Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EWXPgb9aPQz1nUExFIp2HzS_nKg.cer
File: EWXPgb9aPQz1nUExFIp2HzS_nKg.cer (raw, json)
Hash identifier: WHCds6YQpqDrz7rhdQIyAh5Cnzyty7qfYJ4D0sBqZf8=
Subject key identifier: 11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF7636E6CEC0BD63ACCA3DADE136DF465
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Mar 2026 16:03:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213098
IP: 85.209.42.0/24
IP: 185.222.20.0/24
IP: 188.72.42.0/23
IP: 193.47.189.0/24
IP: 194.34.11.0/24
IP: 195.62.88.0/24
IP: 2a0c:9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:63:6e:6c:ec:0b:d6:3a:cc:a3:da:de:13:6d:f4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 16:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1165cf81bf5a3d0cf59d4131148a761f34bf9ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:fe:9d:81:ce:80:06:fb:74:e2:57:b1:ac:
f3:24:b6:9b:70:44:1d:24:5c:bc:d1:87:b2:de:2b:
19:29:69:18:3c:e4:9d:45:cf:9c:db:b3:c9:b5:a2:
19:0c:2d:01:f1:ef:1d:10:2a:a6:2b:f5:7c:21:94:
1b:fa:af:b4:30:d9:78:b7:f0:f4:19:d8:88:31:96:
12:fc:43:21:de:7c:89:a3:89:a7:ac:82:46:72:92:
33:d5:90:55:1a:f5:40:14:8f:21:d1:0b:89:54:8c:
53:a8:b8:d8:ca:c8:99:74:26:9c:0d:b9:85:43:4c:
3b:5b:59:be:c1:1a:c8:66:9e:9c:2d:e2:76:c3:60:
ff:06:8b:6e:34:55:15:8e:4b:cf:6d:17:75:bc:ed:
c3:5e:b2:fd:d5:e3:b4:bd:46:c4:76:33:4b:50:29:
11:4e:c2:33:f1:5a:16:6f:4f:cc:2e:09:5b:41:c2:
24:39:95:4d:fb:a5:c7:47:40:b9:1c:d1:20:0f:a9:
97:73:72:aa:cf:99:12:b5:ba:04:18:6f:47:c6:6b:
92:88:13:32:c6:ba:14:5b:18:74:a4:c0:9f:ba:c3:
da:d4:6e:a7:98:fe:39:31:64:16:64:7b:e4:ed:1b:
c8:09:53:a9:b4:e8:65:0a:d4:fe:80:89:c5:ca:e1:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:CF:81:BF:5A:3D:0C:F5:9D:41:31:14:8A:76:1F:34:BF:9C:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/EWXPgb9aPQz1nUExFIp2HzS_nKg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.42.0/24
185.222.20.0/24
188.72.42.0/23
193.47.189.0/24
194.34.11.0/24
195.62.88.0/24
IPv6:
2a0c:9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213098
Signature Algorithm: sha256WithRSAEncryption
00:00:a5:c4:5b:e0:a2:f0:0e:62:59:36:29:ab:08:14:5a:57:
4d:db:85:67:64:08:47:7b:a8:66:3c:45:24:3d:f7:ff:08:ee:
d1:3a:5e:cc:e6:1a:bf:d1:99:d7:43:23:24:1d:d1:9e:1a:f1:
e1:86:39:62:3c:af:fa:7e:5b:1e:a4:88:b9:9f:b4:f6:ed:f0:
f2:f9:d1:bf:ad:f1:73:62:7e:5f:1b:69:10:4c:71:ee:b3:5b:
42:6e:cf:3a:51:dd:d4:9c:b6:3b:20:65:6c:52:b4:01:20:34:
00:b2:d8:e7:76:36:0c:81:e6:49:8c:66:c3:e0:7c:6d:2a:92:
99:f7:09:ed:69:48:80:34:8e:a5:71:aa:e1:47:ea:8e:78:5d:
da:36:93:87:2c:39:98:9d:6c:72:0b:28:a5:96:7d:69:63:d7:
75:5f:02:61:f2:66:a1:77:f3:ad:31:f3:c2:2b:ca:4e:a2:a7:
57:46:a2:20:e3:79:70:48:42:75:a7:83:b2:83:e1:e5:3f:52:
8f:48:20:c7:2a:0f:a3:5e:22:ec:14:13:18:d5:4c:da:23:22:
77:d1:76:8f:56:89:cc:69:cc:a9:f8:ad:23:69:fa:fe:f5:37:
cb:f3:70:77:c8:f0:04:50:83:c9:dd:0c:7a:82:dc:a3:4a:c6:
6a:01:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:48 2026 by rpki-client