Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
File: LYFCGstXhBVGXs3sRYHoleu_vH8.cer (raw, json)
Hash identifier: l/r1/Olu4rNcr2xb+k3SNFlsMHSwmb4LqR0I7J/KjXs=
Subject key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01979BF49C2EEFE53414B05BA799E6082099
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Jun 2025 08:43:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215566
IP: 109.175.218.0/24
IP: 109.175.222.0/24
IP: 109.175.241.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:f4:9c:2e:ef:e5:34:14:b0:5b:a7:99:e6:08:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 08:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:94:82:63:e7:a6:9c:8d:d2:08:28:d2:b9:
6d:c8:7e:b8:76:2e:6c:65:7b:84:31:5c:1f:7f:d0:
62:7f:05:e8:de:b2:0a:6c:75:63:59:fd:0a:9b:ad:
47:3e:b8:de:32:29:9f:9a:c9:0e:c5:bd:61:e7:72:
1a:4f:d9:a2:7e:19:1f:e1:b0:f9:f2:9c:36:43:f9:
cb:8a:c7:ee:bf:19:55:aa:e4:39:19:92:4b:e0:8c:
6f:a2:cc:6b:2c:6a:3d:0a:25:73:8a:41:57:81:2d:
ad:e9:8c:fa:11:55:9a:52:26:52:ce:1a:dc:af:87:
c0:eb:c8:7e:f2:ea:5b:4c:e9:d6:62:d1:32:b9:0e:
1a:f0:f6:63:ce:e4:28:c8:21:b3:94:3b:88:86:a4:
07:a5:c8:e6:c6:69:20:76:a9:1d:21:4f:bd:b2:f9:
9b:c8:44:0d:8b:f7:ba:cf:d5:74:e9:c9:5a:ca:76:
4f:53:69:e1:40:d1:a1:71:50:d0:b4:16:5f:c1:f3:
67:35:9e:3b:a3:5d:e1:9b:f1:8a:0e:04:d2:63:e2:
20:a1:2f:c6:d8:90:37:a4:51:f4:23:3d:57:b6:c8:
0a:46:c4:5d:a1:0d:1b:d3:dc:4d:81:82:db:27:0c:
7e:45:c3:bc:db:76:46:62:50:5e:ef:47:1b:6d:93:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.218.0/24
109.175.222.0/24
109.175.241.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215566
Signature Algorithm: sha256WithRSAEncryption
31:52:b6:32:a2:d2:ce:3b:7f:11:03:77:90:82:a9:ae:15:26:
dc:0c:b5:6e:1b:7b:f6:b4:9f:23:f6:1b:26:10:05:52:b2:58:
a3:11:bb:09:c9:a7:1b:2b:70:69:13:b9:f7:07:bb:f7:89:29:
90:7d:2d:3a:fa:02:2e:f2:51:d7:d4:f7:36:03:01:c9:ee:2a:
05:6b:bd:ef:21:55:c2:50:f4:3d:f9:cc:94:cd:cb:ec:e6:ea:
b7:ab:4a:99:0e:bf:40:97:f2:68:3a:61:7c:17:56:62:e3:d4:
b0:e9:da:5e:42:58:0b:02:67:1f:b6:64:6b:03:ec:ea:21:f2:
7a:88:0b:fb:bd:bd:a6:cb:3a:88:56:b7:fc:84:d2:e7:c8:fc:
10:44:72:dd:38:6b:56:10:62:25:7a:73:99:02:c1:3e:29:35:
21:e2:91:78:e3:75:b9:10:57:a2:9d:62:0f:06:1a:db:13:84:
1e:c0:80:9b:ef:04:f7:e6:4b:71:50:92:68:6e:5f:10:07:96:
8f:5c:af:b0:4e:9b:0b:87:fc:b2:1a:eb:5c:00:24:29:3c:98:
b5:ee:34:35:b1:b5:28:a1:a4:12:7d:90:8d:b5:a0:97:3b:ec:
e4:d9:65:da:69:cf:c5:a9:13:61:f8:12:fb:d8:e8:a4:73:dc:
36:0f:58:d8
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZeb9Jwu7+U0FLBbp5nmCCCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjIzMDg0MzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDgxNDIxYWNiNTc4NDE1NDY1ZWNkZWM0NTgxZTg5NWViYmZiYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSeUgmPnppyN0ggo0rltyH64di5s
ZXuEMVwff9BifwXo3rIKbHVjWf0Km61HPrjeMimfmskOxb1h53IaT9mifhkf4bD5
8pw2Q/nLisfuvxlVquQ5GZJL4IxvosxrLGo9CiVzikFXgS2t6Yz6EVWaUiZSzhrc
r4fA68h+8upbTOnWYtEyuQ4a8PZjzuQoyCGzlDuIhqQHpcjmxmkgdqkdIU+9svmb
yEQNi/e6z9V06claynZPU2nhQNGhcVDQtBZfwfNnNZ47o13hm/GKDgTSY+IgoS/G
2JA3pFH0Iz1XtsgKRsRdoQ0b09xNgYLbJwx+RcO823ZGYlBe70cbbZNirwIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFC2BQhrLV4QVRl7N7EWB6JXrv7x/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzNiMWQ1
YS1mY2M2LTRhZTMtYTJjOC05ODRlZWMzZjdhM2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvM2IxZDVh
LWZjYzYtNGFlMy1hMmM4LTk4NGVlYzNmN2EzZS8xL0xZRkNHc3RYaEJWR1hzM3NS
WUhvbGV1X3ZIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQAba/aAwQAba/eAwQAba/xMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwNKDjANBgkqhkiG9w0BAQsFAAOCAQEAMVK2MqLSzjt/EQN3
kIKprhUm3Ay1bht79rSfI/YbJhAFUrJYoxG7CcmnGytwaRO59we794kpkH0tOvoC
LvJR19T3NgMBye4qBWu97yFVwlD0PfnMlM3L7Obqt6tKmQ6/QJfyaDphfBdWYuPU
sOnaXkJYCwJnH7ZkawPs6iHyeogL+729pss6iFa3/ITS58j8EERy3ThrVhBiJXpz
mQLBPik1IeKReON1uRBXop1iDwYa2xOEHsCAm+8E9+ZLcVCSaG5fEAeWj1yvsE6b
C4f8shrrXAAkKTyYte40NbG1KKGkEn2QjbWglzvs5Nll2mnPxakTYfgS+9jopHPc
Ng9Y2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 14:47:55 2025 by rpki-client