Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zXegsCvw_0Eh8MAzxipTvF5hjE.cer
File: 5zXegsCvw_0Eh8MAzxipTvF5hjE.cer (raw, json)
Hash identifier: rle5UGbv6RulpNzVIl8pytjXO8DJauMvd4NsWQ3JgSY=
Subject key identifier: E7:35:DE:82:C0:AF:C3:FD:04:87:C3:00:CF:18:A9:4E:F1:79:86:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE29707D8FEB64D112446226D6B4E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34779
AS: 197045
IP: 46.248.64.0/19
IP: 84.255.192.0/18
IP: 89.212.0.0/16
IP: 89.233.112.0/20
IP: 91.246.224.0/19
IP: 93.103.0.0/16
IP: 119.12.128.0/20
IP: 185.49.116.0/22
IP: 185.179.48.0/22
IP: 188.159.224.0/19
IP: 188.230.128.0/17
IP: 193.138.32.0/19
IP: 194.28.108.0/22
IP: 2a01:260::/29
IP: 2a03:f800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:29:70:7d:8f:eb:64:d1:12:44:62:26:d6:b4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e735de82c0afc3fd0487c300cf18a94ef1798631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:3c:59:7d:48:61:48:6c:83:fc:a6:ce:23:
74:e7:ea:88:aa:e9:0d:06:0e:8b:e1:91:f2:48:84:
b2:11:0c:1d:5c:ef:19:10:9f:f4:ae:c6:b3:65:37:
16:89:07:a5:2e:79:66:a4:ac:c1:e0:82:cf:26:a2:
49:b8:6a:62:49:44:31:90:e1:7d:9d:eb:00:48:de:
5b:7e:26:f0:54:38:8c:4c:53:36:1d:45:2b:0e:1a:
1f:95:68:e3:dc:2c:7c:0c:a6:cf:15:85:9e:5e:4f:
a4:45:22:ac:e8:6c:e7:b0:1c:78:3b:1e:08:34:1c:
ee:cc:07:9d:1c:07:8e:22:03:b7:24:25:c1:6f:31:
3f:35:37:ef:dd:df:95:07:b1:1e:b2:7f:b5:af:20:
0e:95:61:3e:e8:28:59:1c:68:6c:36:1c:b6:9c:c6:
d5:18:3c:cb:6f:0e:f6:d6:35:90:7a:3c:b3:ac:a0:
00:6c:a4:f9:c6:34:fa:04:20:93:99:24:7d:70:e9:
2d:4b:e0:82:7c:23:9e:d4:43:8a:d6:45:06:c6:ec:
49:aa:30:71:65:6d:55:78:9b:b9:62:f6:de:de:db:
c8:ca:ad:a2:b6:20:5b:62:37:1c:2c:05:1d:cc:72:
f2:b6:7c:cc:13:c8:29:25:e6:74:55:b2:7a:78:7d:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:DE:82:C0:AF:C3:FD:04:87:C3:00:CF:18:A9:4E:F1:79:86:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/5zXegsCvw_0Eh8MAzxipTvF5hjE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
2a03:f800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34779
197045
Signature Algorithm: sha256WithRSAEncryption
81:68:ff:e1:53:01:c2:84:1a:05:ee:e7:63:ea:34:53:21:2f:
50:50:ac:bb:60:19:5d:6e:8d:76:f7:49:e2:20:67:0d:c4:2e:
01:05:29:d9:79:6d:7e:5f:b4:53:83:7a:7e:2d:87:49:6a:20:
ee:f0:4f:72:4b:8b:66:b1:53:6b:d1:c5:b3:13:25:4e:48:63:
3d:3f:c5:08:0f:b7:fc:9c:9c:7a:16:4b:b4:77:68:87:9e:93:
fe:da:16:57:de:50:75:51:82:bc:2b:04:66:f4:4a:0a:f3:86:
db:b6:d8:35:c5:ea:00:2b:aa:37:f7:04:fb:a8:f4:6c:ba:33:
ca:d5:8a:17:fe:84:05:58:1a:d8:a8:36:cc:82:dd:48:29:c8:
f0:ef:0a:40:b4:40:3e:4c:5e:f2:2d:31:6f:c9:da:af:9e:f9:
c5:6e:7c:df:56:5b:5f:53:b2:23:e6:28:e0:25:e5:ba:d1:12:
c8:8d:1e:63:55:57:44:bc:ca:3a:b8:d7:26:25:b1:e9:3c:82:
45:73:79:e6:5e:60:cb:60:1f:14:d1:f4:a8:f7:f5:dc:d4:76:
1a:90:25:f5:40:23:68:37:4c:30:94:c7:76:55:4e:da:6f:08:
02:a4:be:fa:bf:68:e7:c7:9c:16:c2:4d:ed:4c:c8:18:f4:36:
cc:6e:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:20 2026 by rpki-client