Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.cer (raw, json)
Hash identifier: LV2qjtHv1Frlmk4HBXuzYxvrlr/ndApQDlvMTvmlIUA=
Subject key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E7113C19F0743455205A1428EC26359A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 08:51:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8674
AS: 20943
AS: 29216
AS: 39840
AS: 39870 -- 39871
AS: 52005
AS: 56908
AS: 57021
IP: 77.72.224.0/21
IP: 83.143.176.0/21
IP: 185.1.230.0/24
IP: 185.42.136.0/22
IP: 194.58.192.0/20
IP: 194.146.105.0 -- 194.146.108.255
IP: 194.153.157.0/25
IP: 195.69.116.0/22
IP: 195.245.240.0/24
IP: 212.237.192.0/21
IP: 213.32.232.0/21
IP: 2001:67c:1010::/47
IP: 2001:67c:254c::/48
IP: 2001:67c:2550::/48
IP: 2001:67c:2554::/48
IP: 2001:67c:2558::/48
IP: 2001:7f8:d::/48
IP: 2001:7f8:122::/48
IP: 2001:7fe::/32
IP: 2a01:3f0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:11:3c:19:f0:74:34:55:20:5a:14:28:ec:26:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 08:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bac82804700ad36538bf86f34c073e971430da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:bb:04:6c:0c:b7:48:62:f3:66:a4:14:49:
94:d0:77:6b:ed:0d:14:24:1e:5c:86:da:6c:e9:0c:
4e:69:01:e5:0f:da:aa:ea:6f:2b:f1:84:6a:fe:b5:
13:24:15:74:c0:81:54:9e:85:f2:f0:5d:58:3e:65:
4b:1d:88:09:e8:b5:70:67:df:51:4d:0d:ad:72:ff:
5e:62:3a:8a:d3:46:7a:52:b5:8e:03:ff:11:78:70:
40:be:90:34:1f:9b:36:8d:78:59:68:8a:5e:a6:71:
8f:dd:d0:73:9d:36:1f:67:c9:b2:de:74:61:95:f6:
3f:45:be:37:a7:c5:8c:7a:69:67:2c:52:81:46:0d:
f1:7e:5f:a5:9b:e8:47:d5:7a:d8:95:d9:f3:ff:48:
30:2b:a1:e2:82:07:d9:17:50:92:1a:6a:1d:4c:f5:
d6:b6:e0:42:10:bd:89:9a:8e:86:7b:34:98:46:7c:
84:bc:e0:4b:2a:36:40:f0:12:3c:82:81:3c:72:03:
8f:0f:72:ff:de:f7:1f:88:a5:7a:5f:8e:5d:ce:6a:
57:80:76:4c:55:2f:a4:b9:fd:14:b7:8f:c5:6c:fe:
e6:3e:03:38:0c:e8:0b:9d:e0:f7:cd:48:cb:6e:7d:
38:d5:c0:6c:28:b2:4f:c3:c1:85:6a:43:9e:e6:c3:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.224.0/21
83.143.176.0/21
185.1.230.0/24
185.42.136.0/22
194.58.192.0/20
194.146.105.0-194.146.108.255
194.153.157.0/25
195.69.116.0/22
195.245.240.0/24
212.237.192.0/21
213.32.232.0/21
IPv6:
2001:67c:1010::/47
2001:67c:254c::/48
2001:67c:2550::/48
2001:67c:2554::/48
2001:67c:2558::/48
2001:7f8:d::/48
2001:7f8:122::/48
2001:7fe::/32
2a01:3f0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8674
20943
29216
39840
39870-39871
52005
56908
57021
Signature Algorithm: sha256WithRSAEncryption
05:1f:8a:20:34:dd:2c:67:63:8b:86:2a:b6:6c:30:32:16:79:
07:47:0e:e5:97:e5:aa:07:b5:e6:c5:22:da:9a:85:75:a2:4c:
8e:87:a7:a1:b2:4a:f8:1d:58:ce:17:78:37:a3:ba:af:25:ec:
31:98:6a:5d:50:39:bc:f4:17:0a:4d:19:f4:4c:d6:40:7e:29:
30:cb:70:c4:1f:ab:58:5d:8c:d3:fe:af:a6:8c:09:95:fb:a3:
81:f6:06:68:44:e3:e9:27:0a:1a:c6:8a:41:57:9c:91:72:15:
db:0b:7d:d6:ad:4a:2d:2a:7b:3c:7d:97:70:c2:4b:b9:da:b9:
cc:8b:1e:b4:a7:5e:cf:9a:1f:f6:f4:7a:03:70:37:01:0c:8f:
ec:c2:88:17:40:39:f7:90:a0:12:3e:d7:81:22:d9:73:65:d7:
40:1d:6a:21:75:3c:97:24:4f:ab:ff:5f:b1:68:4a:7d:96:43:
13:07:63:74:f7:4b:ac:b4:0e:ce:7e:79:b2:f6:07:2b:0f:65:
02:af:75:3b:6e:ff:17:87:ea:b3:35:40:83:70:c0:a9:79:6b:
ff:7e:ff:3f:c3:fe:c4:0e:e8:38:6a:03:23:d2:44:b8:c6:1d:
9b:3b:cb:9f:e6:38:1a:63:d7:90:fd:c6:bd:67:ce:c8:bb:e7:
55:05:7e:7d
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISAZnnETwZ8HQ0VSBaFCjsJjWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDE1MDg1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmFjODI4MDQ3MDBhZDM2NTM4YmY4NmYzNGMwNzNlOTcxNDMwZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAe7BGwMt0hi82akFEmU0Hdr7Q0U
JB5chtps6QxOaQHlD9qq6m8r8YRq/rUTJBV0wIFUnoXy8F1YPmVLHYgJ6LVwZ99R
TQ2tcv9eYjqK00Z6UrWOA/8ReHBAvpA0H5s2jXhZaIpepnGP3dBznTYfZ8my3nRh
lfY/Rb43p8WMemlnLFKBRg3xfl+lm+hH1XrYldnz/0gwK6HiggfZF1CSGmodTPXW
tuBCEL2Jmo6GezSYRnyEvOBLKjZA8BI8goE8cgOPD3L/3vcfiKV6X45dzmpXgHZM
VS+kuf0Ut4/FbP7mPgM4DOgLneD3zUjLbn041cBsKLJPw8GFakOe5sMLcQIDAQAB
o4IDZDCCA2AwHQYDVR0OBBYEFAusgoBHAK02U4v4bzTAc+lxQw2lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2E3Mjg5
MS1kZTJmLTQxNTYtYTAxMS00M2Y2NGJjZWE5OWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvYTcyODkx
LWRlMmYtNDE1Ni1hMDExLTQzZjY0YmNlYTk5ZC8xL0M2eUNnRWNBclRaVGlfaHZO
TUJ6NlhGRERhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG7BggrBgEF
BQcBBwEB/wSBqzCBqDBRBAIAATBLAwQDTUjgAwQDU4+wAwQAuQHmAwQCuSqIAwQE
wjrAMAwDBADCkmkDBADCkmwDBQfCmZ0AAwQCw0V0AwQAw/XwAwQD1O3AAwQD1SDo
MFMEAgACME0DBwEgAQZ8EBADBwAgAQZ8JUwDBwAgAQZ8JVADBwAgAQZ8JVQDBwAg
AQZ8JVgDBwAgAQf4AA0DBwAgAQf4ASIDBQAgAQf+AwUDKgED8DBBBggrBgEFBQcB
CAEB/wQyMDCgLjAsAgIh4gICUc8CAnIgAgMAm6AwCgIDAJu+AgMAm78CAwDLJQID
AN5MAgMA3r0wDQYJKoZIhvcNAQELBQADggEBAAUfiiA03SxnY4uGKrZsMDIWeQdH
DuWX5aoHtebFItqahXWiTI6Hp6GySvgdWM4XeDejuq8l7DGYal1QObz0FwpNGfRM
1kB+KTDLcMQfq1hdjNP+r6aMCZX7o4H2BmhE4+knChrGikFXnJFyFdsLfdatSi0q
ezx9l3DCS7naucyLHrSnXs+aH/b0egNwNwEMj+zCiBdAOfeQoBI+14Ei2XNl10Ad
aiF1PJckT6v/X7FoSn2WQxMHY3T3S6y0Ds5+ebL2BysPZQKvdTtu/xeH6rM1QINw
wKl5a/9+/z/D/sQO6DhqAyPSRLjGHZs7y5/mOBpj15D9xr1nzsi751UFfn0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:52:58 2025 by rpki-client