
IP: 2a05:5f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:e4:53:96:3d:31:78:db:ca:8a:24:12:9a:ce:f0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 13:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d04a5540824269be5c11f20128b86414cd55945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:00:e6:e8:ba:fa:10:cf:24:1a:29:04:78:
83:12:8f:67:7a:20:0d:81:af:d7:b7:2e:c3:22:64:
e6:72:76:5c:71:00:77:24:6a:0e:e0:46:7b:44:26:
63:fe:50:18:97:6d:74:15:7b:09:a5:ee:68:8e:13:
c4:e4:7b:23:7b:19:ad:e9:74:15:8b:29:5f:2e:80:
64:37:2c:23:ae:3c:f9:f6:b7:ef:69:0d:65:8c:f7:
ff:e3:7f:e6:3c:1f:a1:e4:5d:a6:6f:c5:96:e5:39:
eb:44:8f:d9:58:2f:d2:66:00:ed:6a:71:18:49:67:
46:15:25:cd:e1:ae:3a:6f:40:df:90:15:a8:e2:34:
86:be:a7:00:fb:58:af:97:c7:11:db:d8:b4:0e:c4:
43:93:2b:11:aa:5f:2a:85:3d:fe:ad:2c:c1:de:a1:
da:ab:2d:42:06:62:50:5b:8c:d4:ff:7d:6e:6b:34:
be:c1:7b:72:75:90:cf:bf:6e:e5:fc:6e:08:ec:40:
5b:cc:e6:fd:31:d3:c9:a5:a7:a2:f9:cb:aa:87:7f:
a7:6a:58:51:18:49:41:c3:89:6e:ce:ac:04:fb:cb:
f4:7c:7c:49:5f:5e:67:08:9d:99:72:1f:00:c1:21:
17:61:9e:d6:2e:89:28:5a:ed:d0:1c:f4:6c:6b:07:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.53.0/24
193.200.175.0/24
IPv6:
2a05:5f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210855
Signature Algorithm: sha256WithRSAEncryption
94:d5:32:93:7e:61:9d:10:14:47:bd:a2:f4:6b:9a:cc:3a:8f:
49:59:63:b1:38:1e:c3:45:4a:9a:0e:fb:f2:d8:0f:e1:4e:1e:
8f:06:06:13:b0:b7:6f:20:37:7b:1d:0b:b3:73:fb:1f:5a:55:
39:94:79:55:08:e0:cc:a6:92:f4:57:4f:9f:14:4e:70:bc:f6:
39:af:8e:fa:09:60:64:ce:86:69:3b:6f:44:6c:5e:9e:81:cd:
09:71:4d:48:7d:cf:37:24:e2:e4:6f:dc:74:04:b9:d1:0f:57:
cb:7b:a9:84:db:5d:c8:cc:82:9f:39:74:04:57:44:c0:78:e8:
22:27:e0:3f:c2:d6:b9:1e:70:5b:25:20:2f:36:3d:dd:80:0f:
2e:49:2f:cb:0d:d8:04:e3:67:70:08:95:e0:33:c4:1d:29:70:
dc:bf:0c:81:bf:11:0c:dd:db:c7:a9:06:d9:7b:d0:59:f8:f6:
27:aa:11:ed:8c:6c:89:3a:1a:3e:71:74:23:63:51:5d:a0:ba:
23:0b:9e:44:b3:f1:c0:24:0a:bb:b3:9c:d7:42:79:4e:42:f4:
55:d4:e9:a8:88:60:9b:b4:e5:15:cc:bf:d2:e7:ee:97:77:15:
dc:0d:1c:1b:ab:d4:b6:48:7a:6e:d5:32:3c:9e:2b:a9:3c:5a:
06:7b:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:07:36 2025 by rpki-client