Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
File: dWEnxs1ONdmPCkujYs4nMWSXGUI.cer (raw, json)
Hash identifier: MqGutitfEcCBJ1IP2AicCrm/QftC02yhmncl1YSugHI=
Subject key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB3159341611D3F46302B1E8B9FA5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34232
AS: 47441
AS: 48625
AS: 56534
AS: 203139
IP: 45.135.212.0/22
IP: 89.104.126.0/24
IP: 89.223.16.0/23
IP: 89.223.80.0/21
IP: 89.223.96.0/24
IP: 89.223.98.0 -- 89.223.100.255
IP: 92.255.43.0/24
IP: 92.255.49.0/24
IP: 92.255.53.0/24
IP: 92.255.55.0/24
IP: 92.255.60.0/24
IP: 92.255.88.0 -- 92.255.103.255
IP: 93.174.72.0/21
IP: 176.53.192.0 -- 176.53.215.255
IP: 185.47.52.0/22
IP: 185.108.4.0/22
IP: 193.28.6.0/24
IP: 2001:7f8:82::/48
IP: 2a04:ac00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:31:59:34:16:11:d3:f4:63:02:b1:e8:b9:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:e6:3d:50:54:6f:29:1f:7e:82:26:c9:72:
be:6a:76:8f:12:b4:c7:39:31:21:b0:c1:6d:ad:53:
2f:4a:0d:54:af:89:d6:13:1d:f7:a4:c5:97:51:04:
b5:09:b5:ae:25:a5:d0:53:12:35:2c:90:6b:78:12:
a2:a3:b4:8c:58:11:82:19:7d:e3:60:e6:08:90:3e:
44:25:29:dd:fa:3e:a9:df:1c:74:31:43:3c:80:a2:
9e:3f:96:b5:86:a2:6e:79:94:9f:c4:b9:08:7d:36:
fb:af:f1:37:ec:e5:5e:ec:b4:8c:0e:65:03:08:b2:
2e:7e:82:8d:b8:92:de:8b:ef:69:ae:c4:38:14:eb:
a8:88:0e:3a:d8:de:ab:ba:30:ad:5b:09:64:f2:9d:
3e:e0:bf:e0:18:38:40:21:68:37:26:73:4b:ba:8e:
ef:77:78:18:a1:1e:d1:56:f1:16:67:84:6e:1c:76:
6c:7e:f4:c8:12:93:ba:a8:8b:00:b3:b6:6d:9c:d5:
70:71:ef:a5:5c:21:3a:46:1e:4c:0c:9a:cb:7a:20:
81:79:fa:aa:0e:3a:b4:82:e0:f4:86:8c:df:c6:f9:
a5:2b:2c:94:1e:ba:d8:29:f3:35:ea:ea:67:66:18:
d3:59:8b:f6:4b:49:6c:04:c6:8a:1c:d0:87:78:92:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.212.0/22
89.104.126.0/24
89.223.16.0/23
89.223.80.0/21
89.223.96.0/24
89.223.98.0-89.223.100.255
92.255.43.0/24
92.255.49.0/24
92.255.53.0/24
92.255.55.0/24
92.255.60.0/24
92.255.88.0-92.255.103.255
93.174.72.0/21
176.53.192.0-176.53.215.255
185.47.52.0/22
185.108.4.0/22
193.28.6.0/24
IPv6:
2001:7f8:82::/48
2a04:ac00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34232
47441
48625
56534
203139
Signature Algorithm: sha256WithRSAEncryption
3a:59:5b:01:d7:7a:32:3e:76:15:c1:46:f9:e6:aa:ec:54:9e:
c1:77:e3:c0:e4:6c:4c:de:20:92:3f:b8:ac:e2:33:87:3c:cf:
ff:1d:46:a9:b8:23:b6:62:f9:4b:6d:1a:14:91:52:8c:df:ad:
b1:cd:9b:0f:e1:9e:ec:07:f2:01:c4:19:a9:5d:8b:c9:de:1d:
d7:c2:aa:9a:49:ad:5d:95:0f:12:86:8c:84:5e:ac:3d:f6:52:
b8:4e:2b:77:7a:f9:84:ed:81:53:6c:9e:87:28:4e:1a:06:0d:
8f:24:60:ff:98:c0:d3:f9:21:41:b3:2f:5a:db:b3:1e:6a:70:
3b:4c:cf:a7:77:3c:73:dd:16:af:dd:3f:90:74:3e:59:60:5d:
9d:8b:7f:18:03:3b:ca:57:de:34:97:1e:86:41:ba:76:96:96:
09:4b:b9:b8:16:8d:61:83:7e:da:bd:9a:5d:03:73:d1:d5:24:
00:41:d4:0a:1f:79:10:26:63:b3:ce:27:26:74:69:a3:7a:ea:
7a:1f:8a:a8:2d:37:55:b0:be:e6:c1:a8:be:94:76:4a:bf:d7:
25:41:f0:22:d1:4c:c4:75:ac:c7:3c:b2:9d:e0:70:7e:eb:c2:
f0:8d:da:ae:1c:36:8e:8b:96:b8:b7:57:e9:7f:42:6f:bd:b2:
f1:20:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:44 2026 by rpki-client