Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
File: hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer (raw, json)
Hash identifier: nvihYr9s9rinYwFzXI1gqcLKrY7uiO/hX2H3/THXFdw=
Subject key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E018DCD1CCE063A5A625B5D8DCFA1065E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 May 2026 08:28:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204893
IP: 31.14.180.0 -- 31.14.182.255
IP: 37.156.69.0 -- 37.156.70.255
IP: 45.81.169.0 -- 45.81.171.255
IP: 84.247.44.0/23
IP: 85.204.109.0/24
IP: 86.105.24.0/24
IP: 86.105.232.0/24
IP: 86.107.186.0/23
IP: 89.32.171.0/24
IP: 89.32.240.0/21
IP: 89.33.17.0/24
IP: 89.33.30.0/24
IP: 89.33.65.0/24
IP: 89.35.34.0/24
IP: 89.35.76.0/24
IP: 89.35.88.0/24
IP: 89.35.91.0/24
IP: 89.35.163.0/24
IP: 89.35.248.0/24
IP: 89.37.40.0/24
IP: 89.46.40.0/23
IP: 89.47.176.0 -- 89.47.178.255
IP: 89.47.180.0 -- 89.47.182.255
IP: 91.132.40.0/22
IP: 93.113.72.0/21
IP: 176.223.144.0/20
IP: 178.239.16.0/22
IP: 185.160.74.0/23
IP: 188.211.172.0/22
IP: 188.212.112.0/22
IP: 188.212.157.0/24
IP: 188.213.86.0 -- 188.213.95.255
IP: 188.240.70.0/24
IP: 193.164.216.0/23
IP: 194.145.194.0/23
IP: 217.148.134.0/23
IP: 2a00:bba0::/32
IP: 2a07:bac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:8d:cd:1c:ce:06:3a:5a:62:5b:5d:8d:cf:a1:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 08:28:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:4b:4c:db:47:95:39:c5:18:49:f6:46:da:
df:66:9d:aa:c7:54:bb:82:97:ea:39:ae:11:ba:a0:
f4:18:03:3d:f8:c3:67:d9:56:84:20:ce:b5:72:02:
a2:0b:a8:5c:d3:23:37:3b:70:9a:5a:60:76:a2:ea:
c3:fe:d0:e2:8d:a8:e3:0d:4d:22:03:32:77:9c:9f:
58:c2:ee:c3:40:d7:43:d8:b4:96:3b:a5:59:c9:d5:
11:b8:29:8a:c2:dd:1f:95:95:ab:a8:bb:b2:31:ef:
35:1d:44:9f:23:93:c7:81:37:dc:ed:f8:d3:29:7b:
e0:88:b3:e8:de:f1:f4:39:d8:91:7a:51:e5:f8:f1:
51:f6:58:47:a8:6d:d0:94:a6:c0:c3:71:a1:25:31:
8e:ec:f0:e0:95:13:0a:ae:59:71:6f:76:a5:f9:9b:
1e:75:d3:5d:98:36:2e:ad:e0:40:dd:8e:9d:db:c0:
92:3f:27:5b:d8:f0:0e:40:c2:47:0d:8a:cc:df:c7:
47:2b:90:8f:d1:38:38:ff:91:61:40:14:c9:0f:ed:
a6:6a:9f:ce:f4:7f:5b:0d:8f:d3:ec:a3:9d:69:68:
d4:ff:06:e8:b9:a8:42:86:b6:9e:15:8a:ac:74:3b:
7b:71:65:07:60:38:c3:de:c5:88:ba:fc:46:94:75:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.180.0-31.14.182.255
37.156.69.0-37.156.70.255
45.81.169.0-45.81.171.255
84.247.44.0/23
85.204.109.0/24
86.105.24.0/24
86.105.232.0/24
86.107.186.0/23
89.32.171.0/24
89.32.240.0/21
89.33.17.0/24
89.33.30.0/24
89.33.65.0/24
89.35.34.0/24
89.35.76.0/24
89.35.88.0/24
89.35.91.0/24
89.35.163.0/24
89.35.248.0/24
89.37.40.0/24
89.46.40.0/23
89.47.176.0-89.47.178.255
89.47.180.0-89.47.182.255
91.132.40.0/22
93.113.72.0/21
176.223.144.0/20
178.239.16.0/22
185.160.74.0/23
188.211.172.0/22
188.212.112.0/22
188.212.157.0/24
188.213.86.0-188.213.95.255
188.240.70.0/24
193.164.216.0/23
194.145.194.0/23
217.148.134.0/23
IPv6:
2a00:bba0::/32
2a07:bac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204893
Signature Algorithm: sha256WithRSAEncryption
9e:71:ff:3d:7a:83:96:c6:7b:8f:b0:66:89:a2:41:ce:af:c9:
b9:00:94:6d:b0:af:9e:09:e2:9f:22:1b:a6:e3:61:ee:20:5c:
c5:dc:99:81:55:12:94:0d:63:78:0a:af:1d:99:dc:22:d9:22:
b8:ed:d1:36:d5:c9:57:a3:7b:9b:26:a2:84:d9:9e:1c:46:9c:
d4:93:fd:d2:40:e4:dd:ff:e4:f8:e4:6b:2f:6b:85:d2:70:d8:
a2:25:a1:a8:39:b6:68:0d:99:ff:f9:0b:eb:c4:1a:99:97:cb:
8b:82:4e:ed:a2:5e:79:e3:4d:7b:68:13:14:53:83:36:1a:8d:
41:72:50:1f:b0:ff:be:5f:41:9e:11:ea:bb:46:b0:2e:33:9a:
5b:80:4e:f3:95:80:83:a4:69:22:ab:41:a3:46:c2:75:0b:2b:
be:c4:85:4f:77:ba:b4:8b:ca:45:9b:fa:0c:d4:7c:f7:c2:9f:
0f:cb:49:99:6a:de:57:9b:23:d9:72:51:ef:4f:41:1e:45:c9:
46:ab:d5:39:a8:be:04:71:16:ea:26:42:29:84:75:8f:53:a7:
ff:d5:76:1d:ae:10:55:1e:bc:dc:b4:15:a1:33:6a:db:f7:5f:
28:fd:fc:c9:e8:a1:cb:36:5f:4c:18:cf:3d:1e:3e:89:0e:f4:
4c:57:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:25 2026 by rpki-client