Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
File: tBuxzdW4a-d4BoidLhsgKswnsiU.cer (raw, json)
Hash identifier: TsqXqWGj/lpsOphQsRC82WmjazEX88AQdhFC+91xfFQ=
Subject key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11183008405D7B45E1F9B34E7F41934D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Oct 2026 13:59:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8219
IP: 2.59.76.0/22
IP: 31.217.253.0/24
IP: 45.11.4.0/22
IP: 45.66.168.0/22
IP: 45.140.80.0/22
IP: 45.149.40.0/22
IP: 62.106.76.0/24
IP: 77.87.124.0/24
IP: 80.71.154.0/24
IP: 89.251.160.0/20
IP: 91.132.216.0/22
IP: 91.198.175.0/24
IP: 91.198.254.0/24
IP: 91.206.212.0/23
IP: 91.207.98.0/23
IP: 91.213.117.0/24
IP: 91.234.98.0/24
IP: 95.81.88.0/22
IP: 146.19.115.0/24
IP: 155.212.248.0/22
IP: 176.101.188.0/22
IP: 185.95.66.0/24
IP: 185.151.128.0/22
IP: 185.173.112.0/22
IP: 185.185.180.0/22
IP: 185.205.236.0/22
IP: 185.212.112.0/24
IP: 185.229.184.0/22
IP: 185.232.47.0/24
IP: 185.237.248.0/22
IP: 185.239.116.0 -- 185.239.123.255
IP: 185.239.128.0/21
IP: 185.252.60.0/22
IP: 188.95.71.0/24
IP: 193.3.40.0/24
IP: 193.34.128.0/23
IP: 193.47.240.0/22
IP: 193.135.13.0/24
IP: 193.141.53.0/24
IP: 193.168.188.0/22
IP: 193.176.154.0 -- 193.176.157.255
IP: 193.219.117.0/24
IP: 193.228.132.0/22
IP: 193.228.226.0/24
IP: 193.228.235.0/24
IP: 193.242.99.0/24
IP: 193.242.105.0/24
IP: 194.127.112.0/22
IP: 195.18.26.0/24
IP: 195.191.246.0/23
IP: 195.225.96.0/24
IP: 212.18.96.0/24
IP: 2a11:f000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:83:00:84:05:d7:b4:5e:1f:9b:34:e7:f4:19:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 6 13:59:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:19:c0:11:20:c5:d2:87:39:88:5f:ab:13:
d0:70:e0:08:e8:70:20:fd:84:b9:95:5a:f8:de:b8:
b2:ad:6e:b9:b2:31:fe:75:04:70:06:50:8d:8d:57:
5f:ac:c8:e6:f3:33:84:db:16:06:e1:9b:89:f1:3a:
0e:3e:d2:6f:b1:b4:9c:c0:23:dc:a1:8b:4c:6c:6d:
52:87:1a:e2:c4:95:9a:a7:31:6b:23:fa:90:f3:36:
1a:63:d9:96:a2:49:ee:63:e0:c7:6f:82:2b:f7:c5:
19:d7:bd:11:d7:db:6b:17:4f:1b:2e:b2:ee:04:6e:
07:bf:35:5a:02:a0:62:a9:d3:3c:2f:b4:2f:7f:ef:
c1:a7:b4:d8:28:1c:cf:28:64:7d:d7:ef:e7:99:40:
c2:2a:6f:3c:60:cc:6f:fc:bc:35:9e:84:e8:f8:23:
57:c8:d2:b2:6c:89:a4:a9:bf:3a:70:7b:b9:0d:87:
5d:26:fd:bf:d5:b0:e8:50:c6:0f:c9:30:4c:dd:ed:
ca:11:76:a3:69:c7:6b:8f:5e:fd:8c:0a:f5:4e:d8:
72:f8:21:5f:0e:55:53:2c:ca:8a:b6:74:70:8c:35:
f0:9e:cf:08:82:95:a4:18:01:34:99:b9:2a:c2:6a:
fd:4c:6d:4f:27:85:ef:cf:6c:8b:cb:bb:c6:7c:d1:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.76.0/22
31.217.253.0/24
45.11.4.0/22
45.66.168.0/22
45.140.80.0/22
45.149.40.0/22
62.106.76.0/24
77.87.124.0/24
80.71.154.0/24
89.251.160.0/20
91.132.216.0/22
91.198.175.0/24
91.198.254.0/24
91.206.212.0/23
91.207.98.0/23
91.213.117.0/24
91.234.98.0/24
95.81.88.0/22
146.19.115.0/24
155.212.248.0/22
176.101.188.0/22
185.95.66.0/24
185.151.128.0/22
185.173.112.0/22
185.185.180.0/22
185.205.236.0/22
185.212.112.0/24
185.229.184.0/22
185.232.47.0/24
185.237.248.0/22
185.239.116.0-185.239.123.255
185.239.128.0/21
185.252.60.0/22
188.95.71.0/24
193.3.40.0/24
193.34.128.0/23
193.47.240.0/22
193.135.13.0/24
193.141.53.0/24
193.168.188.0/22
193.176.154.0-193.176.157.255
193.219.117.0/24
193.228.132.0/22
193.228.226.0/24
193.228.235.0/24
193.242.99.0/24
193.242.105.0/24
194.127.112.0/22
195.18.26.0/24
195.191.246.0/23
195.225.96.0/24
212.18.96.0/24
IPv6:
2a11:f000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8219
Signature Algorithm: sha256WithRSAEncryption
31:9b:79:f2:22:d6:82:37:31:e0:74:84:ed:73:82:3b:77:c2:
2f:c8:8e:a9:e2:d9:4d:68:bc:a2:89:08:12:6f:5b:70:8e:de:
99:a7:ca:fb:c3:60:6b:33:dc:75:83:09:88:f8:81:12:92:9b:
44:48:98:52:99:1b:cb:f9:61:ff:c7:14:23:dc:e1:dd:f4:13:
9b:bb:34:7f:82:44:7d:f1:76:b2:71:f6:5b:97:ed:8a:65:e7:
42:74:9b:7e:6f:32:2d:e9:7a:81:81:1d:76:a1:01:b1:92:84:
e6:9a:4d:49:23:3a:0a:8d:17:c0:b7:df:d3:62:29:af:74:02:
1e:67:67:ae:7a:83:39:38:92:9f:e1:0a:29:5b:5b:b0:65:51:
49:a5:f5:86:3b:7f:28:ce:77:86:53:27:2d:09:76:b3:99:e3:
ef:f5:f8:75:20:81:0b:ac:d7:bd:4a:fb:3c:ba:76:63:c2:e6:
74:49:c6:90:dc:dd:c4:29:14:3d:35:f7:b7:55:25:1e:52:ba:
83:56:99:10:06:25:51:4c:53:9f:30:11:4e:5f:77:bc:8f:c1:
4e:b3:1d:3e:24:92:4b:17:8a:ba:bc:03:5a:c9:44:e5:bc:84:
4d:02:d7:8d:5d:18:3b:a1:52:94:99:9c:52:34:2c:d4:48:c2:
46:6c:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:13 2026 by rpki-client