Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.cer (raw, json)
Hash identifier: 6sZhFF9Kvy1buZHSxRizLkoKC5AIsv4t5cOEoVHWkj4=
Subject key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214436F927398BD1B3721EAD889C64F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34934
AS: 61323
IP: 31.193.0.0/20
IP: 37.220.88.0/21
IP: 45.67.172.0/22
IP: 45.84.20.0/22
IP: 45.131.136.0/22
IP: 45.145.100.0/22
IP: 45.157.40.0/22
IP: 46.37.160.0/19
IP: 78.24.88.0/22
IP: 78.109.160.0/20
IP: 78.137.112.0/20
IP: 80.66.200.0/22
IP: 80.244.176.0/20
IP: 81.201.128.0/20
IP: 94.229.160.0/20
IP: 109.108.128.0/19
IP: 159.253.208.0/21
IP: 176.124.52.0/22
IP: 178.238.128.0/20
IP: 185.55.76.0/22
IP: 185.156.64.0/22
IP: 185.160.180.0/22
IP: 185.160.252.0/22
IP: 185.162.224.0/22
IP: 185.166.128.0/22
IP: 185.181.196.0/22
IP: 185.182.88.0/22
IP: 185.197.60.0/22
IP: 185.207.108.0/22
IP: 185.210.196.0/22
IP: 185.213.116.0/22
IP: 185.216.76.0/22
IP: 185.217.40.0/22
IP: 185.220.60.0/22
IP: 185.221.204.0/22
IP: 185.224.68.0/22
IP: 185.226.220.0/22
IP: 185.234.36.0/22
IP: 185.241.248.0/22
IP: 192.166.44.0/22
IP: 193.39.252.0/22
IP: 194.39.164.0/22
IP: 195.69.100.0/22
IP: 2a02:21a8::/32
IP: 2a02:22d0::/32
IP: 2a09:b200::/29
IP: 2a09:b600::/29
IP: 2a09:ba00::/29
IP: 2a0c:3dc0::/29
IP: 2a0d:1bc0::/29
IP: 2a0e:9380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:36:f9:27:39:8b:d1:b3:72:1e:ad:88:9c:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:f4:dc:e2:05:ad:22:73:0e:75:ad:1f:0d:
8a:dc:49:36:4a:cc:49:55:06:9a:e4:ed:c3:34:e4:
7a:fb:c2:38:37:92:52:22:c7:74:ca:73:e6:37:8e:
80:62:47:78:b9:5b:4d:38:fc:73:90:42:f8:3c:85:
29:48:49:de:ef:c2:14:5f:81:32:8c:ad:88:df:d0:
f3:e2:cd:ba:6f:c8:74:67:f4:91:eb:b6:8b:5b:bc:
a2:6e:3c:c4:0b:58:2a:ac:04:d3:3f:4a:10:09:d9:
88:c5:83:2e:4c:ba:42:9b:7f:aa:48:f0:9b:38:64:
74:56:f9:05:82:26:b3:b5:e4:5d:1b:ae:a2:55:04:
7b:49:a0:14:21:0c:08:1e:88:79:d1:4f:ed:98:22:
16:4f:9c:e1:96:eb:b9:64:c2:73:56:e2:da:f9:ea:
63:11:e3:d7:33:bf:b4:b7:3e:ae:be:79:a1:07:8c:
1f:bf:25:e9:25:16:68:a1:39:4d:69:f1:0d:6e:73:
84:34:a0:04:e0:d8:74:9d:2e:66:e5:52:cc:2b:91:
eb:26:5d:ed:3e:0c:74:36:69:b0:ea:b2:69:2b:16:
c2:b9:fb:0b:29:f4:19:02:79:ea:a5:41:a0:e8:03:
84:9e:31:e2:31:51:50:ff:f4:95:06:a3:c4:76:1d:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.0.0/20
37.220.88.0/21
45.67.172.0/22
45.84.20.0/22
45.131.136.0/22
45.145.100.0/22
45.157.40.0/22
46.37.160.0/19
78.24.88.0/22
78.109.160.0/20
78.137.112.0/20
80.66.200.0/22
80.244.176.0/20
81.201.128.0/20
94.229.160.0/20
109.108.128.0/19
159.253.208.0/21
176.124.52.0/22
178.238.128.0/20
185.55.76.0/22
185.156.64.0/22
185.160.180.0/22
185.160.252.0/22
185.162.224.0/22
185.166.128.0/22
185.181.196.0/22
185.182.88.0/22
185.197.60.0/22
185.207.108.0/22
185.210.196.0/22
185.213.116.0/22
185.216.76.0/22
185.217.40.0/22
185.220.60.0/22
185.221.204.0/22
185.224.68.0/22
185.226.220.0/22
185.234.36.0/22
185.241.248.0/22
192.166.44.0/22
193.39.252.0/22
194.39.164.0/22
195.69.100.0/22
IPv6:
2a02:21a8::/32
2a02:22d0::/32
2a09:b200::/29
2a09:b600::/29
2a09:ba00::/29
2a0c:3dc0::/29
2a0d:1bc0::/29
2a0e:9380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34934
61323
Signature Algorithm: sha256WithRSAEncryption
3c:8a:f8:34:50:0a:5e:47:c7:8b:28:b3:ee:2b:cb:2f:41:70:
78:4d:1e:36:90:0a:e5:19:1d:58:ba:2f:4c:27:3c:3c:30:00:
f3:4f:e3:7d:98:7e:58:39:5b:94:cb:07:77:97:48:c5:67:d4:
de:24:0b:76:39:59:73:81:be:e5:39:2a:22:96:80:d9:79:79:
7e:07:d4:58:e3:55:65:25:2e:d8:67:10:d6:47:94:91:81:27:
23:bd:08:bf:89:d6:d6:cf:e9:8f:de:76:25:40:d2:30:5a:fd:
14:a5:83:f2:b9:03:66:7d:8f:2e:6c:2a:85:07:1d:40:08:d1:
a2:da:8a:48:b9:53:fb:a4:8a:9b:46:63:ab:78:63:fa:f7:ab:
ae:f4:37:3d:25:16:dd:1d:2b:72:77:dc:8a:31:e3:0e:bb:c6:
b7:b8:66:7d:cf:2c:b0:60:1b:4a:f2:14:64:9a:a2:22:33:88:
d6:c6:56:c4:9b:d6:6d:6a:f4:db:38:5f:70:2d:c7:89:08:f4:
cc:a4:52:22:9e:b1:1d:a1:55:c6:bc:77:bf:73:ae:c0:27:34:
13:8b:8b:e9:f9:c9:e9:c2:3e:8d:ec:cf:2e:0f:1d:7c:81:88:
87:59:a8:0e:90:d6:97:87:ce:15:f4:c2:fc:6a:c9:a6:08:e7:
e3:aa:91:19
-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgISAZQhRDb5JzmL0bNyHq2InGTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGM4YTM5MGRkZTVlMTUxOWE0YmQzZGE3NTRhOTNlOTg4NDkyZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12L03OIFrSJzDnWtHw2K3Ek2SsxJ
VQaa5O3DNOR6+8I4N5JSIsd0ynPmN46AYkd4uVtNOPxzkEL4PIUpSEne78IUX4Ey
jK2I39Dz4s26b8h0Z/SR67aLW7yibjzEC1gqrATTP0oQCdmIxYMuTLpCm3+qSPCb
OGR0VvkFgiazteRdG66iVQR7SaAUIQwIHoh50U/tmCIWT5zhluu5ZMJzVuLa+epj
EePXM7+0tz6uvnmhB4wfvyXpJRZooTlNafENbnOENKAE4Nh0nS5m5VLMK5HrJl3t
Pgx0Nmmw6rJpKxbCufsLKfQZAnnqpUGg6AOEnjHiMVFQ//SVBqPEdh1mpQIDAQAB
o4ID6zCCA+cwHQYDVR0OBBYEFODIo5Dd5eFRmkvT2nVKk+mISS1nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzg2OWIz
MC1mY2Q2LTQ4ZGYtOGQyNS1iZWYzYmEyMWM3MTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvODY5YjMw
LWZjZDYtNDhkZi04ZDI1LWJlZjNiYTIxYzcxNS8xLzRNaWprTjNsNFZHYVM5UGFk
VXFUNlloSkxXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBYwYIKwYB
BQUHAQcBAf8EggFSMIIBTjCCAQoEAgABMIIBAgMEBB/BAAMEAyXcWAMEAi1DrAME
Ai1UFAMEAi2DiAMEAi2RZAMEAi2dKAMEBS4loAMEAk4YWAMEBE5toAMEBE6JcAME
AlBCyAMEBFD0sAMEBFHJgAMEBF7loAMEBW1sgAMEA5/90AMEArB8NAMEBLLugAME
Ark3TAMEArmcQAMEArmgtAMEArmg/AMEArmi4AMEArmmgAMEArm1xAMEArm2WAME
ArnFPAMEArnPbAMEArnSxAMEArnVdAMEArnYTAMEArnZKAMEArncPAMEArndzAME
ArngRAMEArni3AMEArnqJAMEArnx+AMEAsCmLAMEAsEn/AMEAsInpAMEAsNFZDA+
BAIAAjA4AwUAKgIhqAMFACoCItADBQMqCbIAAwUDKgm2AAMFAyoJugADBQMqDD3A
AwUDKg0bwAMFAyoOk4AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIh2AgMA74sw
DQYJKoZIhvcNAQELBQADggEBADyK+DRQCl5Hx4sos+4ryy9BcHhNHjaQCuUZHVi6
L0wnPDwwAPNP432Yflg5W5TLB3eXSMVn1N4kC3Y5WXOBvuU5KiKWgNl5eX4H1Fjj
VWUlLthnENZHlJGBJyO9CL+J1tbP6Y/ediVA0jBa/RSlg/K5A2Z9jy5sKoUHHUAI
0aLaiki5U/ukiptGY6t4Y/r3q670Nz0lFt0dK3J33Iox4w67xre4Zn3PLLBgG0ry
FGSaoiIziNbGVsSb1m1q9Ns4X3Atx4kI9MykUiKesR2hVca8d79zrsAnNBOLi+n5
yenCPo3szy4PHXyBiIdZqA6Q1peHzhX0wvxqyaYI5+OqkRk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net