
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
File: 7xxmWwOGkrk7310djzzqPphpegM.cer (raw, json)
Hash identifier: BjinaHuGOhfh1hnFpPMtPK76EaWCh9ZWS76tZyEvR2E=
Subject key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E30E0A75D72BA06CCE8C80A01318
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3315 -- 3316
AS: 5568
AS: 8631
AS: 8985
AS: 15835
AS: 31649
AS: 41740
AS: 42139
AS: 42385
AS: 42403
AS: 42728
AS: 43213
AS: 43690
AS: 43832
AS: 43921
AS: 44522
AS: 44597
AS: 45018
AS: 45029
AS: 47445
AS: 47882
AS: 48216
AS: 48531
AS: 50706
AS: 57056
AS: 62135
AS: 62261
AS: 205022
IP: 62.76.62.0/23
IP: 62.76.76.0/23
IP: 62.76.151.0/24
IP: 62.76.248.0/21
IP: 86.62.48.0/22
IP: 193.232.64.0/24
IP: 193.232.66.0/23
IP: 193.232.72.0 -- 193.232.74.255
IP: 193.232.76.0/24
IP: 193.232.78.0/24
IP: 193.232.80.0 -- 193.232.85.255
IP: 193.232.87.0/24
IP: 193.232.93.0/24
IP: 193.232.124.0 -- 193.232.129.255
IP: 193.232.131.0 -- 193.232.137.255
IP: 193.232.139.0 -- 193.232.143.255
IP: 193.232.156.0/23
IP: 193.232.175.0/24
IP: 193.232.188.0/23
IP: 193.232.226.0/23
IP: 193.232.230.0 -- 193.232.233.255
IP: 193.232.237.0/24
IP: 193.232.243.0 -- 193.232.244.255
IP: 194.85.0.0/24
IP: 194.85.3.0/24
IP: 194.85.16.0/24
IP: 194.85.25.0/24
IP: 194.85.28.0/23
IP: 194.85.31.0/24
IP: 194.85.76.0/22
IP: 194.85.84.0/23
IP: 194.85.104.0 -- 194.85.109.255
IP: 194.85.117.0 -- 194.85.119.255
IP: 194.85.177.0/24
IP: 194.85.186.0/23
IP: 194.85.252.0/23
IP: 194.190.119.0 -- 194.190.129.255
IP: 194.190.132.0 -- 194.190.136.255
IP: 194.190.138.0/24
IP: 194.190.141.0 -- 194.190.142.255
IP: 194.190.145.0 -- 194.190.146.255
IP: 194.190.148.0/24
IP: 194.190.156.0/24
IP: 194.190.168.0/24
IP: 194.226.16.0 -- 194.226.18.255
IP: 194.226.24.0/23
IP: 194.226.28.0/23
IP: 194.226.36.0/24
IP: 194.226.38.0/23
IP: 194.226.41.0/24
IP: 194.226.44.0/24
IP: 194.226.46.0 -- 194.226.48.255
IP: 194.226.56.0/22
IP: 194.226.64.0/20
IP: 194.226.100.0/22
IP: 194.226.134.0/23
IP: 195.19.8.0/24
IP: 195.19.14.0/23
IP: 195.19.26.0/24
IP: 195.208.22.0 -- 195.208.31.255
IP: 195.208.208.0/21
IP: 195.208.222.0/23
IP: 195.209.0.0/19
IP: 195.209.146.0 -- 195.209.148.255
IP: 212.192.230.0 -- 212.192.237.255
IP: 212.193.104.0 -- 212.193.127.255
IP: 212.193.144.0/20
IP: 212.193.192.0/19
IP: 2001:67c:1008::/47
IP: 2001:67c:1210::/46
IP: 2001:67c:1440::/45
IP: 2001:6d0::/32
IP: 2001:7f8:20::/48
IP: 2a09:bd00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e3:0e:0a:75:d7:2b:a0:6c:ce:8c:80:a0:13:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:63:c2:5d:e0:ce:ff:18:25:a4:03:9d:ae:
d0:42:f7:d1:73:8b:af:40:d0:55:df:90:65:ca:aa:
20:34:21:30:a7:46:6c:d6:42:a7:ba:63:dc:d0:19:
aa:2b:26:87:c4:43:9a:60:0e:1c:3c:e3:ba:5d:22:
9d:96:c7:7d:d0:8d:ff:e5:15:05:86:d2:c9:c3:55:
ab:09:6b:47:88:e2:a8:51:d2:a1:82:bf:be:0f:be:
79:eb:7e:43:2c:28:82:d7:61:fc:84:05:fe:7d:69:
00:1a:36:f5:ce:b9:c9:13:a2:d3:de:4d:97:be:77:
e7:df:0f:d6:a3:90:77:7e:63:c5:3b:be:92:66:e1:
0b:c0:24:40:3f:c9:a3:b5:00:ef:ed:0f:ed:d0:b4:
d3:6c:71:4c:47:42:40:96:37:05:56:e6:90:12:90:
a7:2a:e1:74:4d:a0:ef:d2:6d:97:2a:f5:e6:2f:07:
1c:4f:5f:6b:03:7b:ee:e7:96:f7:48:1c:ab:03:40:
8c:a3:d8:d6:0c:2c:40:ee:59:19:72:81:ed:d6:f3:
fe:b4:a0:81:46:3c:9a:96:1f:54:62:c1:26:d8:02:
b1:23:7e:3b:e5:97:b3:4e:d0:66:52:37:f8:ed:ce:
f2:88:c2:b8:43:cd:56:63:cf:fe:e5:ae:48:46:64:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.62.0/23
62.76.76.0/23
62.76.151.0/24
62.76.248.0/21
86.62.48.0/22
193.232.64.0/24
193.232.66.0/23
193.232.72.0-193.232.74.255
193.232.76.0/24
193.232.78.0/24
193.232.80.0-193.232.85.255
193.232.87.0/24
193.232.93.0/24
193.232.124.0-193.232.129.255
193.232.131.0-193.232.137.255
193.232.139.0-193.232.143.255
193.232.156.0/23
193.232.175.0/24
193.232.188.0/23
193.232.226.0/23
193.232.230.0-193.232.233.255
193.232.237.0/24
193.232.243.0-193.232.244.255
194.85.0.0/24
194.85.3.0/24
194.85.16.0/24
194.85.25.0/24
194.85.28.0/23
194.85.31.0/24
194.85.76.0/22
194.85.84.0/23
194.85.104.0-194.85.109.255
194.85.117.0-194.85.119.255
194.85.177.0/24
194.85.186.0/23
194.85.252.0/23
194.190.119.0-194.190.129.255
194.190.132.0-194.190.136.255
194.190.138.0/24
194.190.141.0-194.190.142.255
194.190.145.0-194.190.146.255
194.190.148.0/24
194.190.156.0/24
194.190.168.0/24
194.226.16.0-194.226.18.255
194.226.24.0/23
194.226.28.0/23
194.226.36.0/24
194.226.38.0/23
194.226.41.0/24
194.226.44.0/24
194.226.46.0-194.226.48.255
194.226.56.0/22
194.226.64.0/20
194.226.100.0/22
194.226.134.0/23
195.19.8.0/24
195.19.14.0/23
195.19.26.0/24
195.208.22.0-195.208.31.255
195.208.208.0/21
195.208.222.0/23
195.209.0.0/19
195.209.146.0-195.209.148.255
212.192.230.0-212.192.237.255
212.193.104.0-212.193.127.255
212.193.144.0/20
212.193.192.0/19
IPv6:
2001:67c:1008::/47
2001:67c:1210::/46
2001:67c:1440::/45
2001:6d0::/32
2001:7f8:20::/48
2a09:bd00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3315-3316
5568
8631
8985
15835
31649
41740
42139
42385
42403
42728
43213
43690
43832
43921
44522
44597
45018
45029
47445
47882
48216
48531
50706
57056
62135
62261
205022
Signature Algorithm: sha256WithRSAEncryption
44:b9:ba:bf:99:28:e0:b7:46:ab:e8:ea:1c:7a:f0:92:91:8a:
79:4a:26:ab:2a:b7:ee:18:1a:40:32:a7:e1:fc:a1:10:45:74:
6c:cb:a7:5d:46:8e:8f:9a:f4:7f:06:fa:13:fe:d7:5c:2a:1e:
a0:58:2c:e9:df:e7:ff:6b:16:4a:ae:fb:49:d6:70:cb:f0:9e:
45:6e:01:12:ec:d1:e3:06:d1:a0:fd:50:61:03:d1:1a:fd:73:
14:8d:07:48:a4:f4:2e:46:f1:1b:0b:39:69:a0:d6:c5:72:a1:
58:e5:49:5e:46:b2:41:64:93:df:8e:4b:ee:57:4d:97:b1:6a:
8d:c4:4c:58:fb:1e:1b:a3:13:12:a6:8e:aa:b9:db:1a:eb:86:
a0:83:c9:60:ca:83:eb:58:6a:19:11:90:66:f4:a1:bc:79:c8:
da:38:85:46:7f:61:c4:d6:4b:5f:39:bb:d4:16:33:7e:a8:fa:
03:cd:f0:23:f6:bf:6f:d7:4d:da:2e:2b:27:ba:54:28:63:e7:
10:97:7f:bf:75:01:1c:94:fc:7e:79:07:bd:96:91:31:12:04:
41:8c:65:55:13:97:ee:46:c6:55:01:09:3e:6b:ee:94:50:e2:
1b:79:e4:bf:bd:40:2a:4d:bf:68:48:60:f6:4f:ea:df:d8:fc:
e5:17:cf:ee
-----BEGIN CERTIFICATE-----
MIIIjjCCB3agAwIBAgISAZQhseMOCnXXK6BszoyAoBMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjFjNjY1YjAzODY5MmI5M2JkZjVkMWQ4ZjNjZWEzZTk4Njk3YTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hJjwl3gzv8YJaQDna7QQvfRc4uv
QNBV35BlyqogNCEwp0Zs1kKnumPc0BmqKyaHxEOaYA4cPOO6XSKdlsd90I3/5RUF
htLJw1WrCWtHiOKoUdKhgr++D755635DLCiC12H8hAX+fWkAGjb1zrnJE6LT3k2X
vnfn3w/Wo5B3fmPFO76SZuELwCRAP8mjtQDv7Q/t0LTTbHFMR0JAljcFVuaQEpCn
KuF0TaDv0m2XKvXmLwccT19rA3vu55b3SByrA0CMo9jWDCxA7lkZcoHt1vP+tKCB
Rjyalh9UYsEm2AKxI3475ZezTtBmUjf47c7yiMK4Q81WY8/+5a5IRmQXhwIDAQAB
o4IFmjCCBZYwHQYDVR0OBBYEFO8cZlsDhpK5O99dHY886j6YaXoDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzI5MjVh
My04NzFiLTQ2NzYtYWUxMC02ODhkMzMzZWQ5ZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvMjkyNWEz
LTg3MWItNDY3Ni1hZTEwLTY4OGQzMzNlZDlkNS8xLzd4eG1Xd09Ha3JrNzMxMGRq
enpxUHBocGVnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICiwYIKwYB
BQUHAQcBAf8EggJ6MIICdjCCAjgEAgABMIICMAMEAT5MPgMEAT5MTAMEAD5MlwME
Az5M+AMEAlY+MAMEAMHoQAMEAcHoQjAMAwQDwehIAwQAwehKAwQAwehMAwQAwehO
MAwDBATB6FADBAHB6FQDBADB6FcDBADB6F0wDAMEAsHofAMEAcHogDAMAwQAweiD
AwQBweiIMAwDBADB6IsDBATB6IADBAHB6JwDBADB6K8DBAHB6LwDBAHB6OIwDAME
AcHo5gMEAcHo6AMEAMHo7TAMAwQAwejzAwQAwej0AwQAwlUAAwQAwlUDAwQAwlUQ
AwQAwlUZAwQBwlUcAwQAwlUfAwQCwlVMAwQBwlVUMAwDBAPCVWgDBAHCVWwwDAME
AMJVdQMEA8JVcAMEAMJVsQMEAcJVugMEAcJV/DAMAwQAwr53AwQBwr6AMAwDBALC
voQDBADCvogDBADCvoowDAMEAMK+jQMEAMK+jjAMAwQAwr6RAwQAwr6SAwQAwr6U
AwQAwr6cAwQAwr6oMAwDBATC4hADBADC4hIDBAHC4hgDBAHC4hwDBADC4iQDBAHC
4iYDBADC4ikDBADC4iwwDAMEAcLiLgMEAMLiMAMEAsLiOAMEBMLiQAMEAsLiZAME
AcLihgMEAMMTCAMEAcMTDgMEAMMTGjAMAwQBw9AWAwQFw9AAAwQDw9DQAwQBw9De
AwQFw9EAMAwDBAHD0ZIDBADD0ZQwDAMEAdTA5gMEAdTA7DAMAwQD1MFoAwQH1MEA
AwQE1MGQAwQF1MHAMDgEAgACMDIDBwEgAQZ8EAgDBwIgAQZ8EhADBwMgAQZ8FEAD
BQAgAQbQAwcAIAEH+AAgAwUAKgm9ADCBpQYIKwYBBQUHAQgBAf8EgZUwgZKggY8w
gYwwCAICDPMCAgz0AgIVwAICIbcCAiMZAgI92wICe6ECAwCjDAIDAKSbAgMApZEC
AwClowIDAKboAgMAqM0CAwCqqgIDAKs4AgMAq5ECAwCt6gIDAK41AgMAr9oCAwCv
5QIDALlVAgMAuwoCAwC8WAIDAL2TAgMAxhICAwDe4AIDAPK3AgMA8zUCAwMg3jAN
BgkqhkiG9w0BAQsFAAOCAQEARLm6v5ko4LdGq+jqHHrwkpGKeUomqyq37hgaQDKn
4fyhEEV0bMunXUaOj5r0fwb6E/7XXCoeoFgs6d/n/2sWSq77SdZwy/CeRW4BEuzR
4wbRoP1QYQPRGv1zFI0HSKT0LkbxGws5aaDWxXKhWOVJXkayQWST345L7ldNl7Fq
jcRMWPseG6MTEqaOqrnbGuuGoIPJYMqD61hqGRGQZvShvHnI2jiFRn9hxNZLXzm7
1BYzfqj6A83wI/a/b9dN2i4rJ7pUKGPnEJd/v3UBHJT8fnkHvZaRMRIEQYxlVROX
7kbGVQEJPmvulFDiG3nkv71AKk2/aEhg9k/q39j85RfP7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:28 2025 by rpki-client