Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
File: ESunl1d-pgpWGvmkWYxFBg47cIg.cer (raw, json)
Hash identifier: 6/wg/HJwT44ELL7tglgfBMzS4MnG+/cNyVcEwjrt2kI=
Subject key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F15E5426621894055D612EB4582F104
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34779
AS: 197045
IP: 46.248.64.0/19
IP: 84.255.192.0/18
IP: 89.212.0.0/16
IP: 89.233.112.0/20
IP: 91.246.224.0/19
IP: 93.103.0.0/16
IP: 119.12.128.0/20
IP: 185.49.116.0/22
IP: 185.179.48.0/22
IP: 188.159.224.0/19
IP: 188.230.128.0/17
IP: 193.138.32.0/19
IP: 194.28.108.0/22
IP: 2a01:260::/29
IP: 2a03:f800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:e5:42:66:21:89:40:55:d6:12:eb:45:82:f1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=112ba797577ea60a561af9a4598c45060e3b7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:5f:5a:17:ae:d5:c4:9e:cf:75:39:7a:0f:
04:3a:a6:a5:d4:12:d1:8b:9e:72:ec:73:51:66:db:
e0:09:2a:91:45:6e:d8:ab:2c:65:31:ad:56:3e:0c:
65:36:74:c7:ff:17:ab:65:10:38:90:40:42:72:90:
88:67:54:8e:77:aa:5a:1c:80:45:01:52:6a:d6:98:
5c:7f:5f:29:0d:9e:a3:76:6f:bb:bd:15:68:27:db:
cb:f0:66:f5:eb:cb:2a:fe:68:c3:f7:87:49:06:ce:
af:98:8d:63:25:4f:34:95:b8:ee:6c:65:e5:7b:4e:
b4:8f:cd:3f:53:38:87:62:09:3c:1f:44:b4:39:c8:
0d:25:88:58:42:ab:70:63:e2:15:f5:8f:4f:4a:16:
4b:1e:17:0f:8f:68:07:39:6a:72:a1:34:97:d6:d1:
4d:4f:6b:1e:c9:82:35:67:2e:22:b9:78:33:e8:af:
d6:91:95:63:85:67:cb:12:cb:27:88:49:88:36:0c:
cd:9f:5d:2c:3e:78:86:33:19:01:e5:b5:b7:91:0b:
a5:87:53:3f:d3:81:b4:ca:86:5f:cc:a6:44:31:85:
07:d7:59:51:35:01:94:64:63:8f:8d:38:f9:13:70:
bc:45:1a:7d:93:b8:b6:8e:be:7e:28:94:ee:f7:8a:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
2a03:f800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34779
197045
Signature Algorithm: sha256WithRSAEncryption
8f:47:13:48:38:5b:c7:05:1b:c9:5a:6a:21:2d:63:8b:9f:92:
c8:d2:93:72:8a:94:65:bb:2a:23:2d:9a:48:03:c0:b0:55:52:
c9:6e:58:19:40:da:ce:4e:00:6e:58:d8:31:98:d1:da:75:9d:
5f:a6:6e:80:2a:a1:7e:e9:0f:c5:6a:0a:74:ce:16:89:74:db:
ee:68:5c:2a:29:40:c6:85:a4:bb:67:5c:1a:11:3e:5c:e6:63:
7d:83:2d:b1:f5:bf:30:18:3c:9a:ef:f9:71:c1:dd:c6:58:28:
f6:3f:72:49:56:eb:65:97:dd:95:54:5f:d6:09:30:1a:ff:5f:
1c:04:57:78:39:40:78:55:9a:b5:6a:c5:10:dc:7e:c7:df:7a:
cc:b4:26:14:19:89:e5:6b:77:22:80:0b:c2:06:e3:8a:cf:1e:
38:ff:fa:d6:49:3d:4e:74:b7:d2:31:5b:c7:d8:d6:84:2d:8f:
9f:72:87:c2:1f:45:76:80:f0:92:99:06:92:84:c7:d5:ad:4f:
0a:f2:31:51:cc:af:db:fd:e4:7b:17:c2:67:b3:ef:25:7f:bb:
60:bc:88:1c:28:4a:d3:60:66:5b:a5:86:35:02:c8:db:01:99:
35:de:f4:73:04:59:38:a3:1f:56:8e:fa:5d:0e:3a:99:0a:08:
eb:4e:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:38 2026 by rpki-client