Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
File: 6jZp6uh20vI7n4Un6IqHAtvUI-M.cer (raw, json)
Hash identifier: 3I+0qcvukQ3LKdAu0b8IKvvOO5U9qepsN+0BibadSEM=
Subject key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F8405894111AAF006D10BEE17AE3E7301
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 09:33:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21334
IP: 5.63.192.0/18
IP: 5.148.192.0/18
IP: 5.206.128.0/18
IP: 37.188.80.0/21
IP: 37.191.0.0/18
IP: 37.220.192.0/18
IP: 78.139.0.0/18
IP: 80.98.0.0/15
IP: 86.101.0.0/16
IP: 88.87.240.0/21
IP: 89.132.0.0/14
IP: 89.223.128.0/17
IP: 94.44.0.0/16
IP: 130.43.192.0/18
IP: 151.0.64.0/18
IP: 176.63.0.0/16
IP: 178.48.0.0/16
IP: 185.10.124.0/22
IP: 185.33.80.0/23
IP: 185.123.28.0/22
IP: 188.142.160.0 -- 188.142.255.255
IP: 195.184.160.0/19
IP: 212.48.240.0/20
IP: 212.96.32.0/19
IP: 213.222.128.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:05:89:41:11:aa:f0:06:d1:0b:ee:17:ae:3e:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 09:33:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:79:92:48:93:6b:12:88:b5:ef:2a:fa:39:
7f:83:b8:87:95:79:5d:1b:01:92:cb:e2:f6:c7:d6:
5e:e7:33:a8:7b:f3:c9:46:7b:d8:6e:b3:2a:14:7c:
b5:79:64:02:b9:4c:b6:7c:48:56:84:b9:8a:4a:fa:
c8:bf:d8:42:8b:b8:17:d7:ce:be:f8:f7:68:e6:2a:
43:8b:0f:69:ac:f7:70:98:85:aa:5d:27:11:fb:b2:
d8:83:9a:06:ef:01:c8:ef:40:7c:03:d2:9b:46:a7:
d5:7d:80:28:c3:b0:5a:78:97:66:7a:ff:89:de:07:
f6:6a:a8:98:fe:df:9e:7a:e5:7a:ef:af:18:39:f4:
92:97:bc:54:6f:fc:1e:b6:c2:fe:ed:0e:c3:64:66:
0f:54:f7:ab:4d:16:38:69:6a:ca:1a:5d:3d:f5:f0:
1f:64:37:ad:5d:6a:b8:ef:e5:b5:72:2a:57:0f:ad:
04:8c:bc:d4:48:8f:e5:a0:ce:6f:0f:e2:8b:18:ad:
df:7a:a5:01:9a:9f:a5:ab:2e:08:fe:90:fa:3b:1e:
75:7b:0a:c9:74:5f:26:bc:74:ea:c3:3e:ec:24:78:
f2:4c:2b:c8:1a:6e:b9:f4:49:f9:7e:9b:d8:56:8a:
98:ee:1f:04:44:0b:8d:a2:0c:09:83:e1:c8:c3:59:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.192.0/18
5.148.192.0/18
5.206.128.0/18
37.188.80.0/21
37.191.0.0/18
37.220.192.0/18
78.139.0.0/18
80.98.0.0/15
86.101.0.0/16
88.87.240.0/21
89.132.0.0/14
89.223.128.0/17
94.44.0.0/16
130.43.192.0/18
151.0.64.0/18
176.63.0.0/16
178.48.0.0/16
185.10.124.0/22
185.33.80.0/23
185.123.28.0/22
188.142.160.0-188.142.255.255
195.184.160.0/19
212.48.240.0/20
212.96.32.0/19
213.222.128.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21334
Signature Algorithm: sha256WithRSAEncryption
50:56:7f:91:76:dd:51:2a:81:61:44:68:7f:fe:fb:01:ac:05:
2a:a2:6a:12:8c:d5:7e:23:43:0b:17:d3:f5:b8:2b:72:af:48:
0c:1a:cd:47:30:f9:0a:c7:e9:17:e5:ab:59:f5:8e:6e:36:96:
a8:4e:b8:5f:85:43:13:9b:72:a1:93:1d:04:29:d2:26:b1:bf:
6c:7c:1c:4a:fc:c6:bc:6b:f5:29:8a:b4:f1:88:98:d4:ba:7b:
3a:a6:8f:fe:56:ff:1b:47:80:bb:b9:98:f0:aa:c3:d4:1a:c5:
bb:35:f1:ef:6a:03:02:bd:1d:0e:fb:b4:8d:27:ec:f8:d2:83:
22:5e:77:e4:a3:f8:38:3a:7c:48:4f:c6:73:76:4d:81:8c:2c:
71:03:10:96:86:4b:38:07:8c:92:b2:c7:09:67:56:fd:fa:62:
d3:26:25:99:8a:19:72:09:60:ed:4a:e8:00:27:d1:d2:15:e2:
bb:ce:eb:dc:08:66:d0:09:87:c8:61:3e:a4:76:58:e7:07:b9:
00:8e:96:d0:e2:97:24:75:f8:23:c4:61:6b:9d:86:e7:67:de:
7c:ff:a4:d8:5e:b4:d7:14:62:a0:0f:0c:7a:bd:af:ef:03:7d:
84:c2:b1:d6:fd:7f:ea:83:6e:25:a1:d3:b8:4e:02:88:da:69:
f7:77:b6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:35 2026 by rpki-client