Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.cer (raw, json)
Hash identifier: sh6sVbme9yqDCjUtjevK1kOn+qTipjDB6XGicgYgJ2k=
Subject key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F3B7CC3D22A95EC87AAFF121FDB21F9E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jul 2026 07:31:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15817
IP: 31.220.120.0/21
IP: 37.202.0.0/21
IP: 45.144.184.0/22
IP: 46.30.56.0/21
IP: 153.92.192.0/20
IP: 156.67.232.0/21
IP: 157.97.32.0/20
IP: 176.52.240.0/21
IP: 178.16.56.0/21
IP: 185.15.192.0/22
IP: 185.166.20.0/22
IP: 185.181.132.0/22
IP: 185.215.156.0/22
IP: 185.221.104.0/22
IP: 185.224.152.0/22
IP: 185.227.112.0/22
IP: 185.233.52.0/22
IP: 185.237.64.0/22
IP: 185.243.132.0/22
IP: 185.247.148.0/22
IP: 188.94.248.0/21
IP: 193.53.246.0/23
IP: 193.53.250.0/23
IP: 2a03:2a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:7c:c3:d2:2a:95:ec:87:aa:ff:12:1f:db:21:f9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 07:31:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:6a:c8:fb:85:09:d5:74:bf:70:3c:29:7e:
9a:56:e1:6c:6c:89:95:13:b0:7a:45:6e:9d:fc:73:
b7:43:6f:58:0d:eb:58:87:f2:f6:43:00:8a:f4:a5:
95:50:9e:b9:bd:d8:35:08:8f:10:c6:74:2a:fd:96:
7c:9a:56:8c:c0:cc:36:fe:e3:6c:6a:85:83:76:91:
d8:4f:3b:96:03:b2:bf:67:1d:9c:56:fb:46:fa:62:
3f:e6:41:7a:d1:93:09:6f:96:f8:eb:b3:ea:84:2c:
4a:a7:31:71:ec:de:33:2f:98:a3:27:ca:2f:fe:2c:
f6:5b:ad:aa:c6:8d:57:92:b1:e3:0a:75:3c:39:6f:
83:b5:9a:4a:2c:87:c4:d0:73:6e:f3:5d:da:f9:fa:
58:76:31:c1:ea:e6:87:f1:28:18:cb:81:2c:34:17:
22:46:2d:f9:27:eb:6e:3b:dc:60:91:68:1b:a8:0e:
63:6d:d6:73:94:72:d8:75:2e:da:68:e0:a3:f6:0d:
69:1a:59:45:34:43:ab:ff:c9:b9:37:0c:56:be:71:
46:83:f3:c4:0b:1e:43:3c:34:89:b8:cb:82:2f:06:
7e:7f:f6:9b:2e:8b:39:a3:6e:02:82:fe:3c:37:be:
ce:d6:b4:d1:02:46:31:95:0e:32:09:53:b1:ce:d1:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.120.0/21
37.202.0.0/21
45.144.184.0/22
46.30.56.0/21
153.92.192.0/20
156.67.232.0/21
157.97.32.0/20
176.52.240.0/21
178.16.56.0/21
185.15.192.0/22
185.166.20.0/22
185.181.132.0/22
185.215.156.0/22
185.221.104.0/22
185.224.152.0/22
185.227.112.0/22
185.233.52.0/22
185.237.64.0/22
185.243.132.0/22
185.247.148.0/22
188.94.248.0/21
193.53.246.0/23
193.53.250.0/23
IPv6:
2a03:2a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15817
Signature Algorithm: sha256WithRSAEncryption
63:57:be:cf:cd:66:db:71:0c:4e:70:66:b2:f4:1b:17:99:3f:
84:33:f1:39:0a:90:fd:8c:bc:18:1e:2b:34:cd:c6:a2:8b:08:
8b:b3:63:e0:79:d5:c2:c5:02:70:e6:69:a8:5d:2c:f9:d1:b3:
44:e5:9c:3f:03:7c:6d:eb:eb:a1:27:02:76:76:5b:17:df:2e:
aa:8a:d8:3e:4d:14:0a:02:10:93:5a:bf:87:97:36:57:44:db:
9b:ae:d2:28:f1:7c:f1:81:1b:59:56:41:19:93:b5:4a:fa:56:
47:e4:e3:cb:6b:8e:89:d4:0e:69:fc:73:a5:d9:44:9f:17:81:
93:91:b0:be:54:fa:3a:9a:ed:16:b0:20:34:00:a9:73:9f:cd:
8b:84:a0:6c:54:6e:2e:11:23:ec:11:8d:d7:c4:a3:04:44:29:
c9:50:ae:dc:e2:3b:39:9e:8b:86:64:30:c4:1f:90:cd:dc:1e:
2c:c5:b4:12:4a:ec:f1:9d:18:9d:23:e1:c4:d8:24:92:34:9f:
5a:b6:5d:c1:b8:c5:30:dc:9f:98:e3:98:2c:d7:f5:6a:d2:1c:
58:25:64:fb:36:6e:32:70:22:73:b7:e1:fb:a7:7e:a8:74:43:
18:9e:da:56:84:40:1c:71:d4:08:9a:63:19:68:3e:80:66:39:
c6:0e:76:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:09:16 2026 by rpki-client