Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
File: cFG0wveunvgLUwALMquPXS8vQVs.cer (raw, json)
Hash identifier: qTc9hDHKhnNZVFJbi+TugCKHzPV0hjBK25VyrIF34WM=
Subject key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01979CF3B21641213A015103CED88EE32487
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 23 Jun 2025 13:21:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.133.100.0/22
IP: 5.133.124.0/22
IP: 31.40.196.0/22
IP: 31.40.204.0/22
IP: 37.221.76.0/22
IP: 62.182.32.0/22
IP: 77.241.72.0/22
IP: 81.90.176.0/22
IP: 83.171.244.0/22
IP: 84.54.0.0/22
IP: 85.8.144.0/22
IP: 85.8.156.0 -- 85.8.163.255
IP: 85.235.72.0/22
IP: 92.249.60.0/22
IP: 93.190.8.0/22
IP: 139.28.32.0/22
IP: 139.28.48.0/22
IP: 139.28.212.0/22
IP: 139.28.240.0/22
IP: 141.98.48.0/22
IP: 141.98.112.0/22
IP: 147.78.68.0/22
IP: 176.53.156.0/22
IP: 176.53.168.0/22
IP: 176.96.128.0/22
IP: 185.231.224.0/22
IP: 185.254.52.0/22
IP: 188.119.68.0/22
IP: 193.17.4.0/22
IP: 193.32.184.0/22
IP: 193.32.204.0/22
IP: 193.38.44.0/22
IP: 193.111.76.0/22
IP: 193.138.172.0/22
IP: 193.187.108.0/22
IP: 193.187.132.0/22
IP: 193.187.140.0/22
IP: 194.56.184.0/22
IP: 194.93.48.0/22
IP: 194.93.60.0/22
IP: 194.169.92.0/22
IP: 212.87.196.0/22
IP: 212.103.36.0/22
IP: 212.107.4.0/22
IP: 212.115.100.0/22
IP: 213.139.224.0/22
IP: 217.18.208.0/22
IP: 2a02:f240::/29
IP: 2a04:3e80::/29
IP: 2a05:13c0::/29
IP: 2a05:b480::/29
IP: 2a06:8240::/29
IP: 2a06:9ec0::/29
IP: 2a07:e800::/29
IP: 2a09:780::/29
IP: 2a09:c40::/29
IP: 2a09:fc0::/29
IP: 2a09:1e40::/29
IP: 2a09:2400::/29
IP: 2a09:2580::/29
IP: 2a09:2780::/29
IP: 2a09:3880::/29
IP: 2a09:3b80::/29
IP: 2a09:3d80::/29
IP: 2a09:4400::/29
IP: 2a09:7200::/29
IP: 2a09:7c00::/29
IP: 2a09:8200::/29
IP: 2a09:8a00::/29
IP: 2a09:9200::/29
IP: 2a09:d500::/29
IP: 2a09:df00::/29
IP: 2a09:e500::/29
IP: 2a09:e600::/29
IP: 2a09:e800::/29
IP: 2a09:f480::/29
IP: 2a09:fa80::/29
IP: 2a0c:47c0::/29
IP: 2a0c:7dc0::/29
IP: 2a0c:9ac0::/29
IP: 2a0c:d7c0::/29
IP: 2a0c:f9c0::/29
IP: 2a0d:50c0::/29
IP: 2a0d:6740::/29
IP: 2a0d:93c0::/29
IP: 2a0d:d540::/29
IP: 2a0d:f1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:f3:b2:16:41:21:3a:01:51:03:ce:d8:8e:e3:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 13:21:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:50:a5:e4:a9:63:99:9f:aa:52:a7:2e:8a:
78:38:6d:ba:5f:58:db:d6:4b:86:74:2c:42:b3:b3:
bf:82:e4:19:98:4d:6c:f5:e3:11:e4:12:2b:94:d2:
af:35:54:ff:8b:c5:c0:1e:6e:ef:1e:1a:63:aa:31:
77:57:ed:17:7f:ab:fc:1d:53:f5:09:71:ef:75:c4:
8b:bb:fa:75:9a:74:5e:7d:d1:4e:c8:65:f3:dd:5a:
cf:3d:bc:33:22:24:29:dd:9d:d5:a9:f2:66:37:57:
26:2e:47:e5:e8:8e:c9:99:a8:7c:63:b5:d0:ff:28:
9c:56:12:99:4e:b2:67:4f:13:22:c3:c0:f6:ab:3f:
b0:66:8b:66:df:04:c4:94:e1:15:73:b7:ab:e6:2d:
4a:49:96:79:b7:2a:01:e6:e9:85:86:83:77:77:9a:
2d:4b:9e:1f:a9:d0:f4:7b:58:f7:50:9e:2a:28:3f:
7a:f4:36:ba:d6:f9:08:55:7b:20:ac:dc:0c:11:d3:
13:16:45:8e:a9:cb:85:1c:19:ec:28:5a:2f:49:66:
06:c4:0f:67:2e:48:f3:c5:42:f4:cf:21:37:e5:6f:
0f:a1:ec:d7:60:a5:a2:31:70:09:08:52:c6:cb:cb:
12:ad:10:b4:1d:a1:a2:c4:74:a6:48:ac:c6:c4:e2:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/22
5.133.124.0/22
31.40.196.0/22
31.40.204.0/22
37.221.76.0/22
62.182.32.0/22
77.241.72.0/22
81.90.176.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
85.8.156.0-85.8.163.255
85.235.72.0/22
92.249.60.0/22
93.190.8.0/22
139.28.32.0/22
139.28.48.0/22
139.28.212.0/22
139.28.240.0/22
141.98.48.0/22
141.98.112.0/22
147.78.68.0/22
176.53.156.0/22
176.53.168.0/22
176.96.128.0/22
185.231.224.0/22
185.254.52.0/22
188.119.68.0/22
193.17.4.0/22
193.32.184.0/22
193.32.204.0/22
193.38.44.0/22
193.111.76.0/22
193.138.172.0/22
193.187.108.0/22
193.187.132.0/22
193.187.140.0/22
194.56.184.0/22
194.93.48.0/22
194.93.60.0/22
194.169.92.0/22
212.87.196.0/22
212.103.36.0/22
212.107.4.0/22
212.115.100.0/22
213.139.224.0/22
217.18.208.0/22
IPv6:
2a02:f240::/29
2a04:3e80::/29
2a05:13c0::/29
2a05:b480::/29
2a06:8240::/29
2a06:9ec0::/29
2a07:e800::/29
2a09:780::/29
2a09:c40::/29
2a09:fc0::/29
2a09:1e40::/29
2a09:2400::/29
2a09:2580::/29
2a09:2780::/29
2a09:3880::/29
2a09:3b80::/29
2a09:3d80::/29
2a09:4400::/29
2a09:7200::/29
2a09:7c00::/29
2a09:8200::/29
2a09:8a00::/29
2a09:9200::/29
2a09:d500::/29
2a09:df00::/29
2a09:e500::/29
2a09:e600::/29
2a09:e800::/29
2a09:f480::/29
2a09:fa80::/29
2a0c:47c0::/29
2a0c:7dc0::/29
2a0c:9ac0::/29
2a0c:d7c0::/29
2a0c:f9c0::/29
2a0d:50c0::/29
2a0d:6740::/29
2a0d:93c0::/29
2a0d:d540::/29
2a0d:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
65:f4:4e:a9:7a:ff:14:5f:c5:18:86:d3:0e:fe:60:9d:43:7c:
5d:9e:b7:04:26:48:b9:7a:12:3c:2e:92:1e:63:30:e3:b0:d3:
83:e6:f6:2f:60:ae:89:cc:fe:70:a5:15:95:7c:c1:9b:e8:06:
af:b6:7d:42:d9:ec:8c:cb:2a:10:d2:aa:d6:a1:93:08:33:39:
77:e7:e7:f7:6a:4c:2d:99:7a:bc:7d:2f:a9:c1:bb:f9:f4:a1:
d6:a0:ab:53:95:0e:4e:cc:fa:fc:61:5f:3b:0c:05:1d:60:30:
7e:38:58:e9:21:57:a0:cb:9f:6d:77:e6:8a:21:65:37:9d:b5:
6e:1b:29:66:cd:f9:ea:9c:06:89:b3:57:7e:68:99:c2:4f:00:
4b:f8:3b:7c:d7:c9:fb:6d:d9:3f:b5:52:82:68:f7:26:38:36:
3d:4d:38:08:80:a2:92:c5:5e:2d:b8:a2:8e:0a:72:45:1e:77:
d2:45:b6:7a:53:02:64:56:14:50:44:21:02:e5:bc:78:4b:e2:
e3:b0:83:81:fe:77:30:2d:4c:fe:26:8e:2b:a9:24:cb:43:cb:
6b:c4:40:d6:2f:24:b5:ea:19:b3:65:9e:b0:cf:b9:5d:73:08:
50:aa:79:ca:93:5e:05:e3:f3:34:2b:e7:09:29:19:d1:93:9f:
17:da:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 17:37:24 2025 by rpki-client