Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
File: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer (raw, json)
Hash identifier: UKteyj+dD4whQkbiWxBh0ZX1n8quKWB5hCIscwAsQqk=
Subject key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EDF5D9CF0E825E8DF3D4047C1956EDD2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 19 Jun 2026 10:11:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215427
IP: 31.41.248.0/24
IP: 37.140.244.0/24
IP: 45.88.224.0/23
IP: 62.68.80.0/24
IP: 91.190.154.0/24
IP: 91.212.216.0/24
IP: 91.239.216.0/23
IP: 94.103.177.0/24
IP: 146.255.189.0/24
IP: 176.97.212.0/24
IP: 178.211.159.0/24
IP: 185.115.160.0/22
IP: 185.130.89.0/24
IP: 185.145.235.0/24
IP: 185.167.253.0/24
IP: 193.9.16.0/24
IP: 193.104.33.0/24
IP: 193.109.252.0/23
IP: 194.69.163.0/24
IP: 195.66.101.0/24
IP: 212.46.33.0/24
IP: 212.46.35.0/24
IP: 2001:3080::/29
IP: 2001:3180::/29
IP: 2001:3280::/29
IP: 2001:3380::/29
IP: 2a0b:3e00::/29
IP: 2a0c:8340::/29
IP: 2a0e:a780::/29
IP: 2a10:6c40::/29
IP: 2a10:9600::/29
IP: 2a11:ad80::/29
IP: 2a13:1880::/29
IP: 2a13:8000::/29
IP: 2a13:b640::/29
IP: 2a13:b840::/29
IP: 2a13:bfc0::/29
IP: 2a13:c040::/29
IP: 2a13:c0c0::/29
IP: 2a13:c140::/29
IP: 2a13:d240::/29
IP: 2a13:d2c0::/29
IP: 2a13:ddc0::/29
IP: 2a13:de40::/29
IP: 2a14:35c0::/29
IP: 2a14:5740::/29
IP: 2a14:5840::/29
IP: 2a14:58c0::/29
IP: 2a14:6ac0::/29
IP: 2a14:6b40::/29
IP: 2a14:6bc0::/29
IP: 2a14:72c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:5d:9c:f0:e8:25:e8:df:3d:40:47:c1:95:6e:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 19 10:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:b7:f1:21:3f:de:e9:97:ce:60:4c:93:63:
88:2f:10:1f:f0:ec:2f:a5:16:b2:2f:f5:27:7e:20:
f4:74:61:49:15:b2:7b:17:f6:e4:9b:3f:45:6b:81:
62:6f:64:45:6b:d4:fb:e4:fa:f9:14:e0:ab:fc:7a:
19:c5:ae:c7:13:97:9c:cd:c1:e3:54:43:5c:ba:19:
73:74:01:21:d3:e0:49:7a:07:44:6f:76:c4:b2:80:
3a:89:52:53:19:33:9a:b1:df:c9:68:b9:d4:f5:b0:
35:9e:1d:3f:21:7a:87:44:8b:66:d9:3c:34:15:eb:
e8:69:d6:53:80:04:5a:8f:e8:f1:20:73:d1:bb:c9:
a5:c7:29:20:4c:da:99:c6:00:24:ac:9d:24:09:3e:
b7:9f:b6:01:e2:26:8c:e2:7e:e3:a9:40:39:95:0e:
8d:11:a6:06:f5:83:5e:c4:2f:3d:5d:b4:ac:44:7a:
66:28:26:00:7d:49:23:9b:02:8b:de:4b:d9:d5:d1:
f7:d2:1f:52:f2:ef:d3:ec:12:de:18:8f:75:9e:71:
d7:fb:ee:64:36:ff:40:ea:27:30:fc:13:1c:f0:31:
4c:9b:46:5c:99:19:f0:ad:85:a3:3f:a7:64:44:ca:
65:f3:7d:e0:51:2f:ed:26:fe:cf:bf:b2:09:b5:44:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.248.0/24
37.140.244.0/24
45.88.224.0/23
62.68.80.0/24
91.190.154.0/24
91.212.216.0/24
91.239.216.0/23
94.103.177.0/24
146.255.189.0/24
176.97.212.0/24
178.211.159.0/24
185.115.160.0/22
185.130.89.0/24
185.145.235.0/24
185.167.253.0/24
193.9.16.0/24
193.104.33.0/24
193.109.252.0/23
194.69.163.0/24
195.66.101.0/24
212.46.33.0/24
212.46.35.0/24
IPv6:
2001:3080::/29
2001:3180::/29
2001:3280::/29
2001:3380::/29
2a0b:3e00::/29
2a0c:8340::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a11:ad80::/29
2a13:1880::/29
2a13:8000::/29
2a13:b640::/29
2a13:b840::/29
2a13:bfc0::/29
2a13:c040::/29
2a13:c0c0::/29
2a13:c140::/29
2a13:d240::/29
2a13:d2c0::/29
2a13:ddc0::/29
2a13:de40::/29
2a14:35c0::/29
2a14:5740::/29
2a14:5840::/29
2a14:58c0::/29
2a14:6ac0::/29
2a14:6b40::/29
2a14:6bc0::/29
2a14:72c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215427
Signature Algorithm: sha256WithRSAEncryption
49:25:88:8c:ce:27:d6:4e:aa:40:d6:8d:c5:bd:28:6f:40:63:
c5:3e:f1:78:fe:79:04:f3:15:42:27:77:bb:eb:d9:02:6e:ed:
a2:9a:57:b6:d4:4c:9f:24:0d:06:de:b9:3e:35:f4:fa:91:80:
e8:c0:9d:8b:73:4a:45:d4:f0:40:8b:2c:96:70:ab:1d:ee:55:
f5:61:e4:ad:d7:f3:99:8d:8d:ad:fc:22:57:37:38:e2:c8:53:
a9:78:91:b4:80:f7:c4:57:de:90:76:93:85:09:36:80:df:eb:
74:0c:9c:43:fd:db:b9:4a:63:ae:2e:97:70:14:be:6e:1f:14:
46:b9:31:3d:98:72:1c:2c:4e:57:f0:76:2a:d2:a1:31:dc:30:
8e:b4:4b:7c:9d:d8:e0:d8:d7:b1:67:ec:84:df:8a:83:8f:4e:
39:df:50:d7:d2:0b:0a:1a:46:bc:9e:7b:a0:2c:06:53:9e:79:
3c:2c:f1:6e:2e:e2:7b:1c:2c:93:48:4f:f3:39:80:e0:fa:80:
c4:21:f7:cd:29:a9:15:a9:57:12:73:e7:e6:9c:c4:48:ff:84:
7e:8a:63:f9:2e:30:e8:85:e9:79:0d:90:2b:14:30:bc:62:6b:
4d:28:f4:af:a7:3e:c5:c3:3a:26:d4:0f:a9:67:19:d4:4c:49:
41:36:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:38:52 2026 by rpki-client