Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
File: 6jZp6uh20vI7n4Un6IqHAtvUI-M.cer (raw, json)
Hash identifier: X8alq5Q4fS//jddwZuuQ7+wxJuTQjLNtZ9exZD1mPV4=
Subject key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0FB80BCFA6934CEA2F7CBC754E487A636
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Oct 2026 07:25:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 20523
AS: 20845
AS: 20922
AS: 21334
AS: 34588
AS: 207070
AS: 209061
IP: 5.63.192.0/18
IP: 5.148.192.0/18
IP: 5.206.128.0/18
IP: 37.188.80.0/21
IP: 37.191.0.0/18
IP: 37.220.192.0/18
IP: 62.77.192.0/18
IP: 62.165.192.0/18
IP: 77.234.64.0/19
IP: 78.131.0.0/17
IP: 78.139.0.0/18
IP: 79.120.128.0/17
IP: 80.95.64.0/19
IP: 80.98.0.0/15
IP: 81.0.64.0/18
IP: 81.17.176.0/20
IP: 81.94.176.0/20
IP: 82.131.128.0/17
IP: 82.141.128.0/18
IP: 82.144.160.0/19
IP: 84.21.180.0/22
IP: 84.236.0.0/17
IP: 85.66.0.0/15
IP: 85.238.64.0/19
IP: 86.101.0.0/16
IP: 87.97.0.0/17
IP: 88.87.240.0/21
IP: 89.132.0.0/14
IP: 89.147.64.0/20
IP: 89.147.96.0/22
IP: 89.147.112.0/21
IP: 89.148.64.0/18
IP: 89.186.96.0/19
IP: 89.223.128.0/17
IP: 91.82.0.0/15
IP: 92.52.224.0/19
IP: 92.245.64.0/19
IP: 92.249.128.0/17
IP: 94.21.0.0/16
IP: 94.44.0.0/16
IP: 94.125.248.0/21
IP: 94.247.88.0/21
IP: 130.43.192.0/18
IP: 151.0.64.0/18
IP: 176.63.0.0/16
IP: 176.241.0.0/18
IP: 178.48.0.0/16
IP: 178.164.128.0/17
IP: 185.10.124.0/22
IP: 185.29.80.0/22
IP: 185.33.80.0/23
IP: 185.50.28.0/22
IP: 185.62.128.0/22
IP: 185.123.28.0/22
IP: 188.142.128.0 -- 188.143.127.255
IP: 193.68.32.0/19
IP: 193.91.64.0/19
IP: 193.110.56.0/21
IP: 193.226.192.0/18
IP: 194.143.224.0/19
IP: 194.169.253.0/24
IP: 195.38.96.0/19
IP: 195.184.0.0/19
IP: 195.184.160.0/19
IP: 212.24.160.0/19
IP: 212.40.64.0/19
IP: 212.48.240.0/20
IP: 212.96.32.0/19
IP: 212.108.192.0/18
IP: 213.16.64.0/18
IP: 213.163.0.0/18
IP: 213.197.64.0/18
IP: 213.222.128.0/18
IP: 213.253.192.0/18
IP: 217.150.128.0/20
IP: 217.197.176.0/20
IP: 2001:1aa0::/29
IP: 2a01:368::/29
IP: 2a02:780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:80:bc:fa:69:34:ce:a2:f7:cb:c7:54:e4:87:a6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 07:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:79:92:48:93:6b:12:88:b5:ef:2a:fa:39:
7f:83:b8:87:95:79:5d:1b:01:92:cb:e2:f6:c7:d6:
5e:e7:33:a8:7b:f3:c9:46:7b:d8:6e:b3:2a:14:7c:
b5:79:64:02:b9:4c:b6:7c:48:56:84:b9:8a:4a:fa:
c8:bf:d8:42:8b:b8:17:d7:ce:be:f8:f7:68:e6:2a:
43:8b:0f:69:ac:f7:70:98:85:aa:5d:27:11:fb:b2:
d8:83:9a:06:ef:01:c8:ef:40:7c:03:d2:9b:46:a7:
d5:7d:80:28:c3:b0:5a:78:97:66:7a:ff:89:de:07:
f6:6a:a8:98:fe:df:9e:7a:e5:7a:ef:af:18:39:f4:
92:97:bc:54:6f:fc:1e:b6:c2:fe:ed:0e:c3:64:66:
0f:54:f7:ab:4d:16:38:69:6a:ca:1a:5d:3d:f5:f0:
1f:64:37:ad:5d:6a:b8:ef:e5:b5:72:2a:57:0f:ad:
04:8c:bc:d4:48:8f:e5:a0:ce:6f:0f:e2:8b:18:ad:
df:7a:a5:01:9a:9f:a5:ab:2e:08:fe:90:fa:3b:1e:
75:7b:0a:c9:74:5f:26:bc:74:ea:c3:3e:ec:24:78:
f2:4c:2b:c8:1a:6e:b9:f4:49:f9:7e:9b:d8:56:8a:
98:ee:1f:04:44:0b:8d:a2:0c:09:83:e1:c8:c3:59:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.192.0/18
5.148.192.0/18
5.206.128.0/18
37.188.80.0/21
37.191.0.0/18
37.220.192.0/18
62.77.192.0/18
62.165.192.0/18
77.234.64.0/19
78.131.0.0/17
78.139.0.0/18
79.120.128.0/17
80.95.64.0/19
80.98.0.0/15
81.0.64.0/18
81.17.176.0/20
81.94.176.0/20
82.131.128.0/17
82.141.128.0/18
82.144.160.0/19
84.21.180.0/22
84.236.0.0/17
85.66.0.0/15
85.238.64.0/19
86.101.0.0/16
87.97.0.0/17
88.87.240.0/21
89.132.0.0/14
89.147.64.0/20
89.147.96.0/22
89.147.112.0/21
89.148.64.0/18
89.186.96.0/19
89.223.128.0/17
91.82.0.0/15
92.52.224.0/19
92.245.64.0/19
92.249.128.0/17
94.21.0.0/16
94.44.0.0/16
94.125.248.0/21
94.247.88.0/21
130.43.192.0/18
151.0.64.0/18
176.63.0.0/16
176.241.0.0/18
178.48.0.0/16
178.164.128.0/17
185.10.124.0/22
185.29.80.0/22
185.33.80.0/23
185.50.28.0/22
185.62.128.0/22
185.123.28.0/22
188.142.128.0-188.143.127.255
193.68.32.0/19
193.91.64.0/19
193.110.56.0/21
193.226.192.0/18
194.143.224.0/19
194.169.253.0/24
195.38.96.0/19
195.184.0.0/19
195.184.160.0/19
212.24.160.0/19
212.40.64.0/19
212.48.240.0/20
212.96.32.0/19
212.108.192.0/18
213.16.64.0/18
213.163.0.0/18
213.197.64.0/18
213.222.128.0/18
213.253.192.0/18
217.150.128.0/20
217.197.176.0/20
IPv6:
2001:1aa0::/29
2a01:368::/29
2a02:780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20523
20845
20922
21334
34588
207070
209061
Signature Algorithm: sha256WithRSAEncryption
92:ba:b9:79:16:31:b2:83:cb:fe:1e:1b:73:61:41:d6:fc:e3:
3f:ef:0e:ec:57:a3:55:a8:c0:dd:4a:f7:2e:71:36:c5:4b:d5:
06:dd:5c:53:05:5e:24:67:78:97:06:d5:6f:2e:f1:aa:d7:41:
35:b6:80:56:fa:9d:ce:7a:2f:1b:01:5b:bf:d3:aa:58:7b:09:
d3:8d:75:09:d1:b1:87:a2:d3:f4:a7:93:df:1a:7c:63:69:12:
39:cc:7e:78:3d:70:c9:e4:0c:21:4d:ea:3f:9b:d2:04:a1:39:
01:f3:5d:e0:66:a8:0b:e2:27:d9:23:88:e0:9a:c3:d0:52:ee:
52:3f:47:52:df:af:7e:ca:ec:1c:b9:c2:79:ee:a8:7c:a6:79:
28:8a:0b:c1:ab:f5:5b:70:8d:52:96:ea:09:cb:01:2a:aa:35:
8d:cf:f2:b5:aa:29:12:6d:e1:29:eb:e6:90:a1:36:8e:da:7c:
d9:8d:7f:6a:ba:aa:a5:97:5a:89:c8:ac:49:e1:73:5f:e5:85:
be:a7:df:02:5e:f8:2f:b1:06:05:e0:1b:21:fd:88:de:ff:c3:
97:7d:17:7c:86:bb:ad:fc:a4:17:e4:0e:27:53:f8:7e:19:2b:
99:a2:b3:22:21:7a:29:1d:e5:e1:8c:d1:60:04:b9:8d:f2:72:
03:f6:2c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:50:41 2026 by rpki-client