Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
File: WDMpShzcE1ivxDnApyczsGWob4s.cer (raw, json)
Hash identifier: 5CR/nprvWp4JBS8aKMAF+LBz1OanjAeSQ4qeitJ+tlE=
Subject key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420683FF3765BE9938BC4F7F69A559EE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39561
AS: 43146
AS: 49352
AS: 197695
AS: 201972
AS: 206812
IP: 5.63.152.0/21
IP: 31.31.192.0/20
IP: 37.140.192.0/21
IP: 46.183.160.0/24
IP: 46.183.163.0/24
IP: 46.183.165.0/24
IP: 62.113.91.0 -- 62.113.94.255
IP: 62.213.65.0 -- 62.213.68.255
IP: 62.213.87.0/24
IP: 62.213.92.0/24
IP: 62.213.100.0/24
IP: 62.213.106.0/24
IP: 62.213.108.0/24
IP: 62.213.111.0/24
IP: 62.213.114.0/24
IP: 62.213.122.0/24
IP: 62.213.125.0 -- 62.213.126.255
IP: 80.78.240.0/20
IP: 89.108.64.0/18
IP: 91.197.96.0/22
IP: 92.242.60.0/23
IP: 95.163.220.0 -- 95.163.247.255
IP: 134.0.112.0/21
IP: 151.248.112.0/20
IP: 176.99.0.0/20
IP: 178.21.8.0/21
IP: 185.10.60.0 -- 185.10.62.255
IP: 185.20.224.0/22
IP: 185.38.16.0/22
IP: 185.46.8.0/22
IP: 185.182.109.0 -- 185.182.111.255
IP: 188.93.208.0/21
IP: 193.227.240.0/23
IP: 194.58.88.0 -- 194.58.127.255
IP: 194.67.64.0 -- 194.67.68.255
IP: 194.67.71.0 -- 194.67.79.255
IP: 194.67.84.0 -- 194.67.94.255
IP: 194.67.96.0/19
IP: 212.24.32.0/23
IP: 212.24.35.0 -- 212.24.36.255
IP: 212.24.38.0/24
IP: 212.24.41.0/24
IP: 212.24.44.0/24
IP: 212.24.47.0 -- 212.24.48.255
IP: 212.24.55.0 -- 212.24.56.255
IP: 212.24.58.0/24
IP: 212.24.60.0/22
IP: 212.158.160.0/21
IP: 212.158.169.0/24
IP: 212.158.172.0/24
IP: 213.189.193.0 -- 213.189.195.255
IP: 213.189.199.0/24
IP: 213.189.201.0 -- 213.189.205.255
IP: 217.23.128.0/24
IP: 217.23.132.0 -- 217.23.138.255
IP: 217.23.140.0/23
IP: 217.23.143.0 -- 217.23.145.255
IP: 217.23.147.0 -- 217.23.148.255
IP: 217.23.150.0/24
IP: 2a00:1b48::/32
IP: 2a00:f940::/32
IP: 2a02:f20::/32
IP: 2a03:4900::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3f:f3:76:5b:e9:93:8b:c4:f7:f6:9a:55:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:17:da:9d:e3:fa:3b:41:8b:e9:ea:7a:7e:
14:cd:18:2a:f4:da:b1:6f:6e:6d:ea:2f:9c:95:ec:
a5:8b:e6:4b:53:d7:af:0f:01:39:c6:3c:c6:a5:97:
fd:5f:fb:6f:aa:d0:f0:25:aa:16:7a:81:28:ae:91:
01:bf:84:4e:12:ee:7d:76:d2:04:01:e7:75:88:f4:
6e:8e:55:d9:91:63:ff:5d:a9:0f:f1:f1:eb:45:bb:
f4:f2:75:80:08:21:c0:46:6b:bd:d2:c0:36:8c:b9:
02:40:37:68:21:05:9c:09:3c:5c:e5:cb:68:31:2d:
22:74:f4:4c:53:0a:35:56:b3:37:dc:2e:08:01:c3:
dc:6f:dc:1c:01:6d:da:f6:4f:3e:44:4d:88:76:74:
a6:44:44:ff:6b:23:c3:e1:15:7d:1f:bb:93:4f:36:
1b:48:d8:0b:22:29:a8:92:45:8d:f3:e4:01:8f:91:
c3:25:1a:52:32:71:bc:3c:e3:28:9c:59:f2:28:05:
54:bf:08:e0:2e:96:d4:fc:2a:3d:f5:4f:36:e6:9c:
6b:c5:f9:fa:0a:7f:5a:b5:4a:6d:1c:27:a5:64:b6:
e6:63:72:dc:93:30:44:bf:cd:63:4d:48:34:29:46:
b3:ce:9f:5a:4a:f6:76:0a:93:16:f6:ba:12:89:92:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.152.0/21
31.31.192.0/20
37.140.192.0/21
46.183.160.0/24
46.183.163.0/24
46.183.165.0/24
62.113.91.0-62.113.94.255
62.213.65.0-62.213.68.255
62.213.87.0/24
62.213.92.0/24
62.213.100.0/24
62.213.106.0/24
62.213.108.0/24
62.213.111.0/24
62.213.114.0/24
62.213.122.0/24
62.213.125.0-62.213.126.255
80.78.240.0/20
89.108.64.0/18
91.197.96.0/22
92.242.60.0/23
95.163.220.0-95.163.247.255
134.0.112.0/21
151.248.112.0/20
176.99.0.0/20
178.21.8.0/21
185.10.60.0-185.10.62.255
185.20.224.0/22
185.38.16.0/22
185.46.8.0/22
185.182.109.0-185.182.111.255
188.93.208.0/21
193.227.240.0/23
194.58.88.0-194.58.127.255
194.67.64.0-194.67.68.255
194.67.71.0-194.67.79.255
194.67.84.0-194.67.94.255
194.67.96.0/19
212.24.32.0/23
212.24.35.0-212.24.36.255
212.24.38.0/24
212.24.41.0/24
212.24.44.0/24
212.24.47.0-212.24.48.255
212.24.55.0-212.24.56.255
212.24.58.0/24
212.24.60.0/22
212.158.160.0/21
212.158.169.0/24
212.158.172.0/24
213.189.193.0-213.189.195.255
213.189.199.0/24
213.189.201.0-213.189.205.255
217.23.128.0/24
217.23.132.0-217.23.138.255
217.23.140.0/23
217.23.143.0-217.23.145.255
217.23.147.0-217.23.148.255
217.23.150.0/24
IPv6:
2a00:1b48::/32
2a00:f940::/32
2a02:f20::/32
2a03:4900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39561
43146
49352
197695
201972
206812
Signature Algorithm: sha256WithRSAEncryption
aa:1a:70:c5:c4:39:52:c1:c5:94:d8:1e:f3:26:31:85:14:1c:
5a:a6:7d:71:79:92:ae:46:cd:d7:5e:1d:6c:2c:e2:fc:2c:1c:
a0:5f:f9:32:51:72:06:f5:8c:23:56:1e:6f:12:7d:ea:1d:d4:
11:b7:a7:0c:68:d9:ca:ac:3d:17:09:40:29:15:10:27:d1:85:
a2:28:88:76:c7:3b:59:1c:0f:1f:59:e4:3b:d2:ea:91:2b:bd:
b2:39:fa:52:43:96:fd:0d:80:d4:6e:64:98:ec:6a:72:b8:a3:
1f:4a:96:0f:a9:43:f6:2b:92:b9:08:c6:b5:eb:82:ae:c4:37:
06:23:de:9f:92:49:06:70:89:3a:8b:1b:4d:fe:0d:7f:b3:f6:
c0:62:51:2b:da:82:10:5d:7d:36:82:e6:14:07:0c:1c:fb:17:
57:0c:ea:06:2a:8e:16:11:ad:39:dd:99:8a:8f:ba:71:c4:6b:
6c:69:81:72:05:b9:3b:78:c7:6f:86:5d:61:60:3f:18:da:1f:
c5:91:6f:5f:16:ee:1a:04:6d:79:f3:d6:1c:71:59:41:68:d8:
a7:f7:26:21:d5:50:df:f1:71:d4:7c:8f:7b:34:2b:6b:d9:65:
e7:51:88:ce:96:7d:d2:c5:c6:bf:9a:53:b1:0a:69:80:72:9f:
13:0a:4c:79
-----BEGIN CERTIFICATE-----
MIIHxzCCBq+gAwIBAgISAZQgaD/zdlvpk4vE9/aaVZ7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODMzMjk0YTFjZGMxMzU4YWZjNDM5YzBhNzI3MzNiMDY1YTg2ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YwX2p3j+jtBi+nqen4UzRgq9Nqx
b25t6i+cleyli+ZLU9evDwE5xjzGpZf9X/tvqtDwJaoWeoEorpEBv4ROEu59dtIE
Aed1iPRujlXZkWP/XakP8fHrRbv08nWACCHARmu90sA2jLkCQDdoIQWcCTxc5cto
MS0idPRMUwo1VrM33C4IAcPcb9wcAW3a9k8+RE2IdnSmRET/ayPD4RV9H7uTTzYb
SNgLIimokkWN8+QBj5HDJRpSMnG8POMonFnyKAVUvwjgLpbU/Co99U825pxrxfn6
Cn9atUptHCelZLbmY3LckzBEv81jTUg0KUazzp9aSvZ2CpMW9roSiZKBAwIDAQAB
o4IE0zCCBM8wHQYDVR0OBBYEFFgzKUoc3BNYr8Q5wKcnM7BlqG+LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzRiNDE5
Yy1jZjhmLTRjOWEtOTRkNy1iYjRiNjViNmEwZDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvNGI0MTlj
LWNmOGYtNGM5YS05NGQ3LWJiNGI2NWI2YTBkMS8xL1dETXBTaHpjRTFpdnhEbkFw
eWN6c0dXb2I0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICNwYIKwYB
BQUHAQcBAf8EggImMIICIjCCAfoEAgABMIIB8gMEAwU/mAMEBB8fwAMEAyWMwAME
AC63oAMEAC63owMEAC63pTAMAwQAPnFbAwQAPnFeMAwDBAA+1UEDBAA+1UQDBAA+
1VcDBAA+1VwDBAA+1WQDBAA+1WoDBAA+1WwDBAA+1W8DBAA+1XIDBAA+1XowDAME
AD7VfQMEAD7VfgMEBFBO8AMEBllsQAMEAlvFYAMEAVzyPDAMAwQCX6PcAwQDX6Pw
AwQDhgBwAwQEl/hwAwQEsGMAAwQDshUIMAwDBAK5CjwDBAC5Cj4DBAK5FOADBAK5
JhADBAK5LggwDAMEALm2bQMEBLm2YAMEA7xd0AMEAcHj8DAMAwQDwjpYAwQHwjoA
MAwDBAbCQ0ADBADCQ0QwDAMEAMJDRwMEBMJDQDAMAwQCwkNUAwQAwkNeAwQFwkNg
AwQB1BggMAwDBADUGCMDBADUGCQDBADUGCYDBADUGCkDBADUGCwwDAMEANQYLwME
ANQYMDAMAwQA1Bg3AwQA1Bg4AwQA1Bg6AwQC1Bg8AwQD1J6gAwQA1J6pAwQA1J6s
MAwDBADVvcEDBALVvcADBADVvccwDAMEANW9yQMEAdW9zAMEANkXgDAMAwQC2ReE
AwQA2ReKAwQB2ReMMAwDBADZF48DBAHZF5AwDAMEANkXkwMEANkXlAMEANkXljAi
BAIAAjAcAwUAKgAbSAMFACoA+UADBQAqAg8gAwUAKgNJADAzBggrBgEFBQcBCAEB
/wQkMCKgIDAeAgMAmokCAwCoigIDAMDIAgMDBD8CAwMU9AIDAyfcMA0GCSqGSIb3
DQEBCwUAA4IBAQCqGnDFxDlSwcWU2B7zJjGFFBxapn1xeZKuRs3XXh1sLOL8LByg
X/kyUXIG9YwjVh5vEn3qHdQRt6cMaNnKrD0XCUApFRAn0YWiKIh2xztZHA8fWeQ7
0uqRK72yOfpSQ5b9DYDUbmSY7GpyuKMfSpYPqUP2K5K5CMa164KuxDcGI96fkkkG
cIk6ixtN/g1/s/bAYlEr2oIQXX02guYUBwwc+xdXDOoGKo4WEa053ZmKj7pxxGts
aYFyBbk7eMdvhl1hYD8Y2h/FkW9fFu4aBG1589YccVlBaNin9yYh1VDf8XHUfI97
NCtr2WXnUYjOln3Sxca/mlOxCmmAcp8TCkx5
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:31 2025 by rpki-client