Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
File: xCzMCbGKriXcamxXk_m5IMj2oZA.cer (raw, json)
Hash identifier: 6p1+fOvXCSHyWwsL6vVH+pfh7Nr+hS06B0CeeURFQWo=
Subject key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F41EC92A0CC4EE78307BEAA59E8B00E40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Jul 2026 13:30:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48850
AS: 50607
AS: 62047
AS: 62081
AS: 197961
AS: 200089
AS: 201053 -- 201054
AS: 201925
AS: 206185 -- 206186
AS: 212261 -- 212262
IP: 89.42.162.0/24
IP: 89.46.144.0/21
IP: 91.198.97.0/24
IP: 103.203.84.0/22
IP: 109.207.104.0/21
IP: 155.133.40.0/21
IP: 155.133.104.0 -- 155.133.119.255
IP: 176.126.56.0/22
IP: 178.216.40.0/21
IP: 185.37.112.0/22
IP: 185.129.124.0/22
IP: 185.165.148.0/22
IP: 185.170.225.0/24
IP: 185.225.248.0/22
IP: 188.241.28.0/24
IP: 193.8.2.0/23
IP: 194.126.164.0/22
IP: 195.191.170.0/23
IP: 217.117.132.0/22
IP: 2001:678:3ac::/48
IP: 2001:678:3b0::/48
IP: 2001:67c:778::/48
IP: 2001:67c:2fd0::/48
IP: 2001:7f8:5b::/48
IP: 2a10:f780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:ec:92:a0:cc:4e:e7:83:07:be:aa:59:e8:b0:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 8 13:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:38:36:f2:24:55:c9:a0:57:c5:0c:de:04:
74:14:ce:5e:34:e7:f2:9b:7b:b0:30:3a:ca:c2:b9:
1f:85:36:07:6b:d1:22:0d:0f:02:5a:e2:eb:eb:c7:
e2:66:f0:3a:38:ab:d0:e9:77:08:21:38:39:40:79:
2a:44:02:b7:36:de:5d:82:20:d8:68:54:9c:b9:45:
42:78:8a:c4:ef:73:c9:6f:b3:7c:2f:23:1e:3a:48:
f8:5a:4b:f9:25:9c:1f:49:06:be:b1:d3:a2:d3:9f:
23:8f:b8:04:10:c7:e9:fc:e8:21:d7:31:e1:50:6a:
dd:a0:f1:3f:1c:b4:b4:a5:02:81:0c:f0:1e:1d:72:
18:bd:b0:25:cb:63:53:da:2c:97:66:11:1a:32:c0:
e1:64:2d:58:34:d4:0e:a0:78:b8:1f:85:8e:60:9a:
86:e1:f1:08:ea:53:1c:e9:77:25:6e:1e:5e:83:29:
08:77:3e:ea:7d:e0:8d:ed:b1:99:e0:54:40:a9:c2:
ed:0c:18:10:55:6b:53:38:b9:7a:24:d5:35:dd:20:
9d:68:81:df:8c:02:d1:b3:88:9a:bf:5b:ae:80:7f:
04:50:90:9a:c6:5a:d2:37:4e:13:62:10:c9:92:11:
9f:eb:16:a0:43:55:be:e2:4c:f3:0c:2b:f7:06:f6:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.162.0/24
89.46.144.0/21
91.198.97.0/24
103.203.84.0/22
109.207.104.0/21
155.133.40.0/21
155.133.104.0-155.133.119.255
176.126.56.0/22
178.216.40.0/21
185.37.112.0/22
185.129.124.0/22
185.165.148.0/22
185.170.225.0/24
185.225.248.0/22
188.241.28.0/24
193.8.2.0/23
194.126.164.0/22
195.191.170.0/23
217.117.132.0/22
IPv6:
2001:678:3ac::/48
2001:678:3b0::/48
2001:67c:778::/48
2001:67c:2fd0::/48
2001:7f8:5b::/48
2a10:f780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48850
50607
62047
62081
197961
200089
201053-201054
201925
206185-206186
212261-212262
Signature Algorithm: sha256WithRSAEncryption
8c:aa:97:4f:95:bf:42:4a:6d:5d:89:93:14:3e:8a:46:c2:b5:
e4:4a:fd:ce:8e:c0:6e:9c:bb:d5:9e:0e:b4:a3:d2:97:f6:2d:
3f:69:b1:a4:7f:8c:db:45:83:0d:08:59:4d:ba:cf:09:6e:2c:
0a:5b:02:99:4c:29:7a:d4:3d:9a:1b:9f:68:4c:58:b7:88:2a:
8a:78:1c:f6:8d:91:72:a4:94:86:51:ae:3f:43:ef:3a:d2:88:
9e:3a:be:15:66:8f:2e:eb:0d:ca:b4:03:a0:57:5e:6c:72:83:
44:9b:fc:3a:3e:dc:e1:dd:4a:69:79:2f:bf:ec:21:f7:85:fe:
10:ce:3c:cc:43:33:4d:cb:8f:ea:2e:53:fd:ed:f1:f8:7b:f8:
ac:83:59:ac:91:02:c4:be:2d:a2:7d:f3:c7:a2:4d:ea:00:58:
d1:f2:3e:17:61:61:14:d3:57:2e:2e:fd:4b:c3:d1:cc:34:5f:
15:0a:d3:05:2a:53:ab:5b:b1:ff:a9:76:0e:36:d1:ec:4c:c0:
8e:ba:58:be:17:b0:19:ce:79:13:27:81:57:87:20:cb:1b:1c:
b6:7a:f5:f9:9d:5b:d1:bd:89:a8:57:2c:aa:97:56:54:76:5a:
d2:82:dd:32:23:6d:46:a5:ad:42:63:40:73:c3:62:78:45:44:
0f:83:29:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:09:14 2026 by rpki-client