Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LRVM60zslBwgUHpma-ZNiFHEsIY.cer
File: LRVM60zslBwgUHpma-ZNiFHEsIY.cer (raw, json)
Hash identifier: p853GpSTj8O+VFsQSSR4upILw8cmn1zew4m64ATFtaI=
Subject key identifier: 2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC05277FA17B6F46B860924C6E1668
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 89.33.107.0/24
IP: 89.42.108.0/23
IP: 89.43.79.0/24
IP: 185.128.96.0/22
IP: 185.197.149.0/24
IP: 195.62.51.0/24
IP: 213.170.208.0/22
IP: 2a06:cec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:05:27:7f:a1:7b:6f:46:b8:60:92:4c:6e:16:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d154ceb4cec941c20507a666be64d8851c4b086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:1c:25:d9:a0:d6:d0:06:56:d5:ae:66:c1:
00:e2:e3:ed:9f:9a:2b:95:d9:e6:37:95:af:f3:f9:
e0:5b:b1:99:2a:79:b3:5a:c8:0f:43:8e:9e:09:1e:
d7:27:f0:c1:d9:30:b5:95:3b:d1:dc:a9:71:07:50:
8b:16:65:0c:25:20:4d:fa:13:97:3a:cc:93:98:d8:
b7:dc:d6:69:7d:20:c8:2d:b9:a1:df:88:ce:b5:3e:
4f:e4:46:19:1d:f3:10:7c:97:fa:13:ef:7c:d1:b2:
6f:28:e9:82:35:06:53:3d:01:ed:43:41:24:ca:63:
f4:98:a8:23:b9:d4:75:e6:dc:3f:ad:a6:92:eb:db:
4d:f0:e4:00:62:47:34:cc:97:59:82:a2:e3:b1:77:
8c:96:c8:94:22:8d:90:f4:01:cf:46:04:00:a5:a5:
00:5e:bc:2c:fc:d8:ed:ef:81:96:94:d8:58:2f:14:
eb:72:79:76:83:69:93:f8:f2:45:83:5f:56:04:59:
f4:fb:6a:05:e5:6e:9b:6f:26:59:6e:06:d7:e1:81:
90:dc:53:03:6b:b3:28:b2:22:f9:03:e7:2f:27:93:
96:b3:ed:76:d6:d9:c4:e4:7e:05:ca:41:06:14:99:
8f:df:0e:6b:ad:8d:52:66:a0:f4:52:54:01:9a:1b:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:15:4C:EB:4C:EC:94:1C:20:50:7A:66:6B:E6:4D:88:51:C4:B0:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/LRVM60zslBwgUHpma-ZNiFHEsIY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
195.62.51.0/24
213.170.208.0/22
IPv6:
2a06:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
73:db:f9:f3:62:05:7d:f5:a3:c2:4c:61:8c:2d:69:24:04:80:
b5:9e:ee:6d:2c:9c:83:34:fd:69:af:f4:b5:a6:88:60:93:2b:
ec:0b:97:1f:83:f3:15:6d:ff:42:4d:9c:b7:2b:4d:aa:c7:e2:
3d:ef:d9:6f:b4:bd:31:0b:fc:55:30:a4:7a:24:5c:7b:56:e1:
fe:b6:fa:78:fe:1b:87:a4:20:fd:9a:3e:a4:38:be:65:71:d8:
df:32:ca:1c:bf:c0:66:a9:35:65:23:09:87:4e:f2:fc:cf:c1:
06:29:4d:e4:5b:2a:c1:32:1a:5c:fd:01:b8:22:e5:9e:44:53:
93:e6:44:a4:0e:7e:fe:3a:03:b4:15:75:0d:fc:33:f2:be:87:
fb:8f:e2:67:59:ea:29:e6:97:7f:e4:bb:2c:16:a4:5c:80:ab:
1b:1f:f6:ee:c3:00:2e:34:25:bc:98:a4:c1:f9:75:6b:67:55:
61:f5:1b:ef:92:d9:59:34:58:b6:bf:eb:ea:fa:66:98:a1:58:
a9:d1:6d:36:fc:88:fc:36:4d:63:05:61:e1:b2:40:d6:a3:ed:
af:e2:07:79:ed:ad:b4:a8:82:33:16:f7:9d:71:79:48:b1:a9:
fb:7b:ee:50:0c:0f:ac:ff:a3:86:63:b8:e6:c0:77:18:d9:b7:
b5:aa:ba:1b
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAZ8Y/AUnf6F7b0a4YJJMbhZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDE1NGNlYjRjZWM5NDFjMjA1MDdhNjY2YmU2NGQ4ODUxYzRiMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu10cJdmg1tAGVtWuZsEA4uPtn5or
ldnmN5Wv8/ngW7GZKnmzWsgPQ46eCR7XJ/DB2TC1lTvR3KlxB1CLFmUMJSBN+hOX
OsyTmNi33NZpfSDILbmh34jOtT5P5EYZHfMQfJf6E+980bJvKOmCNQZTPQHtQ0Ek
ymP0mKgjudR15tw/raaS69tN8OQAYkc0zJdZgqLjsXeMlsiUIo2Q9AHPRgQApaUA
Xrws/Njt74GWlNhYLxTrcnl2g2mT+PJFg19WBFn0+2oF5W6bbyZZbgbX4YGQ3FMD
a7MosiL5A+cvJ5OWs+121tnE5H4FykEGFJmP3w5rrY1SZqD0UlQBmhvdtwIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFC0VTOtM7JQcIFB6ZmvmTYhRxLCGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2IyNjg1
OS05YjE0LTQ1MGYtYmI4NS01OTJlZDczNzYxY2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYjI2ODU5
LTliMTQtNDUwZi1iYjg1LTU5MmVkNzM3NjFjYS8xL0xSVk02MHpzbEJ3Z1VIcG1h
LVpOaUZIRXNJWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQAWSFrAwQBWSpsAwQAWStPAwQCuYBgAwQAucWV
AwQAwz4zAwQC1arQMA0EAgACMAcDBQMqBs7AMA0GCSqGSIb3DQEBCwUAA4IBAQBz
2/nzYgV99aPCTGGMLWkkBIC1nu5tLJyDNP1pr/S1pohgkyvsC5cfg/MVbf9CTZy3
K02qx+I979lvtL0xC/xVMKR6JFx7VuH+tvp4/huHpCD9mj6kOL5lcdjfMsocv8Bm
qTVlIwmHTvL8z8EGKU3kWyrBMhpc/QG4IuWeRFOT5kSkDn7+OgO0FXUN/DPyvof7
j+JnWeop5pd/5LssFqRcgKsbH/buwwAuNCW8mKTB+XVrZ1Vh9RvvktlZNFi2v+vq
+maYoVip0W02/Ij8Nk1jBWHhskDWo+2v4gd57a20qIIzFvedcXlIsan7e+5QDA+s
/6OGY7jmwHcY2be1qrob
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:54 2026 by rpki-client