Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
File: vl_ipkltKkOapPeyHWmWu_u_CzU.cer (raw, json)
Hash identifier: /tyW+xsghKjcJ8t/0ecuBAzE08ErlPp7PzgJQRjrl6k=
Subject key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAF8DB9DC98D600591B59039F086A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8638
AS: 8881
AS: 12313
AS: 15717
IP: 24.40.128.0/18
IP: 46.142.0.0/16
IP: 46.189.0.0/17
IP: 61.8.128.0/19
IP: 62.72.64.0/19
IP: 62.214.0.0/16
IP: 62.217.32.0/19
IP: 62.220.0.0/19
IP: 80.241.192.0/20
IP: 80.242.160.0/19
IP: 82.119.160.0/19
IP: 82.140.0.0/18
IP: 82.144.32.0/19
IP: 82.145.0.0/19
IP: 82.194.96.0/19
IP: 82.207.128.0/17
IP: 83.135.0.0/16
IP: 84.19.192.0/19
IP: 87.122.0.0/15
IP: 88.130.0.0/16
IP: 89.27.128.0/17
IP: 89.207.200.0/21
IP: 89.244.0.0/14
IP: 94.134.0.0/15
IP: 104.151.0.0/17
IP: 143.58.64.0/18
IP: 153.60.32.0/19
IP: 153.60.192.0/18
IP: 153.76.32.0/19
IP: 167.104.0.0/19
IP: 167.104.128.0/19
IP: 167.104.224.0/19
IP: 185.108.228.0/23
IP: 185.128.68.0/22
IP: 193.219.15.0/24
IP: 195.167.208.0/20
IP: 195.202.32.0/19
IP: 195.226.96.0/19
IP: 195.226.160.0/19
IP: 202.71.128.0/20
IP: 202.89.144.0/20
IP: 212.7.128.0/19
IP: 212.80.224.0/19
IP: 212.93.0.0/19
IP: 212.204.0.0/19
IP: 213.30.192.0/18
IP: 213.138.32.0/19
IP: 213.139.128.0/19
IP: 213.182.128.0/19
IP: 217.9.32.0/19
IP: 217.9.96.0/19
IP: 217.27.192.0/20
IP: 217.65.16.0/20
IP: 217.78.128.0/20
IP: 217.199.64.0/20
IP: 2001:7b0::/32
IP: 2001:9e8::/32
IP: 2001:1438::/32
IP: 2001:16b8::/32
IP: 2a00:fb8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:f8:db:9d:c9:8d:60:05:91:b5:90:39:f0:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:de:f8:9e:5a:1b:56:e1:15:29:63:ab:2b:
5f:35:67:58:df:80:22:e5:de:df:44:fe:0c:67:79:
db:63:74:16:89:91:10:ed:62:ec:3d:29:7e:13:4c:
c8:0a:26:f8:04:d6:b4:76:19:d9:d5:a2:3e:44:4a:
f8:b8:be:c4:0f:a8:f9:00:33:82:e5:54:4a:c2:14:
d8:6a:50:56:a3:55:70:36:bb:5d:d3:5f:ed:e0:fd:
d5:a1:38:2a:be:b7:58:9b:d4:6b:87:0b:cb:89:f4:
4c:ad:45:f8:d9:62:a2:13:01:0e:be:0f:71:6c:f9:
6d:63:78:20:e5:9d:0e:62:e9:5b:73:46:5b:99:d9:
cc:db:1d:9d:ac:57:b6:b7:5c:f6:11:a7:6b:ff:ab:
97:7c:5f:57:4d:b0:13:b6:a5:d3:5d:f8:fa:2f:3b:
6e:64:7f:75:20:57:da:3b:c6:eb:ab:77:7e:88:ab:
33:4b:58:62:d9:ff:71:44:8e:09:1f:44:42:ea:1a:
c7:7e:d0:a0:be:a3:4a:48:f6:e9:9c:d9:55:3c:2c:
5c:7c:83:a3:14:48:7c:9b:62:a2:79:e4:9b:cb:7d:
f6:61:1c:24:88:17:af:55:8b:52:4e:fb:b4:52:39:
e3:48:f3:44:85:2a:ec:f1:63:fb:71:de:56:7c:a7:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
153.60.32.0/19
153.60.192.0/18
153.76.32.0/19
167.104.0.0/19
167.104.128.0/19
167.104.224.0/19
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8638
8881
12313
15717
Signature Algorithm: sha256WithRSAEncryption
a9:ad:9a:9d:cb:7f:b0:71:42:4f:b7:53:55:92:c2:0d:ef:d1:
74:5b:d6:a9:ca:cb:3d:96:64:7f:13:96:2d:4e:d7:5d:f0:06:
e3:d5:99:f4:97:11:e0:f3:58:6c:40:f3:a2:9b:89:78:13:7f:
da:d7:a4:e6:6a:7e:3d:76:bf:e3:3d:ce:83:2b:83:31:c9:36:
5c:6b:55:31:e4:42:aa:bd:f6:18:9f:2f:c8:9f:05:da:ff:aa:
a7:c6:69:93:f9:16:45:d9:56:ef:55:5a:e5:2b:82:02:db:e8:
16:7c:83:02:13:9e:1a:df:17:6a:e3:37:9f:e3:3e:24:79:5a:
00:ee:a2:ff:9a:22:f4:12:a6:52:fa:07:0d:1b:b1:3a:fa:53:
63:f2:99:03:41:da:4b:c6:b3:7f:85:e3:53:95:08:19:a0:30:
01:5f:03:fb:2b:5e:3b:27:8f:71:cd:4b:75:74:95:fe:a6:25:
08:4a:e2:01:95:ce:2d:bb:92:83:7b:5e:45:83:b5:19:27:1f:
79:14:2d:c9:86:d3:04:57:67:63:2d:b6:79:24:ec:c9:f2:21:
15:6b:df:4c:b5:bb:9d:db:b7:cd:6b:95:e5:33:6c:77:d7:4f:
4b:0f:cb:eb:bf:9f:34:63:30:ec:ab:94:60:e9:15:2b:06:ed:
67:13:8d:2a
-----BEGIN CERTIFICATE-----
MIIHETCCBfmgAwIBAgISAZ8Y+vjbncmNYAWRtZA58IalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTVmZTJhNjQ5NmQyYTQzOWFhNGY3YjIxZDY5OTZiYmZiYmYwYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ze+J5aG1bhFSljqytfNWdY34Ai
5d7fRP4MZ3nbY3QWiZEQ7WLsPSl+E0zICib4BNa0dhnZ1aI+REr4uL7ED6j5ADOC
5VRKwhTYalBWo1VwNrtd01/t4P3VoTgqvrdYm9RrhwvLifRMrUX42WKiEwEOvg9x
bPltY3gg5Z0OYulbc0ZbmdnM2x2drFe2t1z2Eadr/6uXfF9XTbATtqXTXfj6Lztu
ZH91IFfaO8brq3d+iKszS1hi2f9xRI4JH0RC6hrHftCgvqNKSPbpnNlVPCxcfIOj
FEh8m2KieeSby332YRwkiBevVYtSTvu0UjnjSPNEhSrs8WP7cd5WfKfSdwIDAQAB
o4IEHTCCBBkwHQYDVR0OBBYEFL5f4qZJbSpDmqT3sh1plrv7vws1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2IxMzkz
ZC1jY2E4LTRhOTctODFhYS02NDNhNDE1OWFiNDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYjEzOTNk
LWNjYTgtNGE5Ny04MWFhLTY0M2E0MTU5YWI0Ni8xL3ZsX2lwa2x0S2tPYXBQZXlI
V21XdV91X0N6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBjwYIKwYB
BQUHAQcBAf8EggF+MIIBejCCAUsEAgABMIIBQwMEBhgogAMDAC6OAwQHLr0AAwQF
PQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AADBARQ8cADBAVQ8qADBAVSd6ADBAZS
jAADBAVSkCADBAVSkQADBAVSwmADBAdSz4ADAwBThwMEBVQTwAMDAVd6AwMAWIID
BAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcAAwQGjzpAAwQFmTwgAwQGmTzAAwQF
mUwgAwQFp2gAAwQFp2iAAwQFp2jgAwQBuWzkAwQCuYBEAwQAwdsPAwQEw6fQAwQF
w8ogAwQFw+JgAwQFw+KgAwQEykeAAwQEylmQAwQF1AeAAwQF1FDgAwQF1F0AAwQF
1MwAAwQG1R7AAwQF1YogAwQF1YuAAwQF1baAAwQF2QkgAwQF2QlgAwQE2RvAAwQE
2UEQAwQE2U6AAwQE2cdAMCkEAgACMCMDBQAgAQewAwUAIAEJ6AMFACABFDgDBQAg
ARa4AwUDKgAPuDAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIhvgICIrECAjAZAgI9
ZTANBgkqhkiG9w0BAQsFAAOCAQEAqa2anct/sHFCT7dTVZLCDe/RdFvWqcrLPZZk
fxOWLU7XXfAG49WZ9JcR4PNYbEDzopuJeBN/2tek5mp+PXa/4z3OgyuDMck2XGtV
MeRCqr32GJ8vyJ8F2v+qp8Zpk/kWRdlW71Va5SuCAtvoFnyDAhOeGt8XauM3n+M+
JHlaAO6i/5oi9BKmUvoHDRuxOvpTY/KZA0HaS8azf4XjU5UIGaAwAV8D+yteOyeP
cc1LdXSV/qYlCEriAZXOLbuSg3teRYO1GScfeRQtyYbTBFdnYy22eSTsyfIhFWvf
TLW7ndu3zWuV5TNsd9dPSw/L67+fNGMw7KuUYOkVKwbtZxONKg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:18 2026 by rpki-client