Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
File: Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer (raw, json)
Hash identifier: bgbwBI6hoHE1kjX4BSRyMZXXev9A/rdgd/LKIBM6MYc=
Subject key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0F634BFB7ECF0D7B8EA885C00FF32D661
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Oct 2026 06:44:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34800
AS: 44393
AS: 47422
AS: 48795
AS: 56755
AS: 56950
AS: 58057
AS: 60371
AS: 60474
IP: 45.12.68.0/22
IP: 45.12.252.0/24
IP: 45.131.184.0/22
IP: 45.136.136.0/22
IP: 45.148.116.0/22
IP: 77.81.50.0/23
IP: 85.202.203.0/24
IP: 91.206.254.0/24
IP: 93.88.200.0/21
IP: 94.177.122.0/24
IP: 95.128.157.0/24
IP: 95.128.199.0/24
IP: 109.61.104.0/21
IP: 139.28.96.0/22
IP: 146.19.102.0/24
IP: 146.19.139.0/24
IP: 185.0.31.0/24
IP: 185.1.135.0/24
IP: 185.1.154.0/24
IP: 185.1.216.0/24
IP: 185.102.84.0/24
IP: 185.176.134.0/24
IP: 185.209.43.0/24
IP: 185.232.117.0/24
IP: 185.237.93.0/24
IP: 185.238.188.0/22
IP: 185.248.132.0/24
IP: 193.33.94.0/23
IP: 193.58.239.0/24
IP: 193.163.85.0 -- 193.163.86.255
IP: 194.50.92.0/24
IP: 194.50.94.0/24
IP: 194.50.99.0/24
IP: 194.50.111.0/24
IP: 2001:7f8:d9::/48
IP: 2001:7f8:e7::/48
IP: 2001:7f8:119::/48
IP: 2001:7f8:14a::/48
IP: 2a01:e500::/29
IP: 2a04:ccc0::/29
IP: 2a06:de00::/29
IP: 2a09:4c0::/29
IP: 2a0c:3b80::/29
IP: 2a0e:97c0::/29
IP: 2a0e:b100::/29
IP: 2a0f:b9c0::/29
IP: 2a0f:e400::/29
IP: 2a10:2f00::/29
IP: 2a10:cc40::/29
IP: 2a10:ccc0::/29
IP: 2a10:d380::/29
IP: 2a12:87c0::/29
IP: 2a13:1bc0::/29
IP: 2a13:8380::/29
IP: 2a13:aa00::/29
IP: 2a14:3800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:34:bf:b7:ec:f0:d7:b8:ea:88:5c:00:ff:32:d6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 06:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:89:25:2a:60:70:13:16:2c:ea:c2:96:c7:
94:5e:55:2f:e3:15:63:cc:a0:ee:e2:83:ac:95:7d:
53:e2:b9:8e:06:04:57:f6:34:9b:a7:44:33:3c:80:
ad:da:8f:6a:fd:c2:9f:28:69:2c:fd:26:19:50:2e:
16:a0:5e:df:2d:d6:79:da:e6:7f:30:d9:b5:74:fd:
ff:46:37:3c:7c:d4:c8:f1:29:1e:b4:f5:7c:25:ed:
9a:74:ba:18:b3:39:ad:4d:55:8d:bd:46:24:13:71:
6e:2c:81:0d:0e:46:b1:9a:89:6d:a1:e6:41:98:a6:
20:e8:4f:33:ca:db:c7:77:d1:62:96:d1:38:83:70:
fe:27:d6:c8:0f:37:fd:a4:9b:ef:86:ca:f0:f6:bb:
45:fd:31:86:d7:02:df:2f:72:d5:8f:a4:af:de:19:
bd:7b:47:d7:81:98:9e:0e:55:ec:75:e9:13:b4:84:
fc:b1:dc:24:31:4d:62:23:36:17:49:86:fa:4d:79:
e6:a9:e7:16:80:e6:54:8f:f0:21:b5:36:78:96:06:
42:af:38:53:c4:03:a6:c4:17:43:26:43:39:c5:8a:
78:89:31:04:96:5e:6a:52:fe:33:1f:83:b4:cd:30:
87:d5:22:1b:4e:3c:21:12:ba:a8:1a:e0:ff:bf:c0:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/22
45.12.252.0/24
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
91.206.254.0/24
93.88.200.0/21
94.177.122.0/24
95.128.157.0/24
95.128.199.0/24
109.61.104.0/21
139.28.96.0/22
146.19.102.0/24
146.19.139.0/24
185.0.31.0/24
185.1.135.0/24
185.1.154.0/24
185.1.216.0/24
185.102.84.0/24
185.176.134.0/24
185.209.43.0/24
185.232.117.0/24
185.237.93.0/24
185.238.188.0/22
185.248.132.0/24
193.33.94.0/23
193.58.239.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
194.50.99.0/24
194.50.111.0/24
IPv6:
2001:7f8:d9::/48
2001:7f8:e7::/48
2001:7f8:119::/48
2001:7f8:14a::/48
2a01:e500::/29
2a04:ccc0::/29
2a06:de00::/29
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0::/29
2a0e:b100::/29
2a0f:b9c0::/29
2a0f:e400::/29
2a10:2f00::/29
2a10:cc40::/29
2a10:ccc0::/29
2a10:d380::/29
2a12:87c0::/29
2a13:1bc0::/29
2a13:8380::/29
2a13:aa00::/29
2a14:3800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34800
44393
47422
48795
56755
56950
58057
60371
60474
Signature Algorithm: sha256WithRSAEncryption
af:96:6f:fc:36:d3:9a:e2:b5:f8:67:aa:e8:46:f7:f4:2b:a9:
78:5a:ce:b7:cd:8d:52:e8:84:1c:d2:ba:5b:ec:88:4a:f0:f2:
5d:08:aa:85:73:e9:be:57:72:57:55:e8:65:3b:dd:14:8c:15:
67:a6:c8:67:88:32:17:e0:52:14:d4:93:d1:dd:60:29:17:e8:
40:ba:0a:36:f2:3a:27:23:52:62:f5:1a:c0:cf:12:41:78:b8:
45:93:b1:7f:23:4f:8a:ff:77:19:f1:6f:70:f7:a1:24:94:e4:
a6:6b:cc:c1:4b:31:a4:de:d1:c3:fa:d0:c7:1f:3c:1b:49:ff:
dc:52:2b:63:2b:c6:94:de:f4:6b:db:9b:3c:b4:f0:a3:16:bb:
70:0d:f5:3a:1e:4c:aa:a4:8c:66:4a:5f:06:de:57:f5:65:8c:
cd:fb:91:ff:9e:1b:f5:97:2e:07:77:25:cd:99:1f:02:82:b7:
7b:d2:08:27:4f:eb:3e:a9:3a:f6:bb:6f:c9:43:82:f7:c5:5a:
da:a1:e1:97:fa:b3:b5:d9:7d:c7:7d:6c:0d:bc:2e:81:1c:65:
77:1d:85:55:28:61:6a:fa:c0:e6:79:8b:31:c6:20:05:12:fb:
0f:23:d8:ce:67:f1:6c:e9:d6:39:d9:1e:42:c7:3b:99:88:d7:
8c:70:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:05:08 2026 by rpki-client