Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
File: 8s_gx-1SqZoyXlBNN5nls5HbDfs.cer (raw, json)
Hash identifier: RDpfiDHGFN4YPr7sSOjLj+j4DWv5Z0Kebhugt+onuwE=
Subject key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC2A1A51725EA96433B893D4243F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50599
AS: 206972
IP: 89.40.144.0/22
IP: 91.204.160.0 -- 91.204.162.255
IP: 91.236.52.0/24
IP: 91.236.54.0/23
IP: 128.0.54.0/24
IP: 185.11.128.0/22
IP: 185.72.196.0/22
IP: 185.170.104.0/22
IP: 188.210.220.0/22
IP: 193.105.125.0/24
IP: 195.177.216.0/23
IP: 2a02:e7c0::/29
IP: 2a0b:5480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c2:a1:a5:17:25:ea:96:43:3b:89:3d:42:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:dd:36:6a:fc:98:89:d6:00:0b:c8:2f:77:
3e:64:7c:a9:d9:e5:c4:1e:92:2e:09:ec:8a:22:a2:
99:54:64:e7:00:73:18:6d:5a:3a:24:18:b6:0a:da:
18:13:d1:d1:30:58:19:94:7d:84:2c:7d:c7:46:89:
0d:ec:d1:67:26:e9:22:e8:2c:2b:8f:27:a0:e4:0a:
2a:b8:14:5b:7f:a6:a8:d6:99:f1:46:cf:21:1b:c4:
52:eb:de:ab:ec:09:9c:3e:a0:94:16:2d:49:e8:54:
c8:1e:bc:f8:15:b2:04:96:b7:79:00:d7:71:4c:2c:
44:92:bb:0e:de:7c:ca:a4:9e:ee:9b:1d:8e:74:d6:
5a:ec:74:23:1d:bc:89:1c:ba:d5:63:98:99:df:da:
fc:3c:6a:62:0d:e7:76:00:ec:60:7d:27:cf:0b:6d:
de:a8:91:2b:aa:7b:e5:12:57:0c:4c:ad:d1:a5:b6:
29:99:8c:06:86:65:47:f1:56:86:26:c6:a3:7f:9b:
c7:71:b4:10:27:95:51:be:19:c9:d2:82:e8:0d:ab:
b7:0d:25:61:f3:19:be:24:e7:92:11:c5:54:e1:d1:
3a:fc:20:40:0f:57:4b:63:70:0c:4c:46:ae:d0:ad:
c3:5b:70:a3:96:31:54:10:8c:31:3e:fe:c2:36:72:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.144.0/22
91.204.160.0-91.204.162.255
91.236.52.0/24
91.236.54.0/23
128.0.54.0/24
185.11.128.0/22
185.72.196.0/22
185.170.104.0/22
188.210.220.0/22
193.105.125.0/24
195.177.216.0/23
IPv6:
2a02:e7c0::/29
2a0b:5480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50599
206972
Signature Algorithm: sha256WithRSAEncryption
5a:d5:b9:d0:62:e3:fb:dd:df:7c:b1:b4:47:fc:f5:d2:fe:65:
27:c2:9a:a4:d7:61:ff:e0:75:42:4a:2e:07:fb:bb:b8:27:38:
16:e2:91:0c:16:c7:ef:30:49:f4:8a:4c:05:ad:9d:fd:0f:1b:
56:62:67:e7:8e:b6:23:30:40:d6:34:3e:4b:b5:cc:91:d5:28:
26:d0:37:3d:23:af:2c:e4:f1:ce:62:75:f7:6c:6a:f2:81:5c:
7e:cb:16:36:a9:2f:85:f5:58:18:f6:82:c0:12:a2:ea:a4:76:
c0:bd:62:d5:8b:1f:ac:57:f5:b9:2e:d5:fa:87:46:d9:ce:51:
65:b7:56:36:70:e7:84:cc:14:83:46:5c:a3:46:c2:1e:5e:9f:
0d:b7:55:75:e0:1e:41:65:49:7a:30:e1:40:5d:cb:32:c8:23:
6c:bc:cd:e8:6a:f0:22:85:a4:ea:51:f4:62:04:2e:4e:57:4e:
00:b8:3c:b4:ac:49:a7:4a:7c:95:dd:37:cc:11:e9:30:d2:44:
44:5c:d9:fd:9b:2d:cf:3e:1a:89:38:87:2d:88:96:8b:8a:9e:
f5:4d:86:39:20:3a:be:a4:9f:44:a1:ae:22:4b:b6:66:b7:fd:
29:cd:2a:a0:a6:69:ed:5d:ad:ae:e8:62:cb:03:a6:72:f1:14:
6b:bb:98:c9
-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISAZ8Y+sKhpRcl6pZDO4k9QkP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmNmZTBjN2VkNTJhOTlhMzI1ZTUwNGQzNzk5ZTViMzkxZGIwZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl17dNmr8mInWAAvIL3c+ZHyp2eXE
HpIuCeyKIqKZVGTnAHMYbVo6JBi2CtoYE9HRMFgZlH2ELH3HRokN7NFnJuki6Cwr
jyeg5AoquBRbf6ao1pnxRs8hG8RS696r7AmcPqCUFi1J6FTIHrz4FbIElrd5ANdx
TCxEkrsO3nzKpJ7umx2OdNZa7HQjHbyJHLrVY5iZ39r8PGpiDed2AOxgfSfPC23e
qJErqnvlElcMTK3RpbYpmYwGhmVH8VaGJsajf5vHcbQQJ5VRvhnJ0oLoDau3DSVh
8xm+JOeSEcVU4dE6/CBAD1dLY3AMTEau0K3DW3CjljFUEIwxPv7CNnIHJQIDAQAB
o4IC/zCCAvswHQYDVR0OBBYEFPLP4MftUqmaMl5QTTeZ5bOR2w37MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzRkODY1
Yy03MGY1LTQ0YjktODhhNi1lYThhZmU2Nzg5NzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNGQ4NjVj
LTcwZjUtNDRiOS04OGE2LWVhOGFmZTY3ODk3MC8xLzhzX2d4LTFTcVpveVhsQk5O
NW5sczVIYkRmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkGCCsGAQUF
BwEHAQH/BGowaDBQBAIAATBKAwQCWSiQMAwDBAVbzKADBABbzKIDBABb7DQDBAFb
7DYDBACAADYDBAK5C4ADBAK5SMQDBAK5qmgDBAK80twDBADBaX0DBAHDsdgwFAQC
AAIwDgMFAyoC58ADBQMqC1SAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDFpwID
Ayh8MA0GCSqGSIb3DQEBCwUAA4IBAQBa1bnQYuP73d98sbRH/PXS/mUnwpqk12H/
4HVCSi4H+7u4JzgW4pEMFsfvMEn0ikwFrZ39DxtWYmfnjrYjMEDWND5LtcyR1Sgm
0Dc9I68s5PHOYnX3bGrygVx+yxY2qS+F9VgY9oLAEqLqpHbAvWLVix+sV/W5LtX6
h0bZzlFlt1Y2cOeEzBSDRlyjRsIeXp8Nt1V14B5BZUl6MOFAXcsyyCNsvM3oavAi
haTqUfRiBC5OV04AuDy0rEmnSnyV3TfMEekw0kREXNn9my3PPhqJOIctiJaLip71
TYY5IDq+pJ9Eoa4iS7Zmt/0pzSqgpmntXa2u6GLLA6Zy8RRru5jJ
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:11 2026 by rpki-client