Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
File: WDMpShzcE1ivxDnApyczsGWob4s.cer (raw, json)
Hash identifier: qo3VcruGuVopIM74ubuOWkY8luFeLgYoRXgJ8/D+SFU=
Subject key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A182F71C8343D4B9A48C3E9D3B8790FA36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Oct 2026 14:43:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39561
AS: 43146
AS: 49352
AS: 197695
AS: 201972
AS: 206812
IP: 5.63.152.0/21
IP: 31.31.192.0/20
IP: 37.140.192.0/21
IP: 46.183.160.0/24
IP: 46.183.163.0/24
IP: 46.183.165.0/24
IP: 62.113.91.0 -- 62.113.94.255
IP: 62.213.65.0 -- 62.213.68.255
IP: 62.213.87.0/24
IP: 62.213.92.0/24
IP: 62.213.100.0/24
IP: 62.213.106.0/24
IP: 62.213.108.0/24
IP: 62.213.111.0/24
IP: 62.213.114.0/24
IP: 62.213.122.0/24
IP: 62.213.125.0 -- 62.213.126.255
IP: 80.78.240.0/20
IP: 83.166.244.0/22
IP: 89.108.64.0/18
IP: 91.197.96.0/22
IP: 91.229.8.0/22
IP: 92.242.60.0/23
IP: 95.163.220.0 -- 95.163.247.255
IP: 129.101.92.0/22
IP: 130.49.148.0/22
IP: 134.0.112.0/21
IP: 151.248.112.0/20
IP: 161.104.16.0/22
IP: 161.104.28.0/22
IP: 168.222.192.0/22
IP: 176.99.0.0/20
IP: 178.21.8.0/21
IP: 185.10.60.0 -- 185.10.62.255
IP: 185.20.224.0/22
IP: 185.38.16.0/22
IP: 185.46.8.0/22
IP: 185.182.109.0 -- 185.182.111.255
IP: 188.93.208.0/21
IP: 193.227.240.0/23
IP: 194.58.88.0 -- 194.58.127.255
IP: 194.67.64.0 -- 194.67.68.255
IP: 194.67.71.0 -- 194.67.79.255
IP: 194.67.84.0 -- 194.67.94.255
IP: 194.67.96.0/19
IP: 212.24.32.0/23
IP: 212.24.35.0 -- 212.24.36.255
IP: 212.24.38.0/24
IP: 212.24.41.0/24
IP: 212.24.44.0/24
IP: 212.24.47.0 -- 212.24.48.255
IP: 212.24.55.0 -- 212.24.56.255
IP: 212.24.58.0/24
IP: 212.24.60.0/22
IP: 212.158.160.0/21
IP: 212.158.169.0/24
IP: 212.158.172.0/24
IP: 213.189.193.0 -- 213.189.195.255
IP: 213.189.199.0/24
IP: 213.189.201.0 -- 213.189.205.255
IP: 217.23.128.0/24
IP: 217.23.132.0 -- 217.23.138.255
IP: 217.23.140.0/23
IP: 217.23.143.0 -- 217.23.145.255
IP: 217.23.147.0 -- 217.23.148.255
IP: 217.23.150.0/24
IP: 2a00:1b48::/32
IP: 2a00:f940::/32
IP: 2a02:f20::/32
IP: 2a03:4900::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:f7:1c:83:43:d4:b9:a4:8c:3e:9d:3b:87:90:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 14:43:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:17:da:9d:e3:fa:3b:41:8b:e9:ea:7a:7e:
14:cd:18:2a:f4:da:b1:6f:6e:6d:ea:2f:9c:95:ec:
a5:8b:e6:4b:53:d7:af:0f:01:39:c6:3c:c6:a5:97:
fd:5f:fb:6f:aa:d0:f0:25:aa:16:7a:81:28:ae:91:
01:bf:84:4e:12:ee:7d:76:d2:04:01:e7:75:88:f4:
6e:8e:55:d9:91:63:ff:5d:a9:0f:f1:f1:eb:45:bb:
f4:f2:75:80:08:21:c0:46:6b:bd:d2:c0:36:8c:b9:
02:40:37:68:21:05:9c:09:3c:5c:e5:cb:68:31:2d:
22:74:f4:4c:53:0a:35:56:b3:37:dc:2e:08:01:c3:
dc:6f:dc:1c:01:6d:da:f6:4f:3e:44:4d:88:76:74:
a6:44:44:ff:6b:23:c3:e1:15:7d:1f:bb:93:4f:36:
1b:48:d8:0b:22:29:a8:92:45:8d:f3:e4:01:8f:91:
c3:25:1a:52:32:71:bc:3c:e3:28:9c:59:f2:28:05:
54:bf:08:e0:2e:96:d4:fc:2a:3d:f5:4f:36:e6:9c:
6b:c5:f9:fa:0a:7f:5a:b5:4a:6d:1c:27:a5:64:b6:
e6:63:72:dc:93:30:44:bf:cd:63:4d:48:34:29:46:
b3:ce:9f:5a:4a:f6:76:0a:93:16:f6:ba:12:89:92:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.152.0/21
31.31.192.0/20
37.140.192.0/21
46.183.160.0/24
46.183.163.0/24
46.183.165.0/24
62.113.91.0-62.113.94.255
62.213.65.0-62.213.68.255
62.213.87.0/24
62.213.92.0/24
62.213.100.0/24
62.213.106.0/24
62.213.108.0/24
62.213.111.0/24
62.213.114.0/24
62.213.122.0/24
62.213.125.0-62.213.126.255
80.78.240.0/20
83.166.244.0/22
89.108.64.0/18
91.197.96.0/22
91.229.8.0/22
92.242.60.0/23
95.163.220.0-95.163.247.255
129.101.92.0/22
130.49.148.0/22
134.0.112.0/21
151.248.112.0/20
161.104.16.0/22
161.104.28.0/22
168.222.192.0/22
176.99.0.0/20
178.21.8.0/21
185.10.60.0-185.10.62.255
185.20.224.0/22
185.38.16.0/22
185.46.8.0/22
185.182.109.0-185.182.111.255
188.93.208.0/21
193.227.240.0/23
194.58.88.0-194.58.127.255
194.67.64.0-194.67.68.255
194.67.71.0-194.67.79.255
194.67.84.0-194.67.94.255
194.67.96.0/19
212.24.32.0/23
212.24.35.0-212.24.36.255
212.24.38.0/24
212.24.41.0/24
212.24.44.0/24
212.24.47.0-212.24.48.255
212.24.55.0-212.24.56.255
212.24.58.0/24
212.24.60.0/22
212.158.160.0/21
212.158.169.0/24
212.158.172.0/24
213.189.193.0-213.189.195.255
213.189.199.0/24
213.189.201.0-213.189.205.255
217.23.128.0/24
217.23.132.0-217.23.138.255
217.23.140.0/23
217.23.143.0-217.23.145.255
217.23.147.0-217.23.148.255
217.23.150.0/24
IPv6:
2a00:1b48::/32
2a00:f940::/32
2a02:f20::/32
2a03:4900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39561
43146
49352
197695
201972
206812
Signature Algorithm: sha256WithRSAEncryption
5c:8a:6e:dc:85:b0:11:fa:88:c5:e9:3a:90:9a:3d:3f:71:06:
e2:d5:d8:e2:0f:5a:10:68:47:7c:20:f6:bb:6e:bb:e8:37:c7:
0e:02:0d:4d:5e:56:e6:8b:c7:f9:68:2e:85:7c:ae:dd:38:4f:
d7:03:a1:79:83:29:cd:01:a1:9d:ff:21:81:a3:d3:c5:3c:c0:
25:30:87:b8:0d:2b:e5:ed:1b:0e:bd:df:a7:36:14:ce:54:49:
46:18:ee:69:72:56:b7:53:b8:5b:f4:91:3d:a8:f3:bd:35:8a:
3c:88:50:c6:35:cb:2a:49:57:5b:c6:62:7a:35:96:d1:8f:eb:
2d:34:a8:2f:e1:c0:f6:db:79:06:5f:77:a1:68:cf:db:51:8e:
ba:4e:eb:d2:19:ab:05:c2:80:ea:78:a9:06:18:38:1e:66:d5:
aa:a3:e3:84:d1:23:ff:f4:67:9b:73:f8:e8:09:3a:b4:0a:c7:
35:48:3a:7d:63:8b:d5:c5:aa:9e:ff:8f:ef:55:bb:7d:b2:49:
a6:87:f6:04:09:7e:6e:4c:0b:ef:cd:f4:bf:83:62:30:b1:12:
95:5c:43:2a:53:f7:07:95:41:8c:49:78:a2:e3:6e:c2:d3:76:
db:2b:ea:bf:1b:c0:01:9e:47:7c:68:fa:44:7d:e1:5b:00:7f:
bb:00:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:56:45 2026 by rpki-client