Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
File: nSpHi7CwjmYbCy-fvok1vJwqKKE.cer (raw, json)
Hash identifier: mCyoIDRBZhM6c0WImhAu7lhPH6t2jidhd2tmNn11t+s=
Subject key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FDBC31F08BB3B6DE0CD6317524397B2D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 07 Aug 2026 10:27:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 2601
AS: 43109
AS: 43481
AS: 44519
AS: 62206
IP: 2.56.108.0/22
IP: 5.181.84.0/22
IP: 45.9.28.0/22
IP: 45.13.188.0/22
IP: 45.81.112.0/22
IP: 45.88.136.0/22
IP: 45.94.168.0/22
IP: 45.132.180.0/22
IP: 45.138.180.0/22
IP: 45.144.212.0/22
IP: 45.151.0.0/22
IP: 77.83.36.0/22
IP: 85.209.120.0/22
IP: 91.223.110.0/24
IP: 146.19.125.0/24
IP: 185.43.248.0/22
IP: 185.200.60.0/22
IP: 193.28.177.0/24
IP: 193.30.240.0/22
IP: 193.57.40.0/22
IP: 194.15.52.0/22
IP: 194.242.96.0/22
IP: 195.62.24.0/23
IP: 195.177.92.0/22
IP: 195.211.188.0/22
IP: 2a01:7120::/32
IP: 2a07:9200::/29
IP: 2a09:340::/29
IP: 2a09:c440::/29
IP: 2a0c:5d40::/29
IP: 2a0c:a580::/29
IP: 2a10:dfc0::/29
IP: 2a10:fac0::/29
IP: 2a11:580::/29
IP: 2a11:1600::/29
IP: 2a11:2a80::/29
IP: 2a11:3900::/29
IP: 2a11:d680::/29
IP: 2a12:9f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 14:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:c3:1f:08:bb:3b:6d:e0:cd:63:17:52:43:97:b2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 7 10:27:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:07:17:17:2e:6a:e7:87:9b:63:12:07:18:
eb:b8:6d:4a:61:6c:67:e3:54:5c:9d:e3:65:0f:a4:
0c:57:dd:fa:22:6c:1d:38:47:0d:0d:8a:95:17:ef:
45:df:0f:ac:05:bb:af:4e:97:76:0d:fe:cc:ea:64:
fe:14:2c:57:f0:89:c5:d1:05:09:e4:18:ef:0d:5e:
4c:09:f8:75:32:a6:18:cc:51:25:c3:67:1a:3e:6e:
da:fe:a0:9e:71:97:14:a9:d4:38:f7:5e:6f:6a:fe:
c6:d5:af:e4:0e:4f:f0:79:ad:9f:88:e2:06:61:40:
ce:a1:4b:61:28:7a:6e:92:3f:e2:44:c2:53:aa:2b:
b4:dc:1a:4b:19:56:8e:7f:78:8f:b2:a3:00:a7:c9:
d6:92:3a:3d:b7:d5:e3:a6:5c:6e:61:71:fe:60:1e:
98:3a:da:e1:32:24:ad:59:46:b1:4c:7a:c1:8f:14:
c4:80:fe:3c:cb:78:bf:fa:e3:fc:c2:f4:0f:5c:9a:
b8:61:f5:19:ef:c0:ce:78:13:be:36:6b:56:a6:a5:
b9:67:32:dd:ea:05:ff:55:f2:b0:d5:4b:20:0a:4c:
60:b9:36:06:b4:5e:f1:ee:18:00:7a:39:62:44:5e:
98:6b:c5:09:41:cd:53:70:a4:54:7a:3a:6d:cc:2d:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.84.0/22
45.9.28.0/22
45.13.188.0/22
45.81.112.0/22
45.88.136.0/22
45.94.168.0/22
45.132.180.0/22
45.138.180.0/22
45.144.212.0/22
45.151.0.0/22
77.83.36.0/22
85.209.120.0/22
91.223.110.0/24
146.19.125.0/24
185.43.248.0/22
185.200.60.0/22
193.28.177.0/24
193.30.240.0/22
193.57.40.0/22
194.15.52.0/22
194.242.96.0/22
195.62.24.0/23
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a09:340::/29
2a09:c440::/29
2a0c:5d40::/29
2a0c:a580::/29
2a10:dfc0::/29
2a10:fac0::/29
2a11:580::/29
2a11:1600::/29
2a11:2a80::/29
2a11:3900::/29
2a11:d680::/29
2a12:9f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2601
43109
43481
44519
62206
Signature Algorithm: sha256WithRSAEncryption
05:72:38:b1:81:e7:92:d4:74:b2:e0:6e:e0:26:cc:84:c9:b5:
c6:3e:90:00:4d:d3:c6:26:2c:3c:d7:65:93:00:bd:9c:9e:e8:
0e:9b:d6:48:e1:47:2f:b8:70:75:f9:e2:06:4a:38:98:51:5b:
ae:c7:5e:41:c9:0d:25:35:a2:c9:0c:74:9e:73:ff:d8:90:46:
08:77:2a:39:05:d3:ea:76:c4:4b:ae:37:a5:df:f1:29:c7:19:
1a:69:0f:d5:bf:d9:77:82:a6:5d:a0:5a:d4:af:89:99:b2:38:
a4:54:32:e3:72:99:e8:62:a6:17:57:06:f9:15:9d:cd:94:8a:
e1:f6:e5:0d:64:1a:a2:3a:5e:e5:71:b5:0d:8c:fb:01:c2:71:
cc:40:6c:6a:5d:78:f6:37:0a:f5:0a:8c:b3:19:ce:c4:e1:bf:
b9:30:e8:0b:de:a3:30:f2:35:de:a4:e4:89:37:ec:78:54:56:
54:c8:17:74:b3:e5:4e:83:c3:21:f6:70:8e:fe:3a:c5:f5:3c:
9f:46:f3:36:45:b2:21:a6:b4:96:91:a7:7a:d6:2f:58:66:aa:
7d:03:a2:64:db:bc:78:ea:38:fd:e3:0a:b4:fc:37:57:c9:bf:
f1:ce:36:5c:bb:4e:1e:a6:4b:91:6b:29:96:83:36:f3:a8:d2:
65:a4:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 21:03:17 2026 by rpki-client