Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
File: ThXfaIw66uP2he1Es5bCGYOVhh0.cer (raw, json)
Hash identifier: rXGKGdv5bKGNlv/M7s1FBjfYXdvRDQPXYAj99MqHcy8=
Subject key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01993D1A80A840A253AE560AB543BB08197E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Sep 2025 08:46:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20961
AS: 21021
AS: 30824
AS: 44643
IP: 31.6.128.0/17
IP: 31.42.16.0/20
IP: 37.131.128.0/19
IP: 37.190.128.0/17
IP: 46.186.0.0/17
IP: 46.231.56.0/21
IP: 62.61.32.0/19
IP: 62.141.192.0/18
IP: 80.244.128.0/19
IP: 80.245.176.0/20
IP: 81.190.0.0/16
IP: 82.115.64.0/19
IP: 83.68.64.0/19
IP: 84.38.80.0/20
IP: 85.117.0.0/19
IP: 87.116.192.0/18
IP: 89.17.224.0/19
IP: 89.228.0.0/14
IP: 92.42.112.0/21
IP: 93.94.184.0/21
IP: 94.78.128.0/18
IP: 94.251.128.0/17
IP: 95.129.224.0/21
IP: 95.174.32.0/19
IP: 176.107.112.0/21
IP: 176.221.96.0/19
IP: 185.31.184.0/22
IP: 193.43.240.0/22
IP: 193.106.76.0/22
IP: 193.200.118.0/23
IP: 194.116.132.0/23
IP: 194.149.240.0/24
IP: 195.93.134.0/23
IP: 195.93.222.0/23
IP: 213.136.224.0/19
IP: 217.70.48.0/20
IP: 217.75.48.0/20
IP: 217.144.192.0/19
IP: 217.172.224.0/19
IP: 2a00:1c00::/32
IP: 2a00:bde0::/32
IP: 2a02:2a40::/32
IP: 2a03:e800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:1a:80:a8:40:a2:53:ae:56:0a:b5:43:bb:08:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 12 08:46:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:21:ee:88:04:aa:a2:1f:a2:35:c9:85:88:
52:78:3a:80:5a:a7:80:e6:65:c0:62:1f:61:26:63:
2d:66:e5:19:aa:33:37:7d:e8:3d:3f:15:47:28:cf:
9c:9f:b9:79:3e:c6:40:f6:12:af:3b:15:47:03:06:
65:a6:1e:27:0b:e8:4a:05:97:e5:ce:4c:91:1f:08:
44:cc:ed:32:5b:a4:81:3b:03:b2:74:82:2c:6b:28:
2a:a5:f1:26:bd:48:ff:76:d1:ab:05:08:63:dc:c6:
41:b6:9d:69:c8:e2:ee:93:0d:d9:78:53:cc:f7:3d:
89:01:72:7b:c5:57:1b:c7:b8:f8:7a:bf:2b:1e:b9:
5b:35:de:41:62:f0:8f:cd:f5:e1:20:a4:b1:30:32:
69:6a:6e:a2:17:83:71:b1:1f:b6:6c:13:a3:03:97:
e4:72:12:3b:6e:65:82:f2:a6:59:81:95:a8:cb:e8:
5f:35:ac:09:77:20:cf:b9:a3:79:3f:6b:eb:f1:44:
39:da:35:d3:33:95:c5:d6:41:4b:18:04:a3:cc:0d:
a8:87:f4:0e:06:cc:59:57:8f:82:e3:a7:32:b1:bb:
e6:3c:d1:9f:32:40:74:22:41:66:c1:97:e5:ca:98:
a4:67:b4:d1:28:f3:3f:12:ab:7f:1f:19:f9:85:87:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0/17
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
2a03:e800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20961
21021
30824
44643
Signature Algorithm: sha256WithRSAEncryption
52:a8:de:ff:da:31:e7:71:8e:74:c0:c8:6b:b2:06:72:fe:95:
87:94:94:e3:68:f7:f6:de:01:84:4c:cf:4d:8d:bd:9b:5f:04:
56:b9:0a:2f:c2:7b:9a:f0:38:9d:bb:91:87:02:9b:1d:4a:8c:
9f:d4:2c:13:1e:97:5f:25:9d:32:2e:75:11:92:b2:88:4c:5d:
65:3f:19:56:69:4a:6c:53:dd:29:c3:d9:cb:50:9c:cd:bc:35:
d5:6f:78:f4:b8:8c:d1:fb:2f:70:ba:49:a5:b3:83:25:53:4a:
7c:e5:29:91:25:67:ba:bc:ac:6c:8e:f2:9b:a3:fc:e2:52:29:
83:ea:ca:12:07:44:d7:a4:88:13:0d:40:ca:65:f2:11:62:24:
1c:e0:13:30:df:f9:bd:b2:e7:44:31:25:ce:64:22:2b:45:e9:
fc:bb:e5:59:6a:f1:23:22:0b:6c:73:a8:69:cd:de:5a:aa:8a:
9e:88:16:a1:ae:85:2e:a7:aa:82:5d:f9:cf:30:5e:5b:60:7a:
57:0f:40:49:bb:4a:e7:8c:ba:80:b7:3f:bc:ef:30:40:f1:6a:
4d:c0:d8:2b:20:29:71:ec:0c:d5:6f:a0:77:24:e9:81:f2:f0:
7a:b1:47:16:b4:ee:b6:c3:6a:d5:23:c2:f5:17:66:22:11:25:
fd:ef:ed:16
-----BEGIN CERTIFICATE-----
MIIGrjCCBZagAwIBAgISAZk9GoCoQKJTrlYKtUO7CBl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwOTEyMDg0NjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTE1ZGY2ODhjM2FlYWUzZjY4NWVkNDRiMzk2YzIxOTgzOTU4NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPAh7ogEqqIfojXJhYhSeDqAWqeA
5mXAYh9hJmMtZuUZqjM3feg9PxVHKM+cn7l5PsZA9hKvOxVHAwZlph4nC+hKBZfl
zkyRHwhEzO0yW6SBOwOydIIsaygqpfEmvUj/dtGrBQhj3MZBtp1pyOLukw3ZeFPM
9z2JAXJ7xVcbx7j4er8rHrlbNd5BYvCPzfXhIKSxMDJpam6iF4NxsR+2bBOjA5fk
chI7bmWC8qZZgZWoy+hfNawJdyDPuaN5P2vr8UQ52jXTM5XF1kFLGASjzA2oh/QO
BsxZV4+C46cysbvmPNGfMkB0IkFmwZflypikZ7TRKPM/Eqt/Hxn5hYdYUwIDAQAB
o4IDujCCA7YwHQYDVR0OBBYEFE4V32iMOurj9oXtRLOWwhmDlYYdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzBiZjdh
Yi01YWFiLTQzMzctYTAyYS04YTZlNTU0MTk2YmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvMGJmN2Fi
LTVhYWItNDMzNy1hMDJhLThhNmU1NTQxOTZiYi8xL1RoWGZhSXc2NnVQMmhlMUVz
NWJDR1lPVmhoMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBKwYIKwYB
BQUHAQcBAf8EggEaMIIBFjCB7wQCAAEwgegDBAcfBoADBAQfKhADBAUlg4ADBAcl
voADBAcuugADBAMu5zgDBAU+PSADBAY+jcADBAVQ9IADBARQ9bADAwBRvgMEBVJz
QAMEBVNEQAMEBFQmUAMEBVV1AAMEBld0wAMEBVkR4AMDAlnkAwQDXCpwAwQDXV64
AwQGXk6AAwQHXvuAAwQDX4HgAwQFX64gAwQDsGtwAwQFsN1gAwQCuR+4AwQCwSvw
AwQCwWpMAwQBwch2AwQBwnSEAwQAwpXwAwQBw12GAwQBw13eAwQF1YjgAwQE2UYw
AwQE2UswAwQF2ZDAAwQF2azgMCIEAgACMBwDBQAqABwAAwUAKgC94AMFACoCKkAD
BQAqA+gAMCYGCCsGAQUFBwEIAQH/BBcwFaATMBECAlHhAgJSHQICeGgCAwCuYzAN
BgkqhkiG9w0BAQsFAAOCAQEAUqje/9ox53GOdMDIa7IGcv6Vh5SU42j39t4BhEzP
TY29m18EVrkKL8J7mvA4nbuRhwKbHUqMn9QsEx6XXyWdMi51EZKyiExdZT8ZVmlK
bFPdKcPZy1Cczbw11W949LiM0fsvcLpJpbODJVNKfOUpkSVnurysbI7ym6P84lIp
g+rKEgdE16SIEw1AymXyEWIkHOATMN/5vbLnRDElzmQiK0Xp/LvlWWrxIyILbHOo
ac3eWqqKnogWoa6FLqeqgl35zzBeW2B6Vw9ASbtK54y6gLc/vO8wQPFqTcDYKyAp
cewM1W+gdyTpgfLwerFHFrTutsNq1SPC9RdmIhEl/e/tFg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:48:10 2025 by rpki-client