Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
File: 5b15I6_brofQeyMI3TidnPCC7W0.cer (raw, json)
Hash identifier: kJ8YQV7RpPBIjmJOZinyFYBeQK6V7jJ+jPCJvfSiOcs=
Subject key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199957A6B066E32EA1D65E8F82906AEFD98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Sep 2025 12:37:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25052
AS: 44709
IP: 5.100.248.0/21
IP: 5.180.180.0/22
IP: 31.133.100.0/22
IP: 45.83.40.0/22
IP: 45.91.168.0/22
IP: 45.93.92.0/22
IP: 45.248.36.0/23
IP: 63.250.56.0/21
IP: 79.108.160.0/21
IP: 81.28.4.0/22
IP: 83.229.68.0 -- 83.229.75.255
IP: 83.229.80.0/21
IP: 91.202.168.0/22
IP: 91.223.106.0/24
IP: 91.223.169.0/24
IP: 91.223.236.0/24
IP: 91.226.72.0/24
IP: 91.226.76.0/24
IP: 91.228.126.0/23
IP: 93.93.205.0/24
IP: 103.13.208.0/22
IP: 103.45.244.0/22
IP: 103.240.144.0/22
IP: 103.241.64.0/22
IP: 109.207.76.0/22
IP: 185.28.152.0/22
IP: 185.47.172.0/22
IP: 185.53.208.0/22
IP: 185.56.72.0/22
IP: 185.127.16.0/22
IP: 185.139.228.0/24
IP: 185.139.230.0/23
IP: 185.144.156.0/22
IP: 185.159.72.0/22
IP: 185.162.124.0/22
IP: 185.181.8.0/22
IP: 185.220.204.0/22
IP: 185.227.108.0/22
IP: 185.237.12.0/22
IP: 185.237.96.0/22
IP: 185.241.4.0/22
IP: 185.247.116.0/22
IP: 185.253.72.0/23
IP: 185.253.75.0/24
IP: 188.191.147.0/24
IP: 193.168.172.0/22
IP: 193.218.207.128/25
IP: 194.36.88.0/22
IP: 194.37.80.0/22
IP: 194.146.24.0/23
IP: 194.146.38.0/23
IP: 195.28.180.0/23
IP: 195.238.120.0/22
IP: 212.80.204.0/22
IP: 212.86.104.0/23
IP: 2a00:9f60::/32
IP: 2a01:92e0::/32
IP: 2a02:40a0::/32
IP: 2a02:41e0::/32
IP: 2a04:d980::/29
IP: 2a06:c5c0::/29
IP: 2a07:3b80::/29
IP: 2a0a:b880::/29
IP: 2a0c:a600::/29
IP: 2a0c:c040::/29
IP: 2a0d:1240::/29
IP: 2a0d:be80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:7a:6b:06:6e:32:ea:1d:65:e8:f8:29:06:ae:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 29 12:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:46:11:ae:b5:ba:22:01:3b:c6:93:9e:49:
dd:53:d6:c1:eb:20:3f:3e:a8:3e:bd:4f:cb:a6:6e:
6b:0c:a4:30:58:31:71:03:99:ff:e1:60:53:7c:b1:
29:bc:82:dc:ba:ef:93:00:2f:c7:d9:4e:ed:7c:9d:
3b:71:7f:00:d3:d4:ba:fc:fc:3c:d8:85:38:5e:e7:
e7:e7:9a:90:26:6e:8c:46:66:f4:4d:f0:e9:ce:64:
75:a2:50:bb:86:6a:7d:b1:1b:9e:48:ef:73:8a:21:
78:45:b0:ce:7e:c8:fe:a9:26:a7:23:3c:aa:42:76:
63:ff:ce:75:eb:35:53:b3:73:4f:eb:13:e9:db:e8:
28:35:50:9d:b2:c6:95:22:c1:a1:69:1c:55:cb:0e:
ba:1d:30:92:09:45:f8:9a:3c:ab:94:3c:ef:9f:ef:
f8:fb:5e:c5:2d:eb:3c:f1:5f:a9:ab:54:ea:7a:84:
dc:7b:0c:18:ab:3a:dd:53:3d:bb:ea:f9:aa:96:fb:
a1:5e:f7:05:25:85:f0:44:55:1d:32:b2:cd:d9:a8:
9f:76:22:30:9b:cc:f4:fa:6d:ea:02:1a:3e:c1:db:
40:24:0c:5c:07:b0:fc:cc:ba:87:37:18:2b:57:74:
17:ca:8c:e7:a0:c3:13:bd:c6:c1:0d:08:21:34:0d:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.248.0/21
5.180.180.0/22
31.133.100.0/22
45.83.40.0/22
45.91.168.0/22
45.93.92.0/22
45.248.36.0/23
63.250.56.0/21
79.108.160.0/21
81.28.4.0/22
83.229.68.0-83.229.75.255
83.229.80.0/21
91.202.168.0/22
91.223.106.0/24
91.223.169.0/24
91.223.236.0/24
91.226.72.0/24
91.226.76.0/24
91.228.126.0/23
93.93.205.0/24
103.13.208.0/22
103.45.244.0/22
103.240.144.0/22
103.241.64.0/22
109.207.76.0/22
185.28.152.0/22
185.47.172.0/22
185.53.208.0/22
185.56.72.0/22
185.127.16.0/22
185.139.228.0/24
185.139.230.0/23
185.144.156.0/22
185.159.72.0/22
185.162.124.0/22
185.181.8.0/22
185.220.204.0/22
185.227.108.0/22
185.237.12.0/22
185.237.96.0/22
185.241.4.0/22
185.247.116.0/22
185.253.72.0/23
185.253.75.0/24
188.191.147.0/24
193.168.172.0/22
193.218.207.128/25
194.36.88.0/22
194.37.80.0/22
194.146.24.0/23
194.146.38.0/23
195.28.180.0/23
195.238.120.0/22
212.80.204.0/22
212.86.104.0/23
IPv6:
2a00:9f60::/32
2a01:92e0::/32
2a02:40a0::/32
2a02:41e0::/32
2a04:d980::/29
2a06:c5c0::/29
2a07:3b80::/29
2a0a:b880::/29
2a0c:a600::/29
2a0c:c040::/29
2a0d:1240::/29
2a0d:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25052
44709
Signature Algorithm: sha256WithRSAEncryption
58:88:28:44:1d:b5:51:00:36:4d:81:80:e1:94:04:48:99:e7:
35:09:be:4b:9d:89:7f:6e:a1:a0:90:b7:48:7c:ea:5b:d9:8f:
f3:56:d2:5a:f6:80:78:6f:53:ae:db:f0:07:a1:06:94:66:8f:
c3:ac:d8:d6:c9:10:57:5c:a6:d5:8c:19:4b:79:10:1c:c2:67:
96:fc:0c:f6:3a:ee:59:04:37:78:2f:1c:be:88:a0:26:69:2a:
77:24:af:9c:0a:a9:ef:61:b6:63:62:ff:aa:a6:26:11:3e:a5:
a0:a1:ab:67:0f:6e:a4:02:76:2b:34:71:49:b6:1c:c1:24:6c:
d9:2d:b1:be:83:b1:60:82:79:aa:09:fe:3c:18:6b:0a:c4:6d:
ae:78:92:d1:74:03:ae:47:f1:0f:c3:14:b9:d4:da:a3:56:31:
eb:ac:2f:31:d2:b4:d0:36:b9:f6:84:27:c8:02:9b:c7:4d:7e:
c5:c7:d7:bd:3f:35:e8:fb:97:5d:05:47:03:e0:90:52:d3:5d:
8d:36:63:9c:9f:e0:08:99:c0:b1:28:ef:94:c1:cb:11:95:e0:
1a:99:1b:53:56:a8:33:ea:0c:d3:86:4b:48:a8:9c:e3:c9:04:
96:88:48:10:a6:92:c5:e3:9c:1d:0b:20:60:a5:6a:93:2a:c0:
17:69:dd:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:35 2025 by rpki-client