Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer
File: HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.cer (raw, json)
Hash identifier: SZlsEwK/CVvCzj+Jp+Y6a448jZu6cmWRwH0cVSZwv7c=
Subject key identifier: 1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAA658BB3775A3A307E4E24B1A85FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21413
IP: 31.187.67.0/24
IP: 31.187.77.0/24
IP: 31.187.79.0/24
IP: 37.247.64.0/19
IP: 46.227.216.0/21
IP: 77.235.160.0/19
IP: 80.243.32.0/19
IP: 83.221.224.0/19
IP: 85.190.176.0/21
IP: 87.121.192.0/20
IP: 87.121.224.0/20
IP: 89.187.200.0/21
IP: 93.159.96.0/19
IP: 94.100.64.0/20
IP: 176.126.88.0/22
IP: 185.90.128.0/22
IP: 185.175.209.0/24
IP: 193.98.112.0/21
IP: 212.99.192.0/19
IP: 2a00:1ca0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:a6:58:bb:37:75:a3:a3:07:e4:e2:4b:1a:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c13087c3676716032f7f90fd0e8e7fca0bfecd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:fc:99:09:4b:e7:01:9e:ed:17:16:6a:28:
ae:00:27:d4:cd:ea:76:08:28:1d:a0:a8:5c:4a:65:
fc:2f:68:d3:ed:20:59:1f:b1:cd:68:51:53:a6:7d:
30:e8:d2:4a:71:3c:be:76:4b:ac:8c:87:49:9d:2c:
13:21:38:b7:7c:8f:33:97:b8:04:cd:99:ca:00:e3:
bc:7b:c5:fa:53:5d:74:9c:df:76:a6:16:11:7f:fd:
9b:5b:10:61:4d:58:9f:89:f5:aa:aa:f7:c1:e5:23:
9c:f8:56:d6:63:29:1f:88:93:90:4f:2b:14:4c:34:
29:71:d0:82:fb:87:30:3f:44:96:20:9f:4d:2d:2b:
14:41:47:96:91:ed:8a:7d:8a:bc:25:89:a1:3d:eb:
3d:38:3b:11:0d:6d:6f:1f:35:1b:25:07:2a:34:5f:
c2:9c:e1:4d:cb:04:02:42:b9:0b:81:e6:c4:8e:ad:
5f:98:8d:67:4e:16:90:eb:92:48:cc:d4:2b:b4:c6:
a1:0d:6b:23:1d:9f:a4:a3:d8:5c:bd:c6:97:a0:cd:
a0:99:c4:15:5f:7f:0d:27:17:70:85:75:23:40:a3:
2e:d5:f1:65:12:81:a2:7f:04:e6:47:bd:27:37:52:
4c:c8:e7:96:58:11:d2:cf:ea:4d:17:96:c3:47:bd:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:13:08:7C:36:76:71:60:32:F7:F9:0F:D0:E8:E7:FC:A0:BF:EC:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/HBMIfDZ2cWAy9_kP0Ojn_KC_7NE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.67.0/24
31.187.77.0/24
31.187.79.0/24
37.247.64.0/19
46.227.216.0/21
77.235.160.0/19
80.243.32.0/19
83.221.224.0/19
85.190.176.0/21
87.121.192.0/20
87.121.224.0/20
89.187.200.0/21
93.159.96.0/19
94.100.64.0/20
176.126.88.0/22
185.90.128.0/22
185.175.209.0/24
193.98.112.0/21
212.99.192.0/19
IPv6:
2a00:1ca0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21413
Signature Algorithm: sha256WithRSAEncryption
38:95:f5:2b:30:98:ca:ee:03:cf:03:66:9a:76:d6:ed:68:93:
b5:fa:ec:66:35:7f:95:d1:bd:5c:86:34:00:d6:0c:ac:54:e3:
2e:6e:80:66:22:a4:9c:87:1f:dd:02:20:cf:ce:c8:4c:1a:b5:
84:db:d7:c7:90:f5:be:25:2c:51:79:05:37:9d:a8:e3:f1:4c:
37:0a:5b:20:65:ee:8e:81:fc:21:a9:d1:53:e7:4e:a0:bf:4c:
b5:b5:6e:13:3b:12:62:6d:88:a1:2b:b0:7a:f7:93:ca:bc:b8:
68:00:de:54:fd:d0:68:99:d9:9a:08:4f:44:16:6e:96:01:dd:
5f:37:a5:f5:be:6d:43:44:1e:ef:14:ea:fb:de:ba:ba:78:e6:
3c:88:1c:d8:ed:7e:a3:8c:94:b7:b5:da:ea:60:49:e2:51:6a:
5e:4a:ac:6b:0a:5e:02:e6:a1:7d:be:3c:a2:22:05:0b:9b:4d:
43:8d:7f:e5:91:03:c0:09:ca:a8:d9:73:fe:4a:bf:c1:b2:b1:
57:ea:cd:73:87:19:0e:65:63:2b:44:d2:7c:16:93:f4:bb:b0:
8f:f7:87:f6:2d:14:ff:05:a7:f1:80:b2:bc:70:a1:ba:a2:3e:
ba:92:42:b9:f9:ff:dc:d0:ba:30:f5:02:c5:f5:02:f3:dd:c4:
31:90:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:38:48 2026 by rpki-client