Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pXlpaAlFNrk-cervrwEKoeg85-o.cer
File: pXlpaAlFNrk-cervrwEKoeg85-o.cer (raw, json)
Hash identifier: EbIDI+r1o/qmj5S2ZQhwnllPw5tvczemgq8OLtuuS8w=
Subject key identifier: A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAF83F559D0A45D9E41CDDA5BECA96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62336
AS: 215504
IP: 5.63.32.0/19
IP: 37.228.144.0/22
IP: 91.191.176.0/22
IP: 91.198.32.0/24
IP: 91.200.108.0/22
IP: 91.211.8.0/22
IP: 185.39.84.0/22
IP: 195.230.108.0/24
IP: 213.244.48.0/20
IP: 2a01:41e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:f8:3f:55:9d:0a:45:d9:e4:1c:dd:a5:be:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5796968094536b93e71eaefaf010aa1e83ce7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:ae:ae:9d:d6:4e:fc:a9:aa:ba:2a:fe:c1:
10:bc:c3:8c:ff:26:4b:d8:69:0b:35:78:01:b1:3a:
f1:c3:d5:24:02:cb:19:7a:38:52:4c:35:57:7a:fd:
57:97:1e:a7:10:7c:8a:61:d5:50:b2:c7:4e:e3:43:
a8:aa:68:3c:d5:7f:ff:87:e8:2c:6d:96:2d:cb:86:
a0:22:cd:be:5f:b4:32:a1:68:7b:2f:31:62:67:3a:
96:4f:b7:61:c9:fd:f5:f5:b8:1b:0d:a7:30:0c:6b:
17:83:d3:1d:2c:af:d6:80:4f:84:82:70:da:96:fd:
42:f5:66:db:fe:d0:79:ac:5a:b8:64:af:f9:a1:d6:
b3:d1:c5:94:6d:20:ed:ad:cd:6e:3c:0e:73:13:23:
54:89:dd:08:1b:f5:70:6c:4d:d8:19:61:f4:13:fe:
55:fa:ef:a0:a3:4d:b1:1e:b3:be:dd:ad:e6:72:7f:
0d:0c:e0:1f:5d:93:46:a5:30:82:dd:fe:2e:7a:13:
bc:6c:e1:43:da:4b:71:64:1a:68:a2:78:df:b2:6e:
7f:ec:3b:a7:d6:91:43:e6:c9:3d:64:8c:3b:9e:91:
aa:68:d0:60:91:78:f3:05:87:10:48:5f:e1:60:df:
84:ab:0b:78:f9:eb:a7:f7:02:79:fa:89:79:dd:cf:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:79:69:68:09:45:36:B9:3E:71:EA:EF:AF:01:0A:A1:E8:3C:E7:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/pXlpaAlFNrk-cervrwEKoeg85-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.32.0/19
37.228.144.0/22
91.191.176.0/22
91.198.32.0/24
91.200.108.0/22
91.211.8.0/22
185.39.84.0/22
195.230.108.0/24
213.244.48.0/20
IPv6:
2a01:41e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62336
215504
Signature Algorithm: sha256WithRSAEncryption
09:4e:67:07:86:71:6c:58:41:6d:7d:78:f3:2e:d2:8b:5d:f6:
4f:ca:fc:e3:10:d8:84:e6:53:3b:fc:85:a6:6d:5c:e9:47:3b:
26:b7:df:79:be:f5:fe:7e:22:16:af:10:32:e8:90:ef:9d:6e:
fd:51:70:73:8b:62:7e:e5:0f:16:ee:91:d5:68:9e:3d:ef:3a:
f5:a5:d4:0c:27:89:37:b0:09:83:88:86:7f:e0:72:83:e9:1d:
1f:55:68:3e:9f:1e:2c:c6:03:7e:21:4e:b6:aa:3f:e1:d0:f8:
d1:6d:df:9c:5f:4c:99:f3:ed:15:1a:d5:b1:f5:2a:cd:d6:e5:
02:98:7b:26:50:ce:c6:8e:34:70:c4:3d:eb:af:6e:75:4f:63:
65:61:ff:d3:85:b8:7c:7e:f1:d7:76:d6:bb:9a:6b:06:4c:17:
a6:0b:72:fe:31:1e:cb:c5:f5:b1:0e:8f:ed:08:df:3a:e4:b4:
fc:23:08:6a:b9:50:db:e7:e4:5d:c4:ef:11:0c:11:b7:9a:e8:
b4:cf:c5:f2:d6:1f:93:6d:3b:c2:33:13:9f:1d:f2:3a:63:22:
43:0c:97:f0:5c:b6:96:17:67:d4:3b:da:31:f7:d1:8a:01:71:
ab:95:f0:62:95:f7:05:7b:09:e2:46:2f:9c:2b:71:4a:76:ae:
84:28:f7:9d
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgISAZ8Y+vg/VZ0KRdnkHN2lvsqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc5Njk2ODA5NDUzNmI5M2U3MWVhZWZhZjAxMGFhMWU4M2NlN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOiurp3WTvypqroq/sEQvMOM/yZL
2GkLNXgBsTrxw9UkAssZejhSTDVXev1Xlx6nEHyKYdVQssdO40Ooqmg81X//h+gs
bZYty4agIs2+X7QyoWh7LzFiZzqWT7dhyf319bgbDacwDGsXg9MdLK/WgE+EgnDa
lv1C9Wbb/tB5rFq4ZK/5odaz0cWUbSDtrc1uPA5zEyNUid0IG/VwbE3YGWH0E/5V
+u+go02xHrO+3a3mcn8NDOAfXZNGpTCC3f4uehO8bOFD2ktxZBpoonjfsm5/7Dun
1pFD5sk9ZIw7npGqaNBgkXjzBYcQSF/hYN+Eqwt4+eun9wJ5+ol53c9MjwIDAQAB
o4IC5DCCAuAwHQYDVR0OBBYEFKV5aWgJRTa5PnHq768BCqHoPOfqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzZhMjcy
Yi04YjZmLTRmZTMtOGYyOS1mMDAyOTgxNjA5N2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNmEyNzJi
LThiNmYtNGZlMy04ZjI5LWYwMDI5ODE2MDk3ZS8xL3BYbHBhQWxGTnJrLWNlcnZy
d0VLb2VnODUtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF
BwEHAQH/BE8wTTA8BAIAATA2AwQFBT8gAwQCJeSQAwQCW7+wAwQAW8YgAwQCW8hs
AwQCW9MIAwQCuSdUAwQAw+ZsAwQE1fQwMA0EAgACMAcDBQMqAUHgMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDzgAIDA0nQMA0GCSqGSIb3DQEBCwUAA4IBAQAJTmcH
hnFsWEFtfXjzLtKLXfZPyvzjENiE5lM7/IWmbVzpRzsmt995vvX+fiIWrxAy6JDv
nW79UXBzi2J+5Q8W7pHVaJ497zr1pdQMJ4k3sAmDiIZ/4HKD6R0fVWg+nx4sxgN+
IU62qj/h0PjRbd+cX0yZ8+0VGtWx9SrN1uUCmHsmUM7GjjRwxD3rr251T2NlYf/T
hbh8fvHXdta7mmsGTBemC3L+MR7LxfWxDo/tCN865LT8IwhquVDb5+RdxO8RDBG3
mui0z8Xy1h+TbTvCMxOfHfI6YyJDDJfwXLaWF2fUO9ox99GKAXGrlfBilfcFewni
Ri+cK3FKdq6EKPed
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:28 2026 by rpki-client