Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer (raw, json)
Hash identifier: 5o+8wvSXcCen1HhagCrZUfHaQNnKIXXwizMCyxAU3xc=
Subject key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD440F05262E03CDCA2F55F04C926FA98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 13:21:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 5384
AS: 8959 -- 8961
AS: 8966
AS: 59981 -- 59983
AS: 199224
IP: 2.48.0.0/14
IP: 5.38.0.0/17
IP: 5.107.0.0/16
IP: 5.192.0.0 -- 5.194.251.255
IP: 5.195.0.0/16
IP: 9.137.0.0/16
IP: 9.153.0.0/16
IP: 9.171.0.0/16
IP: 9.178.0.0/16
IP: 9.199.0.0/16
IP: 31.215.0.0/16
IP: 31.218.0.0/15
IP: 37.245.0.0/16
IP: 83.110.0.0/15
IP: 86.96.0.0/14
IP: 91.213.211.0/26
IP: 92.96.0.0/14
IP: 94.56.0.0/14
IP: 109.177.0.0/16
IP: 151.253.0.0/16
IP: 176.204.0.0/15
IP: 185.1.15.0/24
IP: 185.3.152.0/22
IP: 193.34.203.128/26
IP: 194.170.0.0/16
IP: 195.229.0.0/16
IP: 213.42.0.0 -- 213.42.47.255
IP: 213.42.57.0 -- 213.42.83.255
IP: 213.42.88.0 -- 213.42.255.255
IP: 217.164.0.0/15
IP: 2001:7f8:7a::/48
IP: 2001:7f8:96::/48
IP: 2001:7f8:178::/48
IP: 2001:8f8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:40:f0:52:62:e0:3c:dc:a2:f5:5f:04:c9:26:fa:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 13:21:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:29:37:dc:0e:25:ce:2d:89:ca:4a:a0:68:
9d:c5:ff:dc:db:7f:76:19:c7:be:7c:eb:8f:02:c1:
ce:8f:05:56:c6:24:df:d4:85:86:f0:0d:eb:d8:21:
4a:46:27:ef:5e:e6:fa:5f:08:36:22:c1:a6:c0:b4:
28:65:e7:cf:81:5a:59:3f:58:9b:eb:65:79:01:fa:
6e:c2:96:45:72:6a:af:d1:97:75:bd:50:71:f6:f3:
1e:19:d5:0f:69:6d:28:59:6e:1a:7e:16:e2:6b:9c:
e7:cd:aa:4a:15:49:5a:93:f5:fd:a0:d7:d2:91:5a:
d9:ac:d3:c4:98:f1:dc:4c:86:e1:77:c5:39:20:24:
d2:6c:0c:99:ab:c1:12:e3:76:bb:ac:ba:86:6c:78:
fd:8a:96:73:d2:85:65:29:dd:06:7c:63:62:99:13:
6c:51:5f:1a:93:69:be:95:2a:33:f4:fc:93:d7:b9:
ad:36:2b:95:12:72:e4:41:4e:64:35:40:20:a1:2d:
33:51:11:e8:b1:30:a0:f5:95:71:36:1d:75:e9:be:
e5:45:df:27:97:eb:85:3e:0d:c1:59:d0:4b:93:e4:
8d:d1:23:53:4b:31:87:fd:9d:6a:9a:bf:84:b6:27:
88:9b:55:5a:7c:42:57:0d:4b:5d:e0:53:ec:20:2b:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.48.0.0/14
5.38.0.0/17
5.107.0.0/16
5.192.0.0-5.194.251.255
5.195.0.0/16
9.137.0.0/16
9.153.0.0/16
9.171.0.0/16
9.178.0.0/16
9.199.0.0/16
31.215.0.0/16
31.218.0.0/15
37.245.0.0/16
83.110.0.0/15
86.96.0.0/14
91.213.211.0/26
92.96.0.0/14
94.56.0.0/14
109.177.0.0/16
151.253.0.0/16
176.204.0.0/15
185.1.15.0/24
185.3.152.0/22
193.34.203.128/26
194.170.0.0/16
195.229.0.0/16
213.42.0.0-213.42.47.255
213.42.57.0-213.42.83.255
213.42.88.0-213.42.255.255
217.164.0.0/15
IPv6:
2001:7f8:7a::/48
2001:7f8:96::/48
2001:7f8:178::/48
2001:8f8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5384
8959-8961
8966
59981-59983
199224
Signature Algorithm: sha256WithRSAEncryption
9c:e0:f7:47:bf:0a:69:67:70:66:a8:36:67:6a:11:b8:38:27:
06:1c:15:10:22:24:78:8c:59:5e:0a:73:ee:a2:2e:b9:b3:a3:
d7:59:57:95:6c:96:f0:4a:a3:6a:8e:39:68:d7:62:29:0e:3b:
b5:5b:80:e7:6c:e9:6b:d0:11:c0:9b:99:56:61:e8:54:df:73:
17:91:cd:b8:e1:b2:c1:ca:12:83:62:cb:f4:d7:3e:7c:a5:b6:
23:95:3f:8a:42:5e:c5:64:ea:1b:5b:80:fa:ff:18:f5:82:72:
8b:d4:67:28:19:1c:66:b2:8d:c2:77:3d:ae:36:55:3d:14:8c:
b3:c4:10:20:67:83:d0:08:f7:c9:a3:d1:06:7b:17:8c:ff:c6:
f2:3a:f4:e9:cd:32:fc:44:29:b1:59:5a:ff:bf:57:bd:05:91:
3a:14:79:9e:9c:40:25:b0:e0:d0:a5:26:9d:6e:83:6d:01:37:
79:ad:1d:7b:91:3e:44:dc:9d:be:41:58:63:cb:b8:b7:6f:55:
83:0a:31:a4:5d:1b:82:01:7b:21:05:a6:1f:d3:f3:48:08:30:
55:7e:7e:79:25:a0:84:16:4c:f8:8d:ba:b8:b7:06:29:09:56:
e2:79:9f:93:39:0a:de:4c:ed:bb:f3:3d:ab:42:18:b4:0b:68:
06:4f:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:18:38 2026 by rpki-client