Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer (raw, json)
Hash identifier: DYuCHPj4ZWxbAX7JBCRLQgD4/Ee48ITGlSuWSUxUXIQ=
Subject key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C2F9D6E304BD63C23E9F4963FC77DE53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Sep 2026 07:59:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197540
AS: 214996
IP: 2.56.96.0/22
IP: 5.45.96.0/20
IP: 5.181.48.0/22
IP: 5.252.224.0/22
IP: 37.120.160.0/19
IP: 37.221.192.0/21
IP: 45.9.60.0/22
IP: 45.83.104.0/22
IP: 45.90.4.0/22
IP: 45.129.180.0/22
IP: 45.132.244.0/22
IP: 45.136.28.0/22
IP: 45.142.176.0/22
IP: 45.157.176.0/22
IP: 46.38.224.0/19
IP: 46.232.248.0/22
IP: 62.83.0.0/16
IP: 81.16.16.0/22
IP: 85.209.48.0/22
IP: 85.235.64.0/22
IP: 89.58.0.0/18
IP: 91.132.144.0/22
IP: 91.204.44.0/22
IP: 92.60.36.0/22
IP: 93.177.64.0/22
IP: 152.89.104.0/22
IP: 159.195.0.0/16
IP: 185.16.60.0/22
IP: 185.162.248.0/22
IP: 185.163.116.0/22
IP: 185.170.112.0/22
IP: 185.183.156.0/22
IP: 185.194.140.0/22
IP: 185.207.104.0/22
IP: 185.228.136.0/22
IP: 185.233.104.0/22
IP: 185.243.8.0/22
IP: 185.244.192.0/22
IP: 188.68.32.0/19
IP: 192.145.44.0/22
IP: 193.30.120.0/22
IP: 193.31.24.0/22
IP: 193.108.22.0/24
IP: 193.108.40.0/23
IP: 194.13.80.0/22
IP: 194.55.12.0/22
IP: 194.59.204.0/22
IP: 195.42.230.0/24
IP: 195.128.100.0/22
IP: 213.109.160.0/22
IP: 2a03:4000::/29
IP: 2a0a:4cc0::/32
IP: 2a0a:9d00::/32
IP: 2a0a:b000::/32
IP: 2a0b:1480::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:f9:d6:e3:04:bd:63:c2:3e:9f:49:63:fc:77:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 07:59:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:99:1f:a6:44:b4:10:b6:41:02:77:87:42:
bf:18:83:49:1f:51:4a:ea:a8:15:cc:8c:ae:63:98:
7f:d3:93:00:44:b0:0d:ca:70:73:bc:84:a1:a0:bc:
1b:11:04:e3:0b:58:c7:cc:84:ae:8d:93:13:c3:1f:
32:59:ce:56:ac:06:2c:cd:ce:b9:e7:33:e2:05:97:
84:1d:24:03:76:46:2d:ea:9a:81:88:1d:d7:d7:03:
3b:be:18:01:6e:f9:58:b6:d3:78:50:37:31:0e:8f:
df:5b:59:f7:3d:33:e7:b6:24:c5:82:d9:7a:a6:2b:
4c:29:8a:bb:20:ed:62:08:51:27:3f:2a:19:97:e2:
4d:e8:1a:05:94:b1:a7:6a:58:7a:a0:ad:21:78:37:
18:d3:17:84:c0:1c:00:e4:b4:e6:fc:46:56:24:64:
92:f0:be:1f:1f:da:bd:7f:b1:4d:16:36:57:04:1b:
2d:69:27:b9:72:0e:dc:36:4f:85:64:7e:35:79:b2:
c0:06:22:07:27:50:98:19:ce:6d:0f:c9:47:78:6c:
25:35:e2:5d:79:0d:f5:67:9e:39:46:05:8f:d3:e3:
a2:fa:df:5e:0a:a4:ab:32:0b:e9:7a:db:1d:b8:05:
41:a9:40:41:7e:44:b6:1a:ce:94:b1:05:c4:bc:36:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.96.0/22
5.45.96.0/20
5.181.48.0/22
5.252.224.0/22
37.120.160.0/19
37.221.192.0/21
45.9.60.0/22
45.83.104.0/22
45.90.4.0/22
45.129.180.0/22
45.132.244.0/22
45.136.28.0/22
45.142.176.0/22
45.157.176.0/22
46.38.224.0/19
46.232.248.0/22
62.83.0.0/16
81.16.16.0/22
85.209.48.0/22
85.235.64.0/22
89.58.0.0/18
91.132.144.0/22
91.204.44.0/22
92.60.36.0/22
93.177.64.0/22
152.89.104.0/22
159.195.0.0/16
185.16.60.0/22
185.162.248.0/22
185.163.116.0/22
185.170.112.0/22
185.183.156.0/22
185.194.140.0/22
185.207.104.0/22
185.228.136.0/22
185.233.104.0/22
185.243.8.0/22
185.244.192.0/22
188.68.32.0/19
192.145.44.0/22
193.30.120.0/22
193.31.24.0/22
193.108.22.0/24
193.108.40.0/23
194.13.80.0/22
194.55.12.0/22
194.59.204.0/22
195.42.230.0/24
195.128.100.0/22
213.109.160.0/22
IPv6:
2a03:4000::/29
2a0a:4cc0::/32
2a0a:9d00::/32
2a0a:b000::/32
2a0b:1480::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197540
214996
Signature Algorithm: sha256WithRSAEncryption
95:22:82:b5:55:9b:0e:2f:77:c9:c4:ce:a0:c1:30:5f:c5:e8:
99:7b:c6:22:29:72:02:d6:7c:65:28:11:dc:2f:1d:9f:37:7b:
de:74:bb:69:14:99:e6:ea:c5:1d:b8:59:4e:a2:26:d4:ec:0c:
22:cc:26:1e:76:39:c4:23:e1:6f:33:df:1c:df:e0:ef:3b:b6:
ec:f1:23:40:63:42:db:a8:68:06:79:f7:f5:7b:56:a3:a2:5a:
4f:0a:ff:7d:f5:ba:29:cb:63:b6:58:36:a8:c2:13:cd:47:25:
a6:68:e6:ae:6e:60:8d:eb:d8:ed:b6:42:62:d4:04:1c:bf:62:
37:5a:f4:92:4f:80:f4:d9:02:cd:1b:3e:07:62:ae:62:05:0c:
87:ad:21:5f:40:0e:12:d4:82:9f:b0:70:6d:c9:0d:21:71:e5:
60:d1:ce:f7:b3:34:be:f8:8b:0f:69:d8:2e:b8:eb:13:36:8f:
88:aa:a5:cc:be:e5:cb:84:13:79:c1:d7:36:a0:e1:8b:10:9c:
d9:9a:00:01:4c:ee:a5:4c:ab:70:43:b0:2c:55:cd:77:e2:4a:
d2:7a:ff:f4:97:f0:94:ce:a3:3c:e9:89:ac:5f:90:23:e9:0c:
61:95:4f:fd:2f:d0:19:51:64:da:ce:ea:98:3d:d8:1d:0f:c3:
e2:ea:7d:69
-----BEGIN CERTIFICATE-----
MIIG8jCCBdqgAwIBAgISAaDC+dbjBL1jwj6fSWP8d95TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTIxMDc1OTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJlZWI4NzkwODVjOTQxOTQyOTdkZDllNGNkMjQ5Y2QyNTE2NTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBqZH6ZEtBC2QQJ3h0K/GINJH1FK
6qgVzIyuY5h/05MARLANynBzvIShoLwbEQTjC1jHzISujZMTwx8yWc5WrAYszc65
5zPiBZeEHSQDdkYt6pqBiB3X1wM7vhgBbvlYttN4UDcxDo/fW1n3PTPntiTFgtl6
pitMKYq7IO1iCFEnPyoZl+JN6BoFlLGnalh6oK0heDcY0xeEwBwA5LTm/EZWJGSS
8L4fH9q9f7FNFjZXBBstaSe5cg7cNk+FZH41ebLABiIHJ1CYGc5tD8lHeGwlNeJd
eQ31Z545RgWP0+Oi+t9eCqSrMgvpetsduAVBqUBBfkS2Gs6UsQXEvDYdvwIDAQAB
o4ID/jCCA/owHQYDVR0OBBYEFPYu64eQhclBlCl92eTNJJzSUWUVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzkxZGE4
Yi0wNTAyLTQ4ZGYtODUzMi01ZmJmOWEyOWI2ZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOTFkYThi
LTA1MDItNDhkZi04NTMyLTVmYmY5YTI5YjZlMS8xLzlpN3JoNUNGeVVHVUtYM1o1
TTBrbk5KUlpSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBdgYIKwYB
BQUHAQcBAf8EggFlMIIBYTCCATIEAgABMIIBKgMEAgI4YAMEBAUtYAMEAgW1MAME
AgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1TaAMEAi1aBAMEAi2BtAMEAi2E9AME
Ai2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o+AMDAD5TAwQCURAQAwQCVdEwAwQC
VetAAwQGWToAAwQCW4SQAwQCW8wsAwQCXDwkAwQCXbFAAwQCmFloAwMAn8MDBAK5
EDwDBAK5ovgDBAK5o3QDBAK5qnADBAK5t5wDBAK5wowDBAK5z2gDBAK55IgDBAK5
6WgDBAK58wgDBAK59MADBAW8RCADBALAkSwDBALBHngDBALBHxgDBADBbBYDBAHB
bCgDBALCDVADBALCNwwDBALCO8wDBADDKuYDBALDgGQDBALVbaAwKQQCAAIwIwMF
AyoDQAADBQAqCkzAAwUAKgqdAAMFACoKsAADBQAqCxSAMB8GCCsGAQUFBwEIAQH/
BBAwDqAMMAoCAwMDpAIDA0fUMA0GCSqGSIb3DQEBCwUAA4IBAQCVIoK1VZsOL3fJ
xM6gwTBfxeiZe8YiKXIC1nxlKBHcLx2fN3vedLtpFJnm6sUduFlOoibU7AwizCYe
djnEI+FvM98c3+DvO7bs8SNAY0LbqGgGeff1e1ajolpPCv999bopy2O2WDaowhPN
RyWmaOaubmCN69jttkJi1AQcv2I3WvSST4D02QLNGz4HYq5iBQyHrSFfQA4S1IKf
sHBtyQ0hceVg0c73szS++IsPadguuOsTNo+IqqXMvuXLhBN5wdc2oOGLEJzZmgAB
TO6lTKtwQ7AsVc134krSev/0l/CUzqM86YmsX5Aj6QxhlU/9L9AZUWTazuqYPdgd
D8Pi6n1p
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:09:41 2026 by rpki-client