Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.cer (raw, json)
Hash identifier: TtUCgXKkCpzIrv/1OBTmtjPWxPJN49LSwe7Wgeu1uhI=
Subject key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A35D5B75A2FE1F7C4702808405F0EF336
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Oct 2025 15:56:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8732
AS: 9068
AS: 15582
AS: 44096
AS: 51011
IP: 31.13.32.0/19
IP: 46.39.32.0/19
IP: 62.117.64.0/18
IP: 77.108.64.0/18
IP: 77.220.128.0/19
IP: 77.232.0.0/19
IP: 79.99.16.0/21
IP: 80.92.96.0/20
IP: 80.240.208.0/20
IP: 81.88.112.0/20
IP: 82.138.0.0/18
IP: 83.167.96.0/19
IP: 87.245.128.0/18
IP: 89.19.160.0/19
IP: 89.31.88.0/21
IP: 91.103.200.0/21
IP: 92.243.160.0/19
IP: 94.79.0.0/18
IP: 178.208.128.0/19
IP: 178.217.24.0/21
IP: 185.49.64.0/22
IP: 185.110.168.0/22
IP: 188.123.224.0/19
IP: 212.45.0.0/19
IP: 212.100.128.0/19
IP: 213.79.64.0/18
IP: 213.171.32.0/19
IP: 217.10.32.0/20
IP: 2a02:d0::/32
IP: 2a02:290::/32
IP: 2a02:7800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:d5:b7:5a:2f:e1:f7:c4:70:28:08:40:5f:0e:f3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 15:56:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:e9:5e:9a:a1:46:aa:e6:7f:1c:1b:69:45:
5e:b2:4b:bd:a0:3f:aa:ac:1f:15:3f:d2:e1:fd:2f:
9c:0b:83:dc:72:d9:1f:93:ea:7b:3b:31:2d:20:a6:
6d:b2:b3:b6:98:8b:21:5d:80:61:9f:26:23:72:9d:
22:95:7b:0b:1b:a2:de:62:f9:6d:41:12:8c:6d:80:
39:46:f4:6a:3e:e7:64:10:77:61:44:66:69:c2:cc:
7b:7a:35:31:9d:8a:2c:f6:32:5a:21:f2:05:ad:cb:
47:e8:9c:1f:97:4d:eb:ee:99:c5:b7:a9:17:74:ca:
95:e1:c9:31:9d:92:33:58:70:e0:33:d8:b9:3b:53:
9e:97:9c:36:a2:8e:85:cd:59:03:bd:f8:6c:b6:41:
5c:d5:d3:23:17:26:2e:6e:31:9a:87:46:98:d3:cc:
90:01:ae:15:f7:0b:65:92:b7:80:4f:49:ce:82:c0:
92:f6:14:2a:c5:8f:2c:a0:02:52:68:cf:07:ad:96:
e0:72:64:42:09:d7:a9:86:b6:f2:bd:ed:7d:cd:df:
ea:a1:92:de:74:cf:2f:54:f0:e1:0d:1a:31:79:fa:
e0:7b:63:2b:f4:0b:c5:b0:af:5c:ec:20:1f:fb:80:
e7:5d:2b:d9:bd:18:65:c2:ad:7c:f6:73:5d:7b:a0:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.32.0/19
46.39.32.0/19
62.117.64.0/18
77.108.64.0/18
77.220.128.0/19
77.232.0.0/19
79.99.16.0/21
80.92.96.0/20
80.240.208.0/20
81.88.112.0/20
82.138.0.0/18
83.167.96.0/19
87.245.128.0/18
89.19.160.0/19
89.31.88.0/21
91.103.200.0/21
92.243.160.0/19
94.79.0.0/18
178.208.128.0/19
178.217.24.0/21
185.49.64.0/22
185.110.168.0/22
188.123.224.0/19
212.45.0.0/19
212.100.128.0/19
213.79.64.0/18
213.171.32.0/19
217.10.32.0/20
IPv6:
2a02:d0::/32
2a02:290::/32
2a02:7800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8732
9068
15582
44096
51011
Signature Algorithm: sha256WithRSAEncryption
4a:7f:fa:0c:6e:aa:86:82:e0:8f:05:c7:d9:16:cf:c1:ca:85:
9c:98:0a:1a:9b:b9:28:ce:bc:1e:20:53:51:f3:f9:3b:33:78:
ed:0f:a3:d4:3c:0c:97:a6:85:ad:24:ee:05:cd:b9:79:d9:49:
68:f8:f8:f9:a3:b2:63:69:1c:2e:a5:e9:3a:99:23:b6:bd:a9:
01:36:34:43:a3:84:e8:e9:dc:17:46:d9:86:7b:1a:d9:12:7e:
51:4c:79:46:b0:fd:29:74:4b:07:c5:7e:2e:d3:f0:ba:ee:e8:
6b:79:43:db:d5:ca:6e:18:ca:9a:d4:05:72:ce:5f:56:d2:ba:
e8:d7:64:27:a1:31:73:60:e6:2a:55:d5:06:2a:7e:27:69:4f:
f4:73:db:a9:51:d6:b0:9b:b0:1e:c7:6e:e4:e5:d4:ad:c6:17:
67:9a:a6:3e:a5:48:21:8d:41:4b:17:a1:1b:6f:90:ee:77:1b:
0a:a6:39:d8:6a:00:25:c4:45:30:5c:6b:9c:c8:ec:8c:c6:7c:
76:04:93:53:66:84:bb:60:8d:20:f9:78:f9:e5:09:01:ca:a3:
8d:2a:ce:d3:4f:6c:93:23:60:42:71:e6:11:05:a2:f0:1f:27:
a3:db:48:ae:3c:b1:29:10:b9:13:db:9e:40:eb:e4:1b:18:9c:
a0:f2:a6:48
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgISAZo11bdaL+H3xHAoCEBfDvM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDMwMTU1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzhmZDYzMWVmMmVjNzM3OTQzN2ZkN2M3NmY4ZTI0NWZmMDgyNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bnpXpqhRqrmfxwbaUVesku9oD+q
rB8VP9Lh/S+cC4Pcctkfk+p7OzEtIKZtsrO2mIshXYBhnyYjcp0ilXsLG6LeYvlt
QRKMbYA5RvRqPudkEHdhRGZpwsx7ejUxnYos9jJaIfIFrctH6Jwfl03r7pnFt6kX
dMqV4ckxnZIzWHDgM9i5O1Oel5w2oo6FzVkDvfhstkFc1dMjFyYubjGah0aY08yQ
Aa4V9wtlkreAT0nOgsCS9hQqxY8soAJSaM8HrZbgcmRCCdephrbyve19zd/qoZLe
dM8vVPDhDRoxefrge2Mr9AvFsK9c7CAf+4DnXSvZvRhlwq189nNde6AUQQIDAQAB
o4IDdTCCA3EwHQYDVR0OBBYEFIeP1jHvLsc3lDf9fHb44kX/CCS7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2FhM2Rj
Yi1kYTY0LTQ5YzgtOThlZC1iYTZjYjQyNTJmZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvYWEzZGNi
LWRhNjQtNDljOC05OGVkLWJhNmNiNDI1MmZkNy8xL2g0X1dNZTh1eHplVU5fMThk
dmppUmY4SUpMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHiBggrBgEF
BQcBBwEB/wSB0jCBzzCBrwQCAAEwgagDBAUfDSADBAUuJyADBAY+dUADBAZNbEAD
BAVN3IADBAVN6AADBANPYxADBARQXGADBARQ8NADBARRWHADBAZSigADBAVTp2AD
BAZX9YADBAVZE6ADBANZH1gDBANbZ8gDBAVc86ADBAZeTwADBAWy0IADBAOy2RgD
BAK5MUADBAK5bqgDBAW8e+ADBAXULQADBAXUZIADBAbVT0ADBAXVqyADBATZCiAw
GwQCAAIwFQMFACoCANADBQAqAgKQAwUAKgJ4ADArBggrBgEFBQcBCAEB/wQcMBqg
GDAWAgIiHAICI2wCAjzeAgMArEACAwDHQzANBgkqhkiG9w0BAQsFAAOCAQEASn/6
DG6qhoLgjwXH2RbPwcqFnJgKGpu5KM68HiBTUfP5OzN47Q+j1DwMl6aFrSTuBc25
edlJaPj4+aOyY2kcLqXpOpkjtr2pATY0Q6OE6OncF0bZhnsa2RJ+UUx5RrD9KXRL
B8V+LtPwuu7oa3lD29XKbhjKmtQFcs5fVtK66NdkJ6Exc2DmKlXVBip+J2lP9HPb
qVHWsJuwHsdu5OXUrcYXZ5qmPqVIIY1BSxehG2+Q7ncbCqY52GoAJcRFMFxrnMjs
jMZ8dgSTU2aEu2CNIPl4+eUJAcqjjSrO009skyNgQnHmEQWi8B8no9tIrjyxKRC5
E9ueQOvkGxicoPKmSA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:38 2025 by rpki-client