Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer (raw, json)
Hash identifier: umk+Ft/QFoEr1LUAlTTt8QPVS83s5FBodnoTQPPKYL4=
Subject key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981759EAEB3F0A2DDF3901025E9A559860
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Jul 2025 07:47:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9098
AS: 30788
IP: 5.181.13.0 -- 5.181.15.255
IP: 45.82.80.0/22
IP: 45.145.52.0/22
IP: 45.150.48.0/22
IP: 45.159.180.0/24
IP: 45.159.182.0/23
IP: 94.199.7.0/24
IP: 194.34.244.0/22
IP: 2a06:7840::/29
IP: 2a07:5340::/29
IP: 2a07:d940::/29
IP: 2a07:f600::/29
IP: 2a09:3900::/29
IP: 2a09:3c80::/29
IP: 2a09:cb00::/29
IP: 2a0a:f8c0::/29
IP: 2a0b:2a80::/29
IP: 2a0b:2d80::/29
IP: 2a0c:7b80::/29
IP: 2a0c:c180::/29
IP: 2a0d:4440::/29
IP: 2a0d:fb40::/29
IP: 2a0f:f00::/29
IP: 2a0f:4bc0::/29
IP: 2a0f:5080::/29
IP: 2a0f:59c0::/29
IP: 2a0f:8440::/29
IP: 2a0f:a380::/29
IP: 2a0f:e100::/29
IP: 2a0f:ff80::/29
IP: 2a11:1780::/29
IP: 2a11:2540::/29
IP: 2a11:3840::/29
IP: 2a11:3e40::/29
IP: 2a11:4100::/29
IP: 2a11:52c0::/29
IP: 2a11:5480::/29
IP: 2a11:6640::/29
IP: 2a11:7780::/29
IP: 2a11:78c0::/29
IP: 2a11:8d80::/29
IP: 2a11:8ec0::/29
IP: 2a11:fe00::/29
IP: 2a12:c0::/29
IP: 2a12:19c0::/29
IP: 2a12:23c0::/29
IP: 2a12:2940::/29
IP: 2a12:2bc0::/29
IP: 2a12:3400::/29
IP: 2a12:3540::/29
IP: 2a12:3940::/29
IP: 2a12:4340::/29
IP: 2a12:5640::/29
IP: 2a12:b580::/29
IP: 2a12:e580::/29
IP: 2a13:5200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:59:ea:eb:3f:0a:2d:df:39:01:02:5e:9a:55:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 07:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:7d:94:c5:a9:4a:ea:0d:5f:b9:2c:db:85:
12:91:e6:f9:4f:73:e0:e4:97:7e:ce:e1:e5:a3:6c:
d0:44:5d:41:06:d7:3c:22:af:e8:dc:93:e1:6c:00:
7e:50:dd:f8:89:df:db:5d:1d:c9:ff:de:bf:ea:83:
6a:48:cd:18:f5:ec:0e:5d:bd:40:9d:01:5e:36:0c:
db:97:ee:3e:75:d4:37:1d:a3:2e:7e:ad:82:4f:c5:
55:5c:80:c4:1b:26:d5:c2:1a:3f:67:b2:7a:8b:1a:
7b:ad:13:b3:c7:9c:0d:a7:61:57:c7:9c:8f:62:16:
87:9f:c5:1b:20:e7:5a:ea:ab:1d:bd:3f:e3:79:a7:
e6:e6:18:1c:8f:39:80:25:23:68:5b:18:7a:03:96:
7b:85:cb:68:2e:d5:e4:fe:fd:9c:75:b0:f4:62:04:
00:c4:4a:58:06:b4:87:52:36:5f:85:4f:d1:64:db:
95:7d:c1:ef:42:48:44:d0:c7:84:0e:9f:99:24:ec:
32:ab:e9:f3:7f:07:1e:bd:a8:6f:9b:5a:91:cc:7d:
73:79:90:97:03:07:b5:64:9e:ee:94:0e:7c:10:2b:
ad:5a:b6:ee:12:a5:f6:b4:2d:14:aa:96:fd:1b:51:
d7:c1:09:ca:fa:ef:8f:c3:10:ec:7f:7b:75:99:96:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.13.0-5.181.15.255
45.82.80.0/22
45.145.52.0/22
45.150.48.0/22
45.159.180.0/24
45.159.182.0/23
94.199.7.0/24
194.34.244.0/22
IPv6:
2a06:7840::/29
2a07:5340::/29
2a07:d940::/29
2a07:f600::/29
2a09:3900::/29
2a09:3c80::/29
2a09:cb00::/29
2a0a:f8c0::/29
2a0b:2a80::/29
2a0b:2d80::/29
2a0c:7b80::/29
2a0c:c180::/29
2a0d:4440::/29
2a0d:fb40::/29
2a0f:f00::/29
2a0f:4bc0::/29
2a0f:5080::/29
2a0f:59c0::/29
2a0f:8440::/29
2a0f:a380::/29
2a0f:e100::/29
2a0f:ff80::/29
2a11:1780::/29
2a11:2540::/29
2a11:3840::/29
2a11:3e40::/29
2a11:4100::/29
2a11:52c0::/29
2a11:5480::/29
2a11:6640::/29
2a11:7780::/29
2a11:78c0::/29
2a11:8d80::/29
2a11:8ec0::/29
2a11:fe00::/29
2a12:c0::/29
2a12:19c0::/29
2a12:23c0::/29
2a12:2940::/29
2a12:2bc0::/29
2a12:3400::/29
2a12:3540::/29
2a12:3940::/29
2a12:4340::/29
2a12:5640::/29
2a12:b580::/29
2a12:e580::/29
2a13:5200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9098
30788
Signature Algorithm: sha256WithRSAEncryption
25:4f:a8:50:1c:f0:fa:6d:69:96:3d:dd:89:06:c2:ab:31:a2:
c8:7a:6f:19:17:95:d1:8c:0f:51:b8:72:76:c6:a8:27:b9:78:
f9:c8:92:2f:c5:0f:65:56:16:d1:75:90:81:59:1d:c9:85:32:
a0:11:4b:7b:ea:ed:1d:ac:34:87:97:e8:42:78:7e:cf:84:7f:
3f:2d:13:e2:08:af:35:84:a6:11:8f:6d:b4:01:74:f9:80:9d:
52:c0:c3:26:25:6a:fb:2a:6c:01:ce:92:c5:57:fb:14:5e:75:
b1:57:5f:76:c6:4d:b2:5a:ae:17:2f:34:68:ac:f7:af:01:07:
35:6e:a4:a6:a3:e4:db:82:98:70:9b:61:94:ad:37:2f:84:37:
64:6a:63:b8:65:6f:c9:ea:ee:c3:b7:4f:e9:a3:08:eb:2d:19:
af:67:8b:62:cc:47:54:42:bd:1f:3e:09:ed:aa:d5:a9:cc:4f:
e5:b2:53:d6:e5:d4:49:6d:77:5f:95:b7:76:d5:46:70:be:54:
5e:30:9e:e7:bc:32:4c:f0:30:e6:17:67:67:6f:80:21:03:83:
cb:25:ea:a4:f0:22:4d:86:5f:8b:ec:f5:8e:dd:e3:3c:d4:92:
f5:10:e0:66:60:a5:d1:3e:88:19:3a:3e:1c:40:d1:70:b7:df:
14:fe:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:09:58 2025 by rpki-client