Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer
File: 6PlGdTWeFAur06Wr7qDGeA3736g.cer (raw, json)
Hash identifier: Ls7PCseysWHX5xk/S0NfjLqFU80KDkFgPF5zJ95hV7I=
Subject key identifier: E8:F9:46:75:35:9E:14:0B:AB:D3:A5:AB:EE:A0:C6:78:0D:FB:DF:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C9F665E26606AAD399176D24AD5353A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 16:32:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198781
IP: 37.110.248.0/21
IP: 45.83.36.0/22
IP: 45.145.28.0/22
IP: 45.154.80.0/22
IP: 78.143.248.0/22
IP: 82.163.236.0/22
IP: 83.151.196.0/23
IP: 88.98.19.0 -- 88.98.20.255
IP: 88.98.168.0/23
IP: 94.247.80.0/22
IP: 109.236.160.0/24
IP: 185.33.208.0/22
IP: 185.49.232.0/22
IP: 185.100.188.0/22
IP: 185.207.23.0/24
IP: 194.15.48.0/22
IP: 2a01:ad40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:f6:65:e2:66:06:aa:d3:99:17:6d:24:ad:53:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 16:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8f94675359e140babd3a5abeea0c6780dfbdfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:53:eb:17:4a:49:aa:fd:97:b0:d8:e6:50:
b5:d9:9d:6f:41:70:ca:10:c1:b6:ed:8f:1a:82:63:
fa:f1:6a:dd:c4:a1:6c:c8:24:71:af:c9:e6:cf:8c:
e6:c6:64:e7:f1:9c:22:2b:5f:cf:30:28:9f:ab:28:
7a:b4:cf:6c:9b:9c:3f:d1:ed:85:5a:2b:d6:fa:f3:
5e:73:f7:1a:9e:20:68:53:fe:2b:fd:df:80:38:0d:
76:f4:7d:96:b5:a5:2e:ed:98:61:7c:b1:e7:eb:c7:
4c:17:a6:8f:77:03:10:de:5f:4d:fa:9e:bc:c8:f5:
81:b6:2c:fe:07:51:08:c9:33:e8:cc:a9:fa:15:e8:
0c:7b:d4:08:0a:cb:37:05:7b:9b:fa:46:6c:a4:44:
d0:d9:ac:57:14:ef:7a:a6:ad:0a:e9:b6:c4:7a:1b:
8d:2f:6d:d9:e0:f7:14:18:6f:b8:3c:ee:a8:55:39:
28:05:69:74:91:9d:2b:5f:8a:58:08:d3:51:c1:cc:
eb:d6:41:f6:3c:68:73:d4:80:29:7f:1f:93:58:a5:
88:48:a4:38:74:43:55:b9:ab:98:60:f5:8f:e2:e3:
dc:00:63:3d:70:1b:3f:a8:e5:79:66:7f:95:4e:67:
94:d9:73:f5:fb:f4:bc:b1:8d:8e:6a:b3:a0:e8:d1:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F9:46:75:35:9E:14:0B:AB:D3:A5:AB:EE:A0:C6:78:0D:FB:DF:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.248.0/21
45.83.36.0/22
45.145.28.0/22
45.154.80.0/22
78.143.248.0/22
82.163.236.0/22
83.151.196.0/23
88.98.19.0-88.98.20.255
88.98.168.0/23
94.247.80.0/22
109.236.160.0/24
185.33.208.0/22
185.49.232.0/22
185.100.188.0/22
185.207.23.0/24
194.15.48.0/22
IPv6:
2a01:ad40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198781
Signature Algorithm: sha256WithRSAEncryption
3f:cb:07:36:ed:b3:7f:53:58:da:d0:81:d0:63:95:0d:a7:2e:
98:a8:d0:2c:59:12:fd:8b:7d:da:15:03:d2:3c:bd:e9:b9:9f:
0a:94:bd:68:88:b8:f6:b3:16:ab:93:19:1c:4a:ed:2e:85:7f:
45:b4:f8:cf:71:85:ca:00:35:05:b9:e6:6d:79:6b:30:95:6a:
3e:74:90:04:98:04:04:29:c2:43:77:47:18:3e:38:d0:42:55:
f7:ad:9a:46:50:6e:d2:fe:b9:d9:a5:9f:8d:a6:38:73:04:22:
79:06:a5:5e:df:de:a0:32:37:9f:23:28:c6:ef:fe:a4:63:0b:
95:ac:a3:86:a3:e5:7e:b0:ac:79:c7:a2:6e:52:da:95:fa:56:
cd:ff:f9:4a:e1:c7:7d:57:89:72:7d:5b:50:66:cf:ad:83:80:
5e:b6:a1:0c:2d:92:22:65:d0:81:36:44:60:b4:c3:fb:79:66:
b2:28:ab:72:b4:99:51:67:cf:06:17:4b:59:e9:14:cd:44:d2:
a9:88:12:b4:d0:fb:9a:63:d2:c6:51:e3:d6:25:f8:00:eb:ef:
9d:5f:0d:9a:af:15:ce:42:9a:be:59:dc:50:f8:69:40:93:21:
25:d6:8c:f1:44:8f:3b:86:7d:9a:59:7b:9b:c6:cc:e2:11:f5:
c9:f6:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:32:32 2026 by rpki-client