Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer
File: _XG6v3rWzBDWx2Tz5WrkFcHEX6A.cer (raw, json)
Hash identifier: 2dFhk0g4nTWmtlzsoqRRoPNnlQp1ZMg5WkwZjgIMkWQ=
Subject key identifier: FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0477D261FD2D6E4CBAF7FF162599A317F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Aug 2026 08:29:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8883
IP: 94.154.164.0/22
IP: 137.156.0.0/16
IP: 138.206.0.0/16
IP: 139.149.0.0/16
IP: 147.60.0.0/16
IP: 155.145.0.0/16
IP: 156.115.0.0/16
IP: 160.59.0.0/16
IP: 161.20.0.0/16
IP: 165.222.0.0/16
IP: 192.153.89.0/24
IP: 192.238.1.0 -- 192.238.10.255
IP: 193.5.96.0/20
IP: 193.134.104.0/21
IP: 193.134.254.0/24
IP: 193.135.208.0 -- 193.135.213.255
IP: 194.69.181.0/24
IP: 194.69.183.0/24
IP: 2a02:c180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:7d:26:1f:d2:d6:e4:cb:af:7f:f1:62:59:9a:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 08:29:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd71babf7ad6cc10d6c764f3e56ae415c1c45fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:0e:48:4e:ff:13:7a:c7:bf:62:b5:c8:1c:
a6:38:c9:93:df:91:c3:2a:80:c7:09:4e:2a:b2:b3:
3f:d0:62:41:02:14:cf:d0:27:b7:9c:15:2e:89:26:
3c:eb:9c:59:d8:6a:4d:07:cd:7d:5d:ab:82:5b:0c:
c1:c7:30:6a:f2:86:88:ae:62:ce:2b:cd:f6:ed:9f:
21:ef:94:c5:a5:4e:e3:95:97:2a:6e:54:32:91:79:
e2:12:39:bd:42:d0:01:a8:ae:4a:30:f8:d0:93:00:
3f:b0:45:99:a4:60:33:9f:12:96:96:2e:87:7c:b2:
64:98:74:ea:6e:d6:17:b3:1b:79:26:83:fd:8b:9d:
ad:93:c0:3a:3b:6a:ff:de:23:d8:1f:fe:fc:1c:de:
32:c9:b0:94:fe:d9:df:5f:a9:08:37:f4:58:4a:8b:
ed:a2:40:d5:65:dd:e7:2e:57:d5:44:9f:2c:9a:4f:
b7:8d:e5:4e:e8:22:05:94:c7:1b:51:a9:1b:3b:98:
6f:02:62:88:4a:4b:4b:28:d0:38:17:ae:d1:1e:82:
97:d9:cd:8a:e2:fd:8e:4b:60:2c:2f:31:fd:60:ac:
7e:b4:76:92:15:12:d5:92:1a:79:87:16:84:79:6c:
6a:e2:47:23:11:28:8c:43:e1:ff:47:84:c5:75:7f:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:71:BA:BF:7A:D6:CC:10:D6:C7:64:F3:E5:6A:E4:15:C1:C4:5F:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ca5ab0-c702-4a98-bcdf-f12f4a70552c/1/_XG6v3rWzBDWx2Tz5WrkFcHEX6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.164.0/22
137.156.0.0/16
138.206.0.0/16
139.149.0.0/16
147.60.0.0/16
155.145.0.0/16
156.115.0.0/16
160.59.0.0/16
161.20.0.0/16
165.222.0.0/16
192.153.89.0/24
192.238.1.0-192.238.10.255
193.5.96.0/20
193.134.104.0/21
193.134.254.0/24
193.135.208.0-193.135.213.255
194.69.181.0/24
194.69.183.0/24
IPv6:
2a02:c180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8883
Signature Algorithm: sha256WithRSAEncryption
55:e9:56:6b:4f:b3:94:ff:48:b6:7b:36:c4:87:1e:09:17:fe:
7b:25:1c:76:a5:8f:8f:60:81:ec:ff:d1:99:a7:97:e5:49:2a:
c6:d2:06:78:b5:12:11:66:4b:4b:39:e0:50:eb:9e:e1:06:8f:
16:ea:8a:fa:0c:49:0f:b3:18:b3:f9:e9:9e:22:50:d5:1f:4b:
37:27:ae:67:b8:eb:40:dc:51:a2:f9:7e:04:9c:8c:11:81:6c:
f1:97:54:0a:53:11:e0:14:68:57:a1:64:70:f9:63:0f:28:70:
0f:bb:be:0d:97:9b:43:fc:73:b8:88:64:c8:f9:2b:34:18:e7:
31:08:f0:fd:fe:7c:fc:37:2f:38:95:fd:c7:28:27:0a:ab:3a:
49:70:e5:cd:83:cf:64:30:88:dd:61:96:56:ca:2e:34:0f:de:
07:55:f4:b6:34:73:66:58:a9:82:34:9e:e1:24:96:c3:21:25:
2f:ca:22:8d:ba:9d:aa:e6:7f:f8:cb:d4:94:a2:e4:41:7a:55:
9f:45:20:3e:e6:fc:ae:ad:5a:ae:86:2c:b3:01:1b:4e:d6:d0:
75:ab:6d:05:50:c3:55:bc:96:65:eb:14:f2:59:a1:b4:c0:54:
d8:c9:09:e8:68:cd:30:fd:5d:09:26:ee:28:e5:44:d1:f2:9d:
58:32:f4:a4
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISAaBHfSYf0tbky69/8WJZmjF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODI4MDgyOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDcxYmFiZjdhZDZjYzEwZDZjNzY0ZjNlNTZhZTQxNWMxYzQ1ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseQOSE7/E3rHv2K1yBymOMmT35HD
KoDHCU4qsrM/0GJBAhTP0Ce3nBUuiSY865xZ2GpNB819XauCWwzBxzBq8oaIrmLO
K8327Z8h75TFpU7jlZcqblQykXniEjm9QtABqK5KMPjQkwA/sEWZpGAznxKWli6H
fLJkmHTqbtYXsxt5JoP9i52tk8A6O2r/3iPYH/78HN4yybCU/tnfX6kIN/RYSovt
okDVZd3nLlfVRJ8smk+3jeVO6CIFlMcbUakbO5hvAmKISktLKNA4F67RHoKX2c2K
4v2OS2AsLzH9YKx+tHaSFRLVkhp5hxaEeWxq4kcjESiMQ+H/R4TFdX80pQIDAQAB
o4IDHjCCAxowHQYDVR0OBBYEFP1xur961swQ1sdk8+Vq5BXBxF+gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2NhNWFi
MC1jNzAyLTRhOTgtYmNkZi1mMTJmNGE3MDU1MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvY2E1YWIw
LWM3MDItNGE5OC1iY2RmLWYxMmY0YTcwNTUyYy8xL19YRzZ2M3JXekJEV3gyVHo1
V3JrRmNIRVg2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGdBggrBgEF
BQcBBwEB/wSBjTCBijB5BAIAATBzAwQCXpqkAwMAiZwDAwCKzgMDAIuVAwMAkzwD
AwCbkQMDAJxzAwMAoDsDAwChFAMDAKXeAwQAwJlZMAwDBADA7gEDBADA7goDBATB
BWADBAPBhmgDBADBhv4wDAMEBMGH0AMEAcGH1AMEAMJFtQMEAMJFtzANBAIAAjAH
AwUDKgLBgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIiszANBgkqhkiG9w0BAQsF
AAOCAQEAVelWa0+zlP9Itns2xIceCRf+eyUcdqWPj2CB7P/RmaeX5UkqxtIGeLUS
EWZLSzngUOue4QaPFuqK+gxJD7MYs/npniJQ1R9LNyeuZ7jrQNxRovl+BJyMEYFs
8ZdUClMR4BRoV6FkcPljDyhwD7u+DZebQ/xzuIhkyPkrNBjnMQjw/f58/DcvOJX9
xygnCqs6SXDlzYPPZDCI3WGWVsouNA/eB1X0tjRzZlipgjSe4SSWwyElL8oijbqd
quZ/+MvUlKLkQXpVn0UgPub8rq1aroYsswEbTtbQdattBVDDVbyWZesU8lmhtMBU
2MkJ6GjNMP1dCSbuKOVE0fKdWDL0pA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:31:21 2026 by rpki-client