Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
File: 96oDm4hrImV4vbakJ4G_WQRLsTg.cer (raw, json)
Hash identifier: OLHNWktiacVi4P/9z2qcczvcB6iFEjkJr1BNk6mn4g8=
Subject key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08B3781776A55D1742680C2020B20B79D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Sep 2026 12:07:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6858
AS: 24739
AS: 31191
AS: 35000
AS: 43267
AS: 49165
IP: 37.46.52.0 -- 37.46.63.255
IP: 37.143.16.0/20
IP: 46.228.0.0/20
IP: 46.252.240.0/20
IP: 62.181.33.0/24
IP: 62.181.40.0/22
IP: 62.181.45.0/24
IP: 62.181.52.0/24
IP: 77.232.50.0 -- 77.232.63.255
IP: 78.111.80.0/22
IP: 78.111.92.0/22
IP: 78.140.192.0 -- 78.140.239.255
IP: 78.140.248.0/22
IP: 79.99.104.0/21
IP: 81.23.96.0/19
IP: 81.24.112.0/20
IP: 82.112.184.0/21
IP: 84.47.137.0/24
IP: 84.47.188.0/24
IP: 84.242.4.0/24
IP: 85.235.192.0/19
IP: 87.249.32.0/24
IP: 87.249.34.0/23
IP: 87.249.39.0 -- 87.249.40.255
IP: 87.249.42.0/24
IP: 87.249.45.0 -- 87.249.48.255
IP: 87.249.51.0 -- 87.249.52.255
IP: 89.104.96.0/24
IP: 89.104.98.0/23
IP: 89.104.103.0 -- 89.104.106.255
IP: 89.104.108.0/23
IP: 89.104.120.0/24
IP: 89.104.124.0/24
IP: 89.223.5.0/24
IP: 89.223.8.0/24
IP: 89.223.10.0/24
IP: 91.196.72.0/22
IP: 92.255.2.0/24
IP: 92.255.5.0/24
IP: 92.255.7.0 -- 92.255.8.255
IP: 92.255.10.0/24
IP: 92.255.12.0/24
IP: 92.255.14.0/24
IP: 92.255.17.0/24
IP: 92.255.24.0/24
IP: 92.255.26.0 -- 92.255.28.255
IP: 92.255.31.0/24
IP: 93.174.240.0/21
IP: 94.140.192.0/19
IP: 176.32.176.0/20
IP: 176.221.16.0/20
IP: 178.238.16.0/20
IP: 185.7.144.0/22
IP: 185.58.248.0/22
IP: 185.124.188.0/22
IP: 185.247.80.0/22
IP: 185.253.184.0/22
IP: 188.227.0.0/19
IP: 188.227.36.0 -- 188.227.55.255
IP: 188.227.60.0 -- 188.227.83.255
IP: 188.227.88.0 -- 188.227.105.255
IP: 188.227.108.0 -- 188.227.127.255
IP: 195.182.128.0/19
IP: 212.59.112.0/22
IP: 212.59.127.0/24
IP: 212.116.96.0/19
IP: 213.135.68.0/24
IP: 213.135.75.0 -- 213.135.76.255
IP: 213.135.78.0/24
IP: 213.135.93.0/24
IP: 213.208.185.0/24
IP: 217.197.224.0/20
IP: 2a00:1020::/32
IP: 2a01:a280::/30
IP: 2a06:aa80:: -- 2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:37:81:77:6a:55:d1:74:26:80:c2:02:0b:20:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:07:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7aa039b886b226578bdb6a42781bf59044bb138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:68:bf:77:73:f6:db:54:2a:38:cb:d1:f3:
ed:12:99:fb:72:13:53:41:e8:0c:28:29:7e:3f:d0:
8b:61:7c:b5:d5:d2:ed:43:01:ba:5a:5e:3c:0d:6a:
57:50:fc:75:53:9d:1d:10:c4:d5:51:44:53:39:e8:
83:d7:5b:e6:79:00:57:55:74:b8:16:bd:28:49:60:
5e:a1:47:37:a7:08:22:d2:fb:d1:e1:c4:ba:0d:de:
41:23:0d:ff:fc:db:ed:21:d5:72:71:c6:9d:a0:fa:
db:4c:eb:a6:65:c9:a5:13:8b:de:f4:d5:fc:90:1c:
67:96:62:0a:d0:68:88:71:a8:8f:48:c7:bc:5c:ab:
5c:e6:96:e8:17:ef:d3:67:58:59:33:ed:9f:72:72:
a6:46:e6:d0:05:67:b3:c1:f6:e2:64:f7:a5:47:0e:
73:12:12:7f:95:54:f6:c3:0f:40:71:2d:44:2e:71:
f6:83:78:98:f1:ff:da:34:9f:38:ad:69:b6:40:2a:
e8:5c:8f:89:96:af:4a:99:8e:fc:3b:fa:56:d1:93:
22:d4:7f:b1:a1:aa:a4:8b:92:b9:20:80:12:dd:b7:
b9:4a:c5:2b:c3:10:8b:79:2d:52:74:97:c9:a5:fa:
55:81:19:50:86:99:63:92:b2:55:4d:8c:c6:6b:d7:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.52.0-37.46.63.255
37.143.16.0/20
46.228.0.0/20
46.252.240.0/20
62.181.33.0/24
62.181.40.0/22
62.181.45.0/24
62.181.52.0/24
77.232.50.0-77.232.63.255
78.111.80.0/22
78.111.92.0/22
78.140.192.0-78.140.239.255
78.140.248.0/22
79.99.104.0/21
81.23.96.0/19
81.24.112.0/20
82.112.184.0/21
84.47.137.0/24
84.47.188.0/24
84.242.4.0/24
85.235.192.0/19
87.249.32.0/24
87.249.34.0/23
87.249.39.0-87.249.40.255
87.249.42.0/24
87.249.45.0-87.249.48.255
87.249.51.0-87.249.52.255
89.104.96.0/24
89.104.98.0/23
89.104.103.0-89.104.106.255
89.104.108.0/23
89.104.120.0/24
89.104.124.0/24
89.223.5.0/24
89.223.8.0/24
89.223.10.0/24
91.196.72.0/22
92.255.2.0/24
92.255.5.0/24
92.255.7.0-92.255.8.255
92.255.10.0/24
92.255.12.0/24
92.255.14.0/24
92.255.17.0/24
92.255.24.0/24
92.255.26.0-92.255.28.255
92.255.31.0/24
93.174.240.0/21
94.140.192.0/19
176.32.176.0/20
176.221.16.0/20
178.238.16.0/20
185.7.144.0/22
185.58.248.0/22
185.124.188.0/22
185.247.80.0/22
185.253.184.0/22
188.227.0.0/19
188.227.36.0-188.227.55.255
188.227.60.0-188.227.83.255
188.227.88.0-188.227.105.255
188.227.108.0-188.227.127.255
195.182.128.0/19
212.59.112.0/22
212.59.127.0/24
212.116.96.0/19
213.135.68.0/24
213.135.75.0-213.135.76.255
213.135.78.0/24
213.135.93.0/24
213.208.185.0/24
217.197.224.0/20
IPv6:
2a00:1020::/32
2a01:a280::/30
2a06:aa80::-2a06:aa86:ffff:ffff:ffff:ffff:ffff:ffff
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6858
24739
31191
35000
43267
49165
Signature Algorithm: sha256WithRSAEncryption
4b:9c:be:10:f8:4a:5d:d6:24:da:af:f2:54:95:88:61:8f:98:
aa:7c:9d:c5:76:67:00:af:a5:95:4a:01:94:22:ae:fe:41:60:
da:b7:87:73:ad:92:ef:a4:0a:f8:20:f8:2b:9e:d7:ff:4e:f9:
f3:b7:4c:e0:49:cc:b8:58:4d:21:0b:a1:84:17:8f:0c:44:eb:
aa:cd:c9:f9:35:18:32:c7:10:09:d8:af:f4:c2:8d:7f:14:1a:
5b:20:e2:0e:6a:f1:cc:d4:c6:cc:09:82:32:c7:eb:d1:b0:a4:
15:18:03:10:69:f5:3d:31:68:ca:5f:19:d3:cf:b6:41:7b:fc:
43:d7:4e:14:5a:5e:f3:c0:4a:93:d0:82:ca:3c:d3:f5:c6:0e:
63:69:4a:5d:fe:54:86:9a:3e:07:ee:6e:66:ce:65:6a:ff:30:
45:63:c3:d8:4d:7e:73:c5:a4:5d:e6:8b:28:77:eb:e0:a1:ad:
e4:bf:1e:a8:e1:9b:c8:f2:d9:36:0c:3f:7b:89:03:31:97:14:
c6:ac:25:60:a0:ee:fd:39:41:fc:a3:c0:7f:ca:ca:f0:15:b2:
49:36:7a:31:49:0e:28:f9:9b:67:41:89:6e:17:4f:18:4f:12:
f1:36:00:ca:17:37:98:02:e5:6e:19:b5:74:88:43:8a:5d:09:
de:bf:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:10:20 2026 by rpki-client