Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
File: 4pTjZ5aUnwj4tn9V31k5butni6o.cer (raw, json)
Hash identifier: +cXYmCpv68MdbMfeqVzJLcTu9EUi5RuZUBZefhUTSnw=
Subject key identifier: E2:94:E3:67:96:94:9F:08:F8:B6:7F:55:DF:59:39:6E:EB:67:8B:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB6D43270D52C4A334A002EA9F2BA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210218
IP: 2.58.93.0 -- 2.58.94.255
IP: 2.58.136.0/22
IP: 2.59.248.0/22
IP: 31.13.194.0/24
IP: 31.13.249.0 -- 31.13.255.255
IP: 37.139.129.0/24
IP: 37.221.120.0/22
IP: 45.8.74.0/23
IP: 45.12.248.0/22
IP: 45.66.229.0/24
IP: 45.81.241.0 -- 45.81.242.255
IP: 45.139.100.0/22
IP: 45.143.100.0/22
IP: 45.144.152.0/23
IP: 45.149.232.0/23
IP: 45.151.88.0/24
IP: 77.75.56.0/22
IP: 78.40.160.0/21
IP: 80.249.124.0/22
IP: 82.115.208.0/24
IP: 87.120.32.0/24
IP: 87.120.34.0/23
IP: 87.120.46.0/23
IP: 87.120.63.0 -- 87.120.66.255
IP: 87.120.85.0 -- 87.120.86.255
IP: 87.120.96.0/23
IP: 87.120.111.0/24
IP: 87.120.177.0/24
IP: 87.120.218.0/24
IP: 87.120.220.0/23
IP: 87.120.224.0/24
IP: 87.120.226.0/24
IP: 87.120.232.0/22
IP: 87.121.19.0/24
IP: 87.121.36.0/23
IP: 87.121.56.0/23
IP: 87.121.59.0/24
IP: 87.121.66.0 -- 87.121.68.255
IP: 87.121.100.0/23
IP: 87.121.116.0/24
IP: 87.121.148.0/23
IP: 91.92.3.0/24
IP: 91.92.24.0/23
IP: 91.197.196.0/22
IP: 91.243.184.0/22
IP: 92.249.51.0/24
IP: 93.123.68.0/22
IP: 93.123.86.0/23
IP: 93.123.108.0/24
IP: 94.33.0.0/16
IP: 94.103.126.0/24
IP: 94.154.174.0/23
IP: 94.156.16.0/22
IP: 94.156.32.0/24
IP: 94.156.48.0/21
IP: 94.156.95.0/24
IP: 94.156.108.0/22
IP: 94.156.124.0/22
IP: 94.156.168.0/23
IP: 94.156.182.0 -- 94.156.184.255
IP: 94.156.187.0/24
IP: 94.156.192.0/23
IP: 94.156.234.0/23
IP: 94.156.240.0/22
IP: 94.156.246.0/23
IP: 94.240.56.0/22
IP: 95.214.124.0/22
IP: 109.206.238.0/24
IP: 141.98.0.0/24
IP: 164.40.184.0/24
IP: 164.40.186.0/23
IP: 171.22.17.0/24
IP: 171.22.29.0/24
IP: 176.125.252.0/23
IP: 178.175.184.0/21
IP: 178.215.225.0 -- 178.215.226.255
IP: 185.171.148.0/22
IP: 185.219.125.0 -- 185.219.126.255
IP: 185.221.66.0/24
IP: 185.225.72.0/23
IP: 185.252.178.0/24
IP: 185.254.38.0/23
IP: 193.19.200.0/22
IP: 193.36.232.0/22
IP: 193.37.43.0/24
IP: 193.37.46.0/24
IP: 193.43.3.0/24
IP: 193.46.172.0/22
IP: 193.56.16.0/22
IP: 193.56.248.0/22
IP: 193.58.184.0/22
IP: 193.149.2.0/23
IP: 193.207.0.0 -- 193.207.23.255
IP: 194.48.249.0/24
IP: 194.76.204.0/22
IP: 194.147.8.0/22
IP: 194.169.174.0/24
IP: 194.180.50.0/24
IP: 195.178.120.0/24
IP: 195.225.120.0/22
IP: 212.22.128.0/19
IP: 212.24.0.0/19
IP: 212.73.135.0/24
IP: 217.133.0.0/16
IP: 2a09:e6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:6d:43:27:0d:52:c4:a3:34:a0:02:ea:9f:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e294e36796949f08f8b67f55df59396eeb678baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:20:74:f9:d3:97:c9:c7:6a:8c:37:35:78:
68:16:f5:14:1e:6d:cf:e3:84:5f:15:23:b2:53:ec:
0e:13:4d:e6:36:98:a4:10:f7:ea:b2:36:30:cb:dc:
b1:b2:88:02:15:50:90:4d:d3:16:88:fa:d3:e1:f1:
c6:de:41:81:34:1d:3c:44:7e:fa:c0:29:73:49:46:
14:30:f0:97:6f:d0:4b:a6:32:57:1c:08:47:ed:a4:
b8:7e:65:3d:84:3d:80:2b:87:88:2c:6d:80:2f:ae:
d5:ad:42:85:15:54:c7:93:3d:63:d2:bb:4a:7d:eb:
7e:07:6f:1d:22:5e:a1:86:83:38:95:fd:68:4f:c3:
85:bb:e6:7c:84:8d:36:33:34:40:42:4c:d3:46:80:
ac:81:7a:3c:82:ab:5b:91:04:ab:2c:0b:fa:66:43:
a4:8e:c9:c0:66:30:75:18:4e:8f:3f:ff:19:d2:ca:
21:b0:70:a2:93:17:75:ba:d9:69:a4:9a:76:52:d3:
1e:e9:b6:e0:1b:eb:05:38:28:bd:be:ba:ad:19:e1:
22:da:34:31:e7:6d:61:d4:ab:90:41:5c:06:20:95:
94:b6:32:17:21:b9:61:89:a3:3e:fe:1d:08:5b:09:
15:9c:06:8b:22:82:55:91:08:47:2b:47:12:f8:0e:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:E3:67:96:94:9F:08:F8:B6:7F:55:DF:59:39:6E:EB:67:8B:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
37.139.129.0/24
37.221.120.0/22
45.8.74.0/23
45.12.248.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.139.100.0/22
45.143.100.0/22
45.144.152.0/23
45.149.232.0/23
45.151.88.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
82.115.208.0/24
87.120.32.0/24
87.120.34.0/23
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.220.0/23
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.56.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.100.0/23
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.33.0.0/16
94.103.126.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.124.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.17.0/24
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
178.215.225.0-178.215.226.255
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
185.254.38.0/23
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.43.3.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.149.2.0/23
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.169.174.0/24
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
217.133.0.0/16
IPv6:
2a09:e6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210218
Signature Algorithm: sha256WithRSAEncryption
0e:bd:1c:9a:3a:e7:2f:ce:6f:e6:0e:0d:86:db:38:8d:66:cd:
4e:d3:dd:bb:37:ab:84:33:7e:fc:cb:b2:13:8e:eb:70:55:f4:
b8:8d:e7:f1:14:03:3c:8c:d7:cc:c5:34:9d:da:4a:18:52:39:
11:da:d1:9c:07:8b:b9:9c:47:f7:4e:ff:33:93:77:83:bf:01:
d6:85:55:ab:7e:ed:85:1b:58:e3:9c:70:0f:7f:96:0b:ed:40:
ac:73:23:99:9f:47:0e:40:56:29:69:2b:68:24:9f:df:2d:67:
f7:fc:7f:80:a3:0a:4d:c6:2e:ec:fa:d5:9d:ab:36:bb:8e:4b:
cd:2d:f1:13:64:28:f8:4b:7b:bb:7a:b1:28:b5:70:05:c9:0c:
a4:d6:b8:e3:86:3c:ff:eb:5c:32:5f:1d:85:db:33:12:c0:14:
77:bc:b6:f7:7a:7c:42:97:e1:41:16:d4:54:46:fb:2b:7a:90:
6d:aa:21:00:7e:d1:a7:1c:a3:29:93:62:b7:da:25:94:82:53:
fd:66:73:66:ed:94:af:41:8b:23:8a:d1:53:1b:1b:93:4b:a0:
32:11:3b:03:28:03:a3:97:7c:41:86:de:6a:2c:7e:20:04:c9:
a2:a9:53:06:ca:c0:6c:5f:7d:37:d2:25:35:23:45:28:d8:b3:
87:36:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:03 2026 by rpki-client