Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.cer (raw, json)
Hash identifier: 8k7whaqyC1GXYveP8Ga2nVTkw9jvBaWDBtrkZqb3tqA=
Subject key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB5C91E8BB96F478F27CD7EFDBF71D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57910
IP: 31.214.176.0/20
IP: 37.10.72.0/21
IP: 37.152.88.0/21
IP: 45.149.228.0/22
IP: 46.18.72.0/21
IP: 82.198.48.0/20
IP: 87.117.96.0/20
IP: 91.132.116.0/22
IP: 95.214.0.0/22
IP: 109.69.48.0/21
IP: 185.11.236.0/22
IP: 185.161.12.0/22
IP: 185.226.236.0/22
IP: 193.57.36.0/22
IP: 194.56.236.0/22
IP: 194.127.158.0/23
IP: 194.127.162.0/23
IP: 2a00:b5c0::/32
IP: 2a02:2110::/32
IP: 2a0c:7a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:5c:91:e8:bb:96:f4:78:f2:7c:d7:ef:db:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:74:9a:dc:fc:92:14:76:c5:24:1c:cf:4e:
de:12:0a:e0:a3:83:58:90:e0:a0:4b:21:6a:da:45:
52:ee:cf:f3:86:d6:e2:9f:fa:fc:dd:4b:14:97:99:
72:23:e0:82:4a:3d:db:24:a7:9b:4f:cd:f1:9a:4c:
b5:8d:57:eb:1f:c5:68:39:e0:6d:4d:4a:52:cc:5e:
6b:be:2b:d3:15:86:0c:4b:94:54:97:22:98:20:b2:
11:18:b4:59:1c:82:f1:6d:34:ef:90:1c:38:b0:66:
18:b8:1c:1a:49:2d:be:46:21:f1:88:44:1e:60:0a:
60:a7:b9:fa:c0:47:77:85:fa:f9:68:0f:8c:99:6c:
03:b7:e2:c6:8f:a2:76:51:ea:14:f9:23:88:10:96:
3e:17:c7:90:81:a1:83:a7:33:bd:d8:2d:13:2a:75:
e6:23:6f:5d:32:64:2f:5a:7e:2b:16:46:3a:4b:78:
cb:7c:b8:04:83:23:c7:76:e7:4e:ce:8a:af:56:ee:
44:aa:54:db:c0:8e:54:b4:2a:a8:14:42:01:91:8d:
5e:d1:00:89:51:b2:5d:3b:e9:50:c1:8c:b0:67:08:
91:c1:79:f2:72:e7:00:fd:af:bf:a2:57:e2:00:1a:
a1:44:38:79:d9:30:10:08:6a:98:0e:29:a8:6a:d5:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.176.0/20
37.10.72.0/21
37.152.88.0/21
45.149.228.0/22
46.18.72.0/21
82.198.48.0/20
87.117.96.0/20
91.132.116.0/22
95.214.0.0/22
109.69.48.0/21
185.11.236.0/22
185.161.12.0/22
185.226.236.0/22
193.57.36.0/22
194.56.236.0/22
194.127.158.0/23
194.127.162.0/23
IPv6:
2a00:b5c0::/32
2a02:2110::/32
2a0c:7a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57910
Signature Algorithm: sha256WithRSAEncryption
58:b2:41:45:e3:61:65:8b:bd:58:cf:9e:f7:06:cc:fa:e4:f2:
6e:7b:c0:f5:a8:5d:d3:62:1e:3b:8f:23:b3:26:e4:7c:07:64:
63:aa:52:3b:f6:7f:e4:f6:7b:f3:27:cd:4e:8a:85:91:fe:fe:
ee:67:09:fb:26:32:87:93:b9:a9:13:b3:08:22:d1:50:f8:20:
60:4c:f0:48:da:4f:3d:36:8f:84:ca:80:03:9c:0f:db:4f:88:
b9:f2:12:f3:7b:27:1c:fc:bd:bb:f2:a5:e8:58:5f:19:cd:d5:
80:28:cb:ab:f1:5d:5e:32:70:62:92:fd:71:e4:69:cd:83:b0:
33:52:e4:4f:b0:41:ce:9a:11:99:4b:13:5c:a3:6e:aa:db:5f:
06:52:31:f3:0e:fb:cc:56:3a:b9:e4:1a:0c:ea:72:03:72:da:
74:22:41:35:02:ef:dc:bd:09:70:0c:f9:42:d8:19:dd:45:24:
55:ff:84:7f:e6:a3:2a:9c:0d:cf:b9:d4:e1:59:50:29:77:44:
19:d5:5b:0b:69:5e:47:3e:b8:d6:a3:de:0c:9a:de:c9:b7:0d:
67:45:69:e3:fd:dd:f3:c1:42:8f:bb:e9:f9:ba:ef:04:71:0f:
b5:60:4d:40:e1:6d:01:60:c6:80:10:35:c4:9d:35:d7:6c:5e:
07:e8:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:32:52 2026 by rpki-client