Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
File: 9RNpzL-GsehOGutG5tM20591Kuc.cer (raw, json)
Hash identifier: vNt2PX3h9k1XX3RBKG8yTyeYW0Kfzl8vImvRqwiqwe8=
Subject key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BFF4A8895A44974107D9A99F6BC54EAA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Jan 2026 11:50:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 5524
AS: 20857
AS: 21155
AS: 28878
AS: 29590
AS: 31586
AS: 35470
AS: 39700
AS: 49685
IP: 5.61.248.0/21
IP: 31.3.8.0/21
IP: 31.3.96.0/21
IP: 31.14.96.0/22
IP: 31.223.160.0/20
IP: 37.17.208.0/20
IP: 37.34.48.0/20
IP: 37.97.128.0/17
IP: 37.230.96.0/21
IP: 46.226.56.0/21
IP: 77.72.144.0/21
IP: 78.108.128.0/20
IP: 79.170.88.0/21
IP: 80.69.64.0/19
IP: 80.84.224.0/19
IP: 80.246.192.0/20
IP: 80.255.240.0/20
IP: 81.4.64.0 -- 81.4.99.255
IP: 81.4.112.0/21
IP: 81.21.136.0/21
IP: 81.30.32.0/20
IP: 83.96.128.0/17
IP: 84.247.8.0/21
IP: 85.10.128.0/18
IP: 85.158.248.0/21
IP: 85.222.224.0/21
IP: 86.105.244.0/22
IP: 87.253.128.0/19
IP: 89.31.96.0/21
IP: 89.41.168.0/22
IP: 91.142.240.0/20
IP: 91.189.208.0/22
IP: 91.205.32.0/22
IP: 91.216.162.0/24
IP: 93.119.0.0/20
IP: 93.191.128.0/21
IP: 94.142.208.0/21
IP: 95.170.64.0/19
IP: 136.144.128.0/17
IP: 141.138.136.0/21
IP: 141.138.192.0/20
IP: 141.255.176.0/21
IP: 149.210.128.0/17
IP: 157.97.168.0/22
IP: 171.33.128.0/21
IP: 176.74.224.0/19
IP: 178.18.80.0/20
IP: 185.3.208.0/22
IP: 185.10.48.0/22
IP: 185.15.248.0/22
IP: 185.21.188.0/22
IP: 185.65.52.0/22
IP: 185.69.232.0/22
IP: 185.84.72.0/22
IP: 185.89.152.0/22
IP: 185.95.68.0/22
IP: 185.96.4.0/22
IP: 185.105.204.0/22
IP: 185.105.216.0/22
IP: 185.108.112.0/22
IP: 185.110.172.0/22
IP: 185.110.200.0/22
IP: 188.240.52.0/22
IP: 188.241.148.0/22
IP: 193.93.172.0/22
IP: 193.138.204.0/22
IP: 193.242.119.0/24
IP: 194.60.207.0/24
IP: 195.8.195.0/24
IP: 195.135.195.0/24
IP: 213.187.240.0/21
IP: 217.21.240.0/20
IP: 217.149.128.0/20
IP: 2001:828::/32
IP: 2001:4cb8::/29
IP: 2a00:c080::/32
IP: 2a01:7c8::/29
IP: 2a01:7860::/32
IP: 2a02:348::/32
IP: 2a03:4f00::/32
IP: 2a03:5700::/32
IP: 2a05:2500::/29
IP: 2a05:a280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:4a:88:95:a4:49:74:10:7d:9a:99:f6:bc:54:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 11:50:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:83:29:8d:e6:56:f9:91:21:8a:ee:ef:1d:
d3:78:d5:81:e5:83:c5:9f:a4:4c:e5:be:95:42:89:
a9:de:91:d9:57:e5:78:3f:5a:7e:4d:72:86:21:21:
fc:2c:2b:55:8e:60:e9:cc:b0:bb:3f:2b:0c:4d:32:
b6:26:20:f5:62:5f:8b:42:e8:5f:91:e0:c5:1d:f1:
3d:4d:75:35:4a:58:de:58:be:18:1c:c1:18:8c:44:
d7:ff:c7:17:29:0f:2f:60:c0:25:05:47:5b:31:32:
0a:3b:89:b1:2c:8a:10:07:cc:8c:db:10:65:6c:92:
f1:c7:ea:b9:32:8d:50:24:94:44:34:3b:04:cf:ed:
af:38:bd:9d:11:d8:6f:80:8c:72:07:59:6e:c8:1a:
fe:4f:52:3a:b2:d1:79:10:6d:9a:c6:90:51:56:05:
83:a0:6b:52:3c:7e:30:d2:8c:b3:23:5a:2d:2d:8a:
c5:71:56:9c:c6:4e:50:7f:ea:57:c6:5c:80:54:85:
28:e5:3d:80:8a:02:1a:13:20:25:23:97:3c:d4:f8:
d6:15:69:b6:c5:17:25:6a:bd:d4:20:7b:a4:fb:d2:
92:49:01:82:f5:01:86:7c:14:9a:ea:1e:d1:0d:34:
75:db:e3:6a:fd:99:8d:02:de:a0:66:a5:82:df:20:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.248.0/21
31.3.8.0/21
31.3.96.0/21
31.14.96.0/22
31.223.160.0/20
37.17.208.0/20
37.34.48.0/20
37.97.128.0/17
37.230.96.0/21
46.226.56.0/21
77.72.144.0/21
78.108.128.0/20
79.170.88.0/21
80.69.64.0/19
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
84.247.8.0/21
85.10.128.0/18
85.158.248.0/21
85.222.224.0/21
86.105.244.0/22
87.253.128.0/19
89.31.96.0/21
89.41.168.0/22
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.119.0.0/20
93.191.128.0/21
94.142.208.0/21
95.170.64.0/19
136.144.128.0/17
141.138.136.0/21
141.138.192.0/20
141.255.176.0/21
149.210.128.0/17
157.97.168.0/22
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.10.48.0/22
185.15.248.0/22
185.21.188.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.96.4.0/22
185.105.204.0/22
185.105.216.0/22
185.108.112.0/22
185.110.172.0/22
185.110.200.0/22
188.240.52.0/22
188.241.148.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
195.8.195.0/24
195.135.195.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a01:7c8::/29
2a01:7860::/32
2a02:348::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/29
2a05:a280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5524
20857
21155
28878
29590
31586
35470
39700
49685
Signature Algorithm: sha256WithRSAEncryption
1d:83:1e:2b:12:81:79:5e:4e:8d:d7:21:f8:d1:50:98:ea:5c:
08:77:9e:c4:61:37:4f:29:18:67:d4:2a:1d:34:a0:2d:ac:d2:
af:da:1f:3d:66:09:1b:4b:62:f1:3a:3d:39:b3:87:66:ca:99:
a0:4e:d4:bc:b4:74:68:43:c1:ee:0a:ad:e3:40:bb:19:61:12:
05:73:03:85:f7:4d:67:77:3e:d3:18:6d:47:3c:e7:b6:04:48:
76:39:aa:3a:a3:da:f8:8b:61:34:0b:c2:8b:30:a3:52:66:66:
4b:91:f1:aa:5b:10:8c:b0:91:94:ad:6a:fe:f5:d2:cb:88:81:
03:f9:a9:ef:66:57:90:5a:30:42:2f:e7:f9:ae:27:63:37:ee:
03:f0:f1:ec:81:1d:d7:6b:c8:13:54:70:3d:cb:16:2a:75:59:
f1:7e:bc:95:e7:80:22:76:d9:76:82:06:e1:64:1e:d2:01:17:
70:af:83:3b:9c:88:31:fd:05:e2:51:e5:ef:2c:f8:f2:44:96:
d0:86:a6:ec:0a:57:3b:4c:f8:76:f7:79:42:32:d1:ad:f8:3a:
3c:a4:39:60:03:2e:30:b6:b8:47:9c:37:7c:dc:c8:af:56:b7:
be:3c:78:b3:29:c2:56:22:10:15:51:61:82:3f:65:6c:7f:b3:
29:6e:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:11:25 2026 by rpki-client