Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
File: Loskx2rYemwf7f-vCNmxe0UkmZE.cer (raw, json)
Hash identifier: BojJHzKuf6FllPdtWIHuWzK31hf2cfYJ45s4rDe9KrE=
Subject key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A00E6BF06989E8125BCC1E5441E15157A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 06:32:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 2109
AS: 3292
AS: 8322
AS: 8526
IP: 2.104.0.0 -- 2.109.255.255
IP: 2.111.0.0/16
IP: 62.135.128.0/17
IP: 62.242.0.0/15
IP: 80.62.0.0/15
IP: 80.160.0.0/13
IP: 80.196.0.0/14
IP: 81.31.80.0/20
IP: 83.88.0.0 -- 83.94.63.255
IP: 83.94.96.0 -- 83.95.255.255
IP: 85.129.0.0/17
IP: 87.48.0.0/13
IP: 87.56.32.0/19
IP: 87.56.128.0 -- 87.57.255.255
IP: 87.58.32.0/19
IP: 87.58.160.0/19
IP: 87.58.224.0 -- 87.63.255.255
IP: 93.160.0.0 -- 93.164.127.255
IP: 93.164.160.0 -- 93.165.63.255
IP: 93.165.96.0 -- 93.167.255.255
IP: 93.178.128.0/18
IP: 94.189.0.0/17
IP: 95.166.64.0 -- 95.166.255.255
IP: 128.76.0.0/18
IP: 128.76.128.0/17
IP: 128.77.128.0/17
IP: 131.164.0.0/16
IP: 176.20.0.0/17
IP: 176.20.224.0 -- 176.22.127.255
IP: 176.22.160.0 -- 176.23.127.255
IP: 176.23.160.0 -- 176.23.255.255
IP: 188.176.0.0/13
IP: 192.66.17.0/24
IP: 192.66.21.0 -- 192.66.40.255
IP: 192.66.56.0/22
IP: 192.66.133.0/24
IP: 192.66.166.0 -- 192.66.185.255
IP: 193.3.25.0/24
IP: 193.3.36.0/24
IP: 193.3.130.0/23
IP: 193.3.138.0 -- 193.3.156.255
IP: 193.3.224.0 -- 193.3.228.255
IP: 193.3.247.0 -- 193.3.251.255
IP: 193.39.139.0/24
IP: 193.88.0.0/15
IP: 193.162.0.0/24
IP: 193.162.2.0 -- 193.162.4.255
IP: 193.162.6.0/24
IP: 193.162.32.0/23
IP: 193.162.36.0/22
IP: 193.162.42.0/24
IP: 193.162.64.0 -- 193.162.73.255
IP: 193.162.80.0 -- 193.162.99.255
IP: 193.162.144.0 -- 193.162.167.255
IP: 193.162.224.0 -- 193.162.251.255
IP: 193.162.254.0/24
IP: 193.163.9.0 -- 193.163.11.255
IP: 193.163.24.0/21
IP: 193.163.33.0/24
IP: 193.163.69.0/24
IP: 193.163.129.0/24
IP: 193.163.146.0/23
IP: 193.163.158.0 -- 193.163.167.255
IP: 193.163.171.0/24
IP: 193.163.176.0/23
IP: 193.163.216.0/22
IP: 194.182.128.0 -- 194.182.151.255
IP: 194.182.232.0 -- 194.182.255.255
IP: 194.192.0.0/16
IP: 194.239.0.0/16
IP: 194.247.188.0/23
IP: 195.41.0.0/16
IP: 195.60.90.128/25
IP: 195.95.181.0/24
IP: 195.97.128.0/18
IP: 195.184.32.0/19
IP: 195.215.0.0/16
IP: 195.249.0.0/16
IP: 212.130.0.0/16
IP: 2001:6c8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:6b:f0:69:89:e8:12:5b:cc:1e:54:41:e1:51:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 17 06:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:8b:ba:4b:31:c1:d4:b0:5c:d4:63:87:ee:
10:64:73:96:9e:87:70:1f:55:2b:b7:c6:7d:1c:f2:
ab:22:25:bf:d6:1a:fc:5c:6d:7e:ea:51:3c:8a:56:
77:29:21:a6:52:86:22:c4:8d:34:b1:b7:d7:c4:57:
25:2b:80:0c:a2:57:e8:cc:d1:c6:d4:28:7a:a9:5d:
2c:e4:c8:26:dd:fa:ef:b7:71:90:68:ad:98:70:62:
48:89:4e:0e:a6:62:5b:50:73:8b:3d:6e:28:aa:21:
20:51:bd:9f:88:03:e9:3f:15:34:c1:fa:e5:4e:50:
9e:bb:a1:a0:81:35:a6:1d:ed:ab:61:46:87:ad:9c:
10:bb:4d:29:86:f6:c3:9c:b8:8c:83:89:3b:be:9e:
79:9f:4b:a1:38:dd:a6:26:ff:07:78:53:ac:31:1b:
dd:a9:28:2c:36:94:b6:f7:15:15:d2:26:56:15:46:
13:e8:fb:bb:bf:01:28:0e:6f:c6:f3:ec:5c:ad:5b:
c1:fb:f0:e6:df:0a:4a:74:9e:e5:cc:cc:e0:02:74:
4c:9b:e1:e4:76:a8:fe:17:58:a2:c0:31:cd:a0:1b:
1f:c7:1a:07:42:a2:b3:a8:98:ae:cd:d3:dc:5b:f3:
65:7a:8e:b2:f1:e7:8e:c1:1f:05:a2:c3:0e:a5:93:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0-2.109.255.255
2.111.0.0/16
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0-83.94.63.255
83.94.96.0-83.95.255.255
85.129.0.0/17
87.48.0.0/13
87.56.32.0/19
87.56.128.0-87.57.255.255
87.58.32.0/19
87.58.160.0/19
87.58.224.0-87.63.255.255
93.160.0.0-93.164.127.255
93.164.160.0-93.165.63.255
93.165.96.0-93.167.255.255
93.178.128.0/18
94.189.0.0/17
95.166.64.0-95.166.255.255
128.76.0.0/18
128.76.128.0/17
128.77.128.0/17
131.164.0.0/16
176.20.0.0/17
176.20.224.0-176.22.127.255
176.22.160.0-176.23.127.255
176.23.160.0-176.23.255.255
188.176.0.0/13
192.66.17.0/24
192.66.21.0-192.66.40.255
192.66.56.0/22
192.66.133.0/24
192.66.166.0-192.66.185.255
193.3.25.0/24
193.3.36.0/24
193.3.130.0/23
193.3.138.0-193.3.156.255
193.3.224.0-193.3.228.255
193.3.247.0-193.3.251.255
193.39.139.0/24
193.88.0.0/15
193.162.0.0/24
193.162.2.0-193.162.4.255
193.162.6.0/24
193.162.32.0/23
193.162.36.0/22
193.162.42.0/24
193.162.64.0-193.162.73.255
193.162.80.0-193.162.99.255
193.162.144.0-193.162.167.255
193.162.224.0-193.162.251.255
193.162.254.0/24
193.163.9.0-193.163.11.255
193.163.24.0/21
193.163.33.0/24
193.163.69.0/24
193.163.129.0/24
193.163.146.0/23
193.163.158.0-193.163.167.255
193.163.171.0/24
193.163.176.0/23
193.163.216.0/22
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.60.90.128/25
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2109
3292
8322
8526
Signature Algorithm: sha256WithRSAEncryption
13:2c:56:94:b1:99:6a:a1:e2:31:af:8b:9c:a8:62:24:8f:8e:
d7:8f:df:16:4a:b6:34:50:9a:e0:45:9f:a8:a3:8f:30:25:c8:
ee:e5:22:01:9a:8f:03:bd:b3:d6:12:1e:b9:0c:27:ca:8a:d8:
47:11:ae:38:04:bb:72:21:e1:f8:58:59:a5:99:ce:6c:c7:16:
f5:e7:44:aa:af:35:1b:dd:88:8c:e8:26:ea:13:f6:c6:85:13:
4c:a0:17:8a:1c:2c:e9:ab:07:47:ea:ae:18:b2:b0:47:16:d2:
83:68:69:f2:ec:60:09:28:d9:8f:b6:d7:85:18:7b:b8:37:41:
c5:0e:cf:65:ef:5a:e1:39:6e:1d:e3:0b:12:41:fa:f6:c5:fc:
4a:4a:86:78:cd:10:23:5c:2a:3e:6d:9b:d2:07:f6:b4:a5:0c:
f6:3d:a2:0f:72:0f:e1:05:43:d6:78:24:5f:f1:79:aa:cb:8c:
98:b4:cf:c1:1d:cf:5b:41:e4:54:26:19:ca:77:65:41:51:77:
b2:be:3e:ce:f4:c7:ce:4b:2f:4a:25:1e:26:5b:4a:2e:17:67:
ed:9b:9e:88:fa:9b:4b:6d:57:93:bc:4b:d5:0b:b3:d8:7e:08:
99:f9:66:13:c3:a1:57:0b:4a:61:fb:c6:fa:b8:16:99:5d:68:
93:57:ab:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:24 2026 by rpki-client