Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
File: KQeNImmM3R5qI9cMF__-Mh3vOzA.cer (raw, json)
Hash identifier: 81/7IfGfRvOfGsNVg6ydmZyERCbjX/56NoHGBBujWyM=
Subject key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F965E77AD3FCEAFB75EC748490DC9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34744
AS: 57217
IP: 31.131.8.0/21
IP: 31.132.192.0/21
IP: 31.133.24.0/21
IP: 31.133.192.0/21
IP: 31.135.0.0/21
IP: 37.97.112.0 -- 37.97.123.255
IP: 46.151.32.0/21
IP: 46.173.240.0/20
IP: 46.174.200.0/21
IP: 64.43.64.0/18
IP: 77.36.0.0/17
IP: 77.232.192.0/19
IP: 81.161.0.0/20
IP: 81.161.48.0/21
IP: 85.204.196.0/23
IP: 86.104.132.0/23
IP: 89.34.74.0/23
IP: 89.42.232.0/23
IP: 89.44.100.0/23
IP: 89.45.92.0/23
IP: 89.46.112.0/23
IP: 91.193.28.0/22
IP: 91.200.132.0/22
IP: 91.218.252.0/22
IP: 91.223.117.0/24
IP: 91.223.158.0/24
IP: 91.224.40.0/23
IP: 91.224.212.0/23
IP: 91.225.34.0/23
IP: 91.226.52.0/22
IP: 91.228.119.0/24
IP: 91.229.6.0/24
IP: 91.229.16.0/22
IP: 91.229.30.0/23
IP: 91.229.147.0/24
IP: 91.229.156.0/22
IP: 91.231.223.0 -- 91.231.227.255
IP: 91.232.16.0 -- 91.232.20.255
IP: 91.232.55.0 -- 91.232.57.255
IP: 91.232.226.0/23
IP: 91.232.254.0/24
IP: 91.233.0.0/22
IP: 91.233.200.0/22
IP: 91.234.120.0/22
IP: 91.234.150.0/23
IP: 91.234.156.0/22
IP: 91.234.220.0/22
IP: 91.235.166.0/23
IP: 91.236.76.0/23
IP: 91.236.237.0/24
IP: 91.237.44.0 -- 91.237.49.255
IP: 91.237.91.0 -- 91.237.93.255
IP: 91.237.193.0 -- 91.237.195.255
IP: 91.238.38.0 -- 91.238.43.255
IP: 91.239.0.0/22
IP: 91.239.178.0/23
IP: 91.239.220.0 -- 91.239.226.255
IP: 91.240.154.0/24
IP: 91.240.156.0/22
IP: 91.245.88.0/21
IP: 91.245.176.0/20
IP: 91.246.172.0 -- 91.246.201.255
IP: 91.246.203.0 -- 91.246.207.255
IP: 91.246.216.0/23
IP: 93.120.0.0/17
IP: 94.232.96.0/21
IP: 109.197.232.0/21
IP: 109.207.128.0/20
IP: 130.195.58.0/23
IP: 130.195.214.0/23
IP: 171.25.223.0/24
IP: 176.96.48.0/20
IP: 176.96.88.0/21
IP: 176.96.176.0/21
IP: 176.97.144.0/21
IP: 176.98.56.0/21
IP: 176.102.120.0/21
IP: 176.103.120.0/21
IP: 176.103.240.0/21
IP: 176.107.64.0/20
IP: 176.110.106.0/23
IP: 176.110.112.0/22
IP: 176.110.216.0/21
IP: 176.111.0.0/21
IP: 176.111.160.0/22
IP: 176.112.80.0/21
IP: 176.113.176.0/20
IP: 176.115.232.0/21
IP: 176.116.32.0/20
IP: 176.116.224.0/20
IP: 176.118.88.0/21
IP: 176.118.200.0/21
IP: 176.121.32.0/20
IP: 176.121.96.0/20
IP: 176.124.172.0 -- 176.124.183.255
IP: 178.159.144.0/20
IP: 178.212.184.0/21
IP: 178.213.176.0/21
IP: 185.9.236.0 -- 185.9.243.255
IP: 185.55.4.0/22
IP: 185.55.140.0/22
IP: 185.104.196.0/22
IP: 188.191.248.0/21
IP: 188.213.233.0/24
IP: 192.162.184.0/22
IP: 193.0.190.0/24
IP: 193.36.192.0/19
IP: 193.221.82.0/23
IP: 194.33.64.0/22
IP: 194.33.100.0/22
IP: 195.80.142.0/23
IP: 2a01:7d8::/32
IP: 2a05:84c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:65:e7:7a:d3:fc:ea:fb:75:ec:74:84:90:dc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:80:05:4e:22:0e:d9:48:21:4b:f0:01:78:
69:7d:df:ba:c5:9a:8d:fa:00:3c:be:fa:7b:2d:97:
20:b0:c5:9b:c5:47:39:37:47:1e:e5:08:48:08:ec:
3b:16:51:a7:df:b1:0c:a2:c1:e6:fb:9e:29:f1:b8:
c6:f6:6f:8f:d6:6d:a6:8c:46:29:cc:8f:ba:d4:0a:
7a:40:e6:98:be:06:67:ca:38:23:bf:39:78:96:1e:
3b:19:1f:c4:b5:d0:e4:4a:81:2d:0b:59:1d:9a:4e:
f4:c6:97:1f:83:40:12:88:89:75:bb:0a:3b:3d:fa:
7d:ce:b7:8d:d2:b4:44:c6:ea:2b:31:d6:a5:e6:c6:
f3:d2:b6:83:fa:59:fa:3c:7a:f1:5b:6b:fb:90:45:
66:69:86:85:45:c6:8e:77:8d:4a:fe:e1:c1:d3:d8:
43:81:1d:26:c5:b6:1b:94:b4:bc:c5:52:dd:bf:9c:
3c:89:f9:1f:fe:ce:bf:49:1f:44:1a:55:fe:18:c4:
6d:a8:d7:a3:28:51:69:1d:41:83:09:4b:29:94:0a:
92:f3:2d:8c:6a:64:02:57:a4:7a:97:d0:62:bf:36:
06:7a:55:93:a7:02:4d:ea:a0:ad:3d:f7:25:79:d8:
cf:b2:de:82:33:87:da:84:a8:50:ac:f2:8a:f7:89:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.8.0/21
31.132.192.0/21
31.133.24.0/21
31.133.192.0/21
31.135.0.0/21
37.97.112.0-37.97.123.255
46.151.32.0/21
46.173.240.0/20
46.174.200.0/21
64.43.64.0/18
77.36.0.0/17
77.232.192.0/19
81.161.0.0/20
81.161.48.0/21
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.193.28.0/22
91.200.132.0/22
91.218.252.0/22
91.223.117.0/24
91.223.158.0/24
91.224.40.0/23
91.224.212.0/23
91.225.34.0/23
91.226.52.0/22
91.228.119.0/24
91.229.6.0/24
91.229.16.0/22
91.229.30.0/23
91.229.147.0/24
91.229.156.0/22
91.231.223.0-91.231.227.255
91.232.16.0-91.232.20.255
91.232.55.0-91.232.57.255
91.232.226.0/23
91.232.254.0/24
91.233.0.0/22
91.233.200.0/22
91.234.120.0/22
91.234.150.0/23
91.234.156.0/22
91.234.220.0/22
91.235.166.0/23
91.236.76.0/23
91.236.237.0/24
91.237.44.0-91.237.49.255
91.237.91.0-91.237.93.255
91.237.193.0-91.237.195.255
91.238.38.0-91.238.43.255
91.239.0.0/22
91.239.178.0/23
91.239.220.0-91.239.226.255
91.240.154.0/24
91.240.156.0/22
91.245.88.0/21
91.245.176.0/20
91.246.172.0-91.246.201.255
91.246.203.0-91.246.207.255
91.246.216.0/23
93.120.0.0/17
94.232.96.0/21
109.197.232.0/21
109.207.128.0/20
130.195.58.0/23
130.195.214.0/23
171.25.223.0/24
176.96.48.0/20
176.96.88.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.102.120.0/21
176.103.120.0/21
176.103.240.0/21
176.107.64.0/20
176.110.106.0/23
176.110.112.0/22
176.110.216.0/21
176.111.0.0/21
176.111.160.0/22
176.112.80.0/21
176.113.176.0/20
176.115.232.0/21
176.116.32.0/20
176.116.224.0/20
176.118.88.0/21
176.118.200.0/21
176.121.32.0/20
176.121.96.0/20
176.124.172.0-176.124.183.255
178.159.144.0/20
178.212.184.0/21
178.213.176.0/21
185.9.236.0-185.9.243.255
185.55.4.0/22
185.55.140.0/22
185.104.196.0/22
188.191.248.0/21
188.213.233.0/24
192.162.184.0/22
193.0.190.0/24
193.36.192.0/19
193.221.82.0/23
194.33.64.0/22
194.33.100.0/22
195.80.142.0/23
IPv6:
2a01:7d8::/32
2a05:84c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34744
57217
Signature Algorithm: sha256WithRSAEncryption
11:28:68:b4:b4:6e:13:b2:39:01:ad:f2:d7:8d:c9:2f:2b:a2:
a3:8a:da:a1:06:1c:fd:c4:a8:98:78:bd:e9:84:81:b9:89:b7:
74:e3:1a:4e:bf:c3:10:52:e3:d5:dc:69:0c:91:5d:2b:dd:7d:
3e:42:ee:75:78:24:9d:9f:d7:f7:de:cb:92:2c:41:cf:17:e4:
f6:96:e4:02:e6:89:70:4a:99:5c:49:6e:52:c2:34:ca:99:05:
ab:43:f0:b8:91:51:40:ab:8d:bd:14:68:28:4f:11:e3:1f:c7:
ec:bb:f7:7d:3c:5b:39:dd:52:59:95:fc:a4:70:8d:9a:fa:bc:
00:98:c2:c5:16:07:7a:fe:4b:46:77:d6:85:ea:d1:80:c2:de:
ab:13:a7:ff:ea:c8:3c:9c:57:ad:e3:bf:d9:ed:5f:c7:73:1d:
7a:80:ce:06:aa:88:9d:60:68:8f:8f:cf:b9:6e:c7:f1:f9:55:
c9:1e:00:26:f4:46:c6:90:01:9d:b5:bd:30:af:a5:a5:6d:2d:
62:cb:72:aa:1a:a7:31:5d:23:1c:2a:ea:30:83:b1:07:c0:07:
70:55:06:7e:54:51:ad:ff:06:d2:3e:8c:9e:51:95:e7:ad:41:
18:cd:a1:1f:e3:ff:84:b2:ef:ae:f8:df:c1:6a:36:43:51:67:
9d:b4:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 14:39:03 2026 by rpki-client