Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
File: vluKKxBtM0sMbGHhd6pi9E_g47Y.cer (raw, json)
Hash identifier: Z8B3nao00+opBoJ7Wd+Oe02PqLo6bewdIwka5lwKQ34=
Subject key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1CA78B84D7FC943BF3A9D08544248F0C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Nov 2026 11:57:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8851
AS: 31270
AS: 34940
AS: 39179
AS: 41393
AS: 43198
AS: 60648
AS: 61341
AS: 196875
AS: 199291
IP: 37.98.144.0/21
IP: 37.252.24.0/21
IP: 77.93.128.0/19
IP: 77.107.64.0/18
IP: 79.99.72.0/21
IP: 79.99.144.0/21
IP: 80.240.80.0/20
IP: 81.5.128.0/18
IP: 81.168.0.0/17
IP: 82.152.0.0/15
IP: 82.163.0.0/19
IP: 85.159.128.0/21
IP: 89.28.232.0/21
IP: 89.31.232.0/21
IP: 89.213.0.0/21
IP: 89.213.40.0 -- 89.213.127.255
IP: 89.213.130.0 -- 89.213.255.255
IP: 95.130.96.0/21
IP: 109.176.0.0/16
IP: 158.255.8.0/21
IP: 185.20.32.0/22
IP: 185.24.84.0/24
IP: 185.24.86.0/23
IP: 185.49.124.0/22
IP: 185.101.44.0/22
IP: 193.27.212.0/23
IP: 193.189.140.0/24
IP: 194.105.64.0/19
IP: 195.128.138.0/24
IP: 212.38.64.0/19
IP: 213.130.128.0/19
IP: 213.152.32.0/19
IP: 213.210.0.0/18
IP: 213.218.208.0 -- 213.218.255.255
IP: 217.144.144.0/20
IP: 217.145.64.0/20
IP: 2001:1a90::/32
IP: 2a00:c60::/32
IP: 2a00:1c40::/29
IP: 2a02:21f8::/32
IP: 2a02:6f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:78:b8:4d:7f:c9:43:bf:3a:9d:08:54:42:48:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 11 11:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:36:c2:c3:03:c9:0e:4b:64:99:df:65:ee:
28:52:19:a9:5f:36:45:3d:71:8b:fb:6c:da:69:8d:
06:37:6e:fb:03:9e:17:eb:9f:ba:04:60:18:5a:04:
2b:d7:b8:54:17:a4:9d:53:e4:dc:99:dd:38:46:27:
55:84:b2:f9:e4:5a:a9:e2:bd:bc:45:88:d5:92:cf:
3b:f7:5f:18:24:74:3c:fe:41:59:88:48:63:5b:0c:
91:da:96:a0:83:c7:a5:48:cc:96:e8:7e:6c:92:e3:
5c:7a:49:e9:c1:77:dc:5d:88:ca:f0:c5:34:b3:33:
67:2d:45:e0:d3:d9:22:0e:db:02:97:6f:29:20:53:
bd:98:d9:6b:00:ba:06:46:12:e4:29:84:a5:89:d6:
76:6a:13:3d:a8:a0:e5:97:26:74:0d:27:30:c2:48:
f7:09:bf:49:57:98:64:14:f0:e7:54:5a:69:aa:ed:
13:e1:70:21:76:2f:21:b7:7a:d3:ce:2c:7f:f9:a0:
c9:77:0a:7c:a4:b7:09:d6:ea:5c:39:ed:a8:28:1f:
9d:cb:f5:29:94:dd:db:d3:e5:3c:8c:b1:58:ef:00:
78:5f:c6:d6:fa:9c:e8:7c:cf:54:35:45:93:0c:c6:
e1:20:25:73:1c:f6:92:c7:65:6e:ff:8b:a1:09:ce:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.127.255
89.213.130.0-89.213.255.255
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
185.49.124.0/22
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a02:21f8::/32
2a02:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8851
31270
34940
39179
41393
43198
60648
61341
196875
199291
Signature Algorithm: sha256WithRSAEncryption
9a:c7:ab:90:a0:2f:51:8f:ab:5f:58:a3:84:84:b5:c4:09:f3:
e5:17:c5:37:71:69:6c:f8:56:56:f2:23:ba:79:86:6a:0f:96:
94:2f:d7:0b:68:ec:d8:bc:10:4b:1e:52:38:ce:c2:98:d4:aa:
20:5b:cd:28:80:d5:8f:98:06:4d:76:c6:51:42:4d:fb:39:14:
ba:e7:2c:e3:24:ba:9b:80:25:63:40:0c:17:de:3c:d6:a4:43:
f9:2e:28:20:11:b7:e0:8a:01:0e:d4:2e:fb:a8:e2:4d:41:e3:
1e:fd:78:27:4d:cd:c2:85:f6:26:ef:47:25:79:ae:4c:2d:5a:
bb:e0:86:5e:30:09:f1:c7:cb:2f:5b:85:49:e9:06:22:0b:40:
9d:84:8a:6a:db:96:e4:5a:c0:d4:c3:82:df:b9:d0:66:e3:c6:
6d:b3:dc:33:bb:16:a1:67:42:f4:10:23:fc:9b:69:b8:35:70:
15:44:ae:09:b9:76:a3:e2:fe:1d:f7:ad:2e:f0:44:bb:3b:95:
6e:4b:f1:0f:cf:76:89:9d:9a:ac:ed:95:3b:ef:ce:93:dd:76:
3e:08:67:60:02:07:c9:02:ab:61:13:95:55:44:d9:f2:4e:bc:
b2:74:a8:5e:ea:33:c8:4b:5e:a7:63:16:c6:13:08:bd:79:e2:
c7:bd:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:15 2026 by rpki-client