Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
File: ge7UCROD2e1AVtn07_fSYi3c4gU.cer (raw, json)
Hash identifier: rdWSe5qTlvmiVrEh71TIhkC5mSBNbD3GeiTzXMpHHyE=
Subject key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01967C97C4BF14784F659A4E120F45E746CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Apr 2025 13:30:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3265
AS: 8737
AS: 12871
AS: 39309
AS: 49562
IP: 5.199.144.0/20
IP: 37.188.64.0/20
IP: 37.251.0.0/17
IP: 46.227.232.0/21
IP: 62.131.0.0/16
IP: 62.216.0.0/19
IP: 62.251.0.0/17
IP: 77.160.0.0/12
IP: 80.60.0.0/15
IP: 80.100.0.0/15
IP: 81.204.0.0/14
IP: 82.92.0.0/14
IP: 82.136.192.0/18
IP: 82.139.64.0/18
IP: 82.161.0.0/16
IP: 82.168.0.0 -- 82.170.255.255
IP: 83.68.0.0/19
IP: 84.39.0.0/19
IP: 84.80.0.0/16
IP: 84.82.0.0 -- 84.87.255.255
IP: 85.113.224.0/19
IP: 86.80.0.0 -- 86.90.255.255
IP: 86.92.0.0/14
IP: 88.159.0.0/16
IP: 94.229.48.0/20
IP: 109.72.32.0/20
IP: 128.127.32.0/20
IP: 141.105.0.0/20
IP: 185.2.172.0/22
IP: 185.94.208.0/22
IP: 185.117.108.0/22
IP: 188.142.0.0/17
IP: 194.109.0.0/16
IP: 195.64.64.0/19
IP: 195.121.0.0/16
IP: 195.240.0.0/15
IP: 212.123.128.0/18
IP: 212.182.128.0/18
IP: 212.238.0.0/16
IP: 213.10.0.0/16
IP: 213.75.0.0/16
IP: 213.84.0.0/16
IP: 213.148.224.0/19
IP: 213.197.0.0/18
IP: 213.222.0.0/19
IP: 217.26.96.0/20
IP: 2001:67c:24f0::/48
IP: 2001:67c:2500::/45
IP: 2001:888::/29
IP: 2001:980::/29
IP: 2a02:80c0::/30
IP: 2a02:a400::/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:97:c4:bf:14:78:4f:65:9a:4e:12:0f:45:e7:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 13:30:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:da:b5:2f:ae:87:95:ad:58:c6:d9:00:95:
f9:4a:f8:52:c3:d6:2c:73:0a:05:b8:08:1f:b6:84:
a3:f8:2c:40:26:f5:5e:f9:8c:5c:09:a9:68:15:de:
02:82:de:ed:e5:bc:e6:0a:87:a8:8a:40:8c:e7:2b:
bf:66:c2:7e:91:66:67:f1:11:0c:8a:3a:e1:a6:3f:
23:c8:ed:50:d3:50:64:88:19:43:43:f9:cb:9a:ff:
04:d1:3a:73:5d:84:c9:94:25:3d:73:11:41:a4:88:
1d:05:bf:b9:18:cc:70:89:e2:a9:21:17:d6:ee:3d:
7c:42:3b:66:31:73:86:ae:32:c6:62:d0:0b:be:df:
91:f0:bd:90:5d:2a:2c:c4:41:be:8e:ad:78:93:41:
8c:f2:67:d1:cf:88:e4:85:80:fd:6e:6c:1f:02:a4:
18:59:f8:72:83:d8:66:69:59:69:5f:55:13:25:b4:
65:2c:bf:ab:6d:41:d3:96:f7:c0:6c:fe:56:cd:9e:
42:97:9f:36:16:fd:84:a0:ce:e0:04:6e:f2:57:2d:
f8:96:5a:eb:ac:9e:d9:5b:d1:ee:d3:3c:fc:ce:c2:
bc:cb:2a:79:cc:1c:e7:d9:c7:b5:37:68:45:50:6f:
93:64:c5:c4:f4:de:2d:19:6b:c5:26:d0:12:de:0e:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.144.0/20
37.188.64.0/20
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.139.64.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
94.229.48.0/20
109.72.32.0/20
128.127.32.0/20
141.105.0.0/20
185.2.172.0/22
185.94.208.0/22
185.117.108.0/22
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
217.26.96.0/20
IPv6:
2001:67c:24f0::/48
2001:67c:2500::/45
2001:888::/29
2001:980::/29
2a02:80c0::/30
2a02:a400::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3265
8737
12871
39309
49562
Signature Algorithm: sha256WithRSAEncryption
a3:b6:d1:f3:ad:e6:a6:ac:03:fa:e1:fc:1e:d2:52:97:74:74:
46:20:b2:dd:4d:50:3e:92:52:1e:71:63:74:a8:0a:2b:9e:c9:
23:96:70:da:ff:1d:82:d1:9e:51:f0:89:b1:29:69:51:9f:41:
bf:c7:89:18:df:9c:94:20:97:9a:e6:fe:7c:25:02:90:70:1e:
ca:dd:e3:0d:eb:9d:e9:97:04:05:d9:d2:4b:ba:be:ec:49:8c:
87:32:a0:7f:59:1c:61:78:e8:66:b6:41:a3:0e:d1:6d:07:b2:
b3:4a:a6:f2:4d:47:70:48:03:ac:1f:75:45:31:be:f0:e9:66:
fa:e0:8b:e2:8b:2c:d3:72:b0:34:1f:71:43:94:cd:2d:01:92:
c0:27:56:8b:04:ef:b3:3c:58:11:ab:fa:b9:02:59:4c:0d:92:
d8:fc:d4:ba:2a:34:ad:35:da:ec:e8:ec:58:4f:9f:86:df:63:
65:ba:05:95:46:ae:ea:6f:6e:88:3b:b9:74:a5:e4:93:81:e9:
b7:8c:f8:9a:db:69:7a:5e:29:25:bc:27:49:ae:e8:68:79:6d:
87:4e:ba:02:d8:f0:b7:2b:9f:00:0f:a6:1f:9e:f8:86:31:92:
7b:62:44:87:bc:4b:28:05:b7:f0:26:8c:d1:61:5c:26:28:32:
45:b4:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:02:37 2025 by rpki-client