Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
File: vluKKxBtM0sMbGHhd6pi9E_g47Y.cer (raw, json)
Hash identifier: 08x5+NTR09WbS2Ya5Fki7gDEGimeEzluwnu+zunJw0Y=
Subject key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F90E328CC22C906C9B8E64BC5B9186
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8851
AS: 31270
AS: 34940
AS: 39179
AS: 41393
AS: 43198
AS: 60648
AS: 61341
AS: 196875
AS: 199291
IP: 37.98.144.0/21
IP: 37.252.24.0/21
IP: 77.93.128.0/19
IP: 77.107.64.0/18
IP: 79.99.72.0/21
IP: 79.99.144.0/21
IP: 80.240.80.0/20
IP: 81.5.128.0/18
IP: 81.168.0.0/17
IP: 82.152.0.0/15
IP: 82.163.0.0/19
IP: 85.159.128.0/21
IP: 89.28.232.0/21
IP: 89.31.232.0/21
IP: 89.213.0.0/21
IP: 89.213.40.0 -- 89.213.255.255
IP: 95.130.96.0/21
IP: 109.176.0.0/16
IP: 158.255.8.0/21
IP: 185.20.32.0/22
IP: 185.24.84.0/24
IP: 185.24.86.0/23
IP: 185.49.124.0/22
IP: 185.101.44.0/22
IP: 193.27.212.0/23
IP: 193.189.140.0/24
IP: 194.105.64.0/19
IP: 195.128.138.0/24
IP: 212.38.64.0/19
IP: 213.130.128.0/19
IP: 213.152.32.0/19
IP: 213.210.0.0/18
IP: 213.218.208.0 -- 213.218.255.255
IP: 217.144.144.0/20
IP: 217.145.64.0/20
IP: 2001:1a90::/32
IP: 2a00:c60::/32
IP: 2a00:1c40::/29
IP: 2a02:21f8::/32
IP: 2a02:6f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:0e:32:8c:c2:2c:90:6c:9b:8e:64:bc:5b:91:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:36:c2:c3:03:c9:0e:4b:64:99:df:65:ee:
28:52:19:a9:5f:36:45:3d:71:8b:fb:6c:da:69:8d:
06:37:6e:fb:03:9e:17:eb:9f:ba:04:60:18:5a:04:
2b:d7:b8:54:17:a4:9d:53:e4:dc:99:dd:38:46:27:
55:84:b2:f9:e4:5a:a9:e2:bd:bc:45:88:d5:92:cf:
3b:f7:5f:18:24:74:3c:fe:41:59:88:48:63:5b:0c:
91:da:96:a0:83:c7:a5:48:cc:96:e8:7e:6c:92:e3:
5c:7a:49:e9:c1:77:dc:5d:88:ca:f0:c5:34:b3:33:
67:2d:45:e0:d3:d9:22:0e:db:02:97:6f:29:20:53:
bd:98:d9:6b:00:ba:06:46:12:e4:29:84:a5:89:d6:
76:6a:13:3d:a8:a0:e5:97:26:74:0d:27:30:c2:48:
f7:09:bf:49:57:98:64:14:f0:e7:54:5a:69:aa:ed:
13:e1:70:21:76:2f:21:b7:7a:d3:ce:2c:7f:f9:a0:
c9:77:0a:7c:a4:b7:09:d6:ea:5c:39:ed:a8:28:1f:
9d:cb:f5:29:94:dd:db:d3:e5:3c:8c:b1:58:ef:00:
78:5f:c6:d6:fa:9c:e8:7c:cf:54:35:45:93:0c:c6:
e1:20:25:73:1c:f6:92:c7:65:6e:ff:8b:a1:09:ce:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
185.49.124.0/22
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a02:21f8::/32
2a02:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8851
31270
34940
39179
41393
43198
60648
61341
196875
199291
Signature Algorithm: sha256WithRSAEncryption
1c:09:8d:63:f4:6a:e8:f7:fb:bf:b0:cf:50:25:9b:c3:f4:6f:
b1:75:86:13:24:16:64:69:80:84:ae:ae:a6:45:27:eb:52:26:
f5:3f:8f:08:ff:cb:37:27:d4:bc:93:d0:22:48:2b:45:29:78:
fd:e6:ec:1f:b6:9d:03:7a:1e:29:d4:73:ef:f2:9a:92:f6:30:
4e:ce:40:16:39:86:46:3f:35:e7:1e:d9:75:25:b7:53:ed:22:
b2:af:28:1f:a9:b9:6b:df:b0:39:b5:56:f4:a0:d9:a4:d1:88:
e0:8f:8b:3e:51:2f:a6:28:19:a5:96:8e:83:3b:fa:df:c1:aa:
dd:78:94:d4:8b:9c:ab:97:92:13:0d:a0:da:44:9c:98:35:2a:
27:d1:aa:7a:64:6c:4c:0c:9c:79:bc:62:61:22:80:4d:dc:09:
d0:2b:a1:c8:63:39:b2:9d:38:3c:0f:68:73:79:dd:8c:86:9e:
74:fd:d4:a3:2b:6f:26:6f:10:cd:32:8a:f1:17:8a:f1:ae:32:
59:b0:d6:77:97:de:ba:e0:73:c2:3b:81:e3:35:85:7a:86:e6:
71:9f:a4:b7:db:eb:2c:52:a8:64:cb:66:d9:d5:47:00:fc:13:
d1:05:7f:ac:fb:97:16:6b:fd:2d:e8:03:52:7a:7e:90:43:3e:
ce:b3:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:33:19 2026 by rpki-client