Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.cer (raw, json)
Hash identifier: NcOy3Jxc6pmHDunEagc94ZMbEndljuMIQBLXePrrTIM=
Subject key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1595754D64BEA6F3F25D72871E837E7FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Oct 2026 12:44:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31169
IP: 37.18.48.0/21
IP: 45.134.208.0/22
IP: 45.144.76.0/22
IP: 79.170.80.0/21
IP: 84.247.63.0/24
IP: 89.34.22.0/23
IP: 89.45.165.0/24
IP: 91.126.0.0/20
IP: 92.114.96.0/23
IP: 185.28.128.0/22
IP: 193.247.181.0/24
IP: 193.247.183.0/24
IP: 193.247.192.0/24
IP: 193.247.202.0/24
IP: 194.104.97.0 -- 194.104.98.255
IP: 194.104.112.0/24
IP: 194.104.126.0/24
IP: 195.10.236.0/22
IP: 195.88.32.0/23
IP: 217.17.208.0/20
IP: 2a04:2740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:57:54:d6:4b:ea:6f:3f:25:d7:28:71:e8:37:e7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 20 12:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:66:ee:1f:ca:5f:1a:ae:6b:48:b7:1a:85:
e9:a0:7e:f2:c3:2d:b3:1a:9d:60:51:6a:b9:77:38:
42:d5:95:f1:31:c7:96:0a:ba:e4:7f:81:ae:b3:6f:
c0:50:6f:4b:3c:ee:70:26:6f:36:d5:1d:aa:9d:ba:
23:96:42:44:1b:b4:18:c9:2e:9e:90:40:99:58:a5:
42:f9:31:a6:d1:53:09:54:9d:9f:26:b7:3f:e2:da:
48:b8:ca:f5:05:fb:26:23:24:ed:b6:a5:83:8e:e2:
36:26:76:10:26:af:8e:3d:bb:78:b9:74:ed:80:12:
62:eb:df:2f:87:17:8c:e5:68:cc:bf:13:2d:6f:62:
f9:d3:7a:6f:c9:9b:d6:10:5e:82:c2:3f:70:aa:0a:
0b:60:db:82:5d:b7:61:a5:36:5b:e0:f5:55:f6:ee:
48:dd:9a:8f:05:f7:71:08:bb:5c:13:d1:fc:77:a8:
cf:d3:c6:24:1f:73:fb:90:7b:80:3b:4f:5c:56:fa:
43:c4:c5:58:8c:17:f3:a3:fb:4b:cc:62:a6:bd:1f:
0c:46:9b:e0:65:97:04:21:c6:12:0b:fa:19:6d:9d:
f2:ea:32:a2:07:d6:a7:75:12:bf:26:10:0f:56:8f:
3a:d2:90:06:b3:f3:24:48:ed:a9:50:fb:74:61:f9:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.48.0/21
45.134.208.0/22
45.144.76.0/22
79.170.80.0/21
84.247.63.0/24
89.34.22.0/23
89.45.165.0/24
91.126.0.0/20
92.114.96.0/23
185.28.128.0/22
193.247.181.0/24
193.247.183.0/24
193.247.192.0/24
193.247.202.0/24
194.104.97.0-194.104.98.255
194.104.112.0/24
194.104.126.0/24
195.10.236.0/22
195.88.32.0/23
217.17.208.0/20
IPv6:
2a04:2740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31169
Signature Algorithm: sha256WithRSAEncryption
4c:84:3d:25:f3:73:ec:18:b8:f2:9c:7d:dd:f7:14:26:49:ec:
6e:5e:16:39:13:69:69:99:38:6d:75:00:6f:c2:b8:31:1e:9b:
43:8c:cb:ec:f8:1d:17:e5:4d:ff:0a:c2:b4:9b:bc:6a:04:5e:
2b:33:b9:5b:25:d4:8e:ee:e9:d0:9e:67:c6:a1:e0:bc:b4:21:
f6:9e:eb:47:72:95:a2:5f:c5:7e:7e:ef:db:80:d1:82:94:fb:
ec:eb:78:30:a8:4f:18:9e:ad:4a:2f:31:06:4e:61:89:5f:b9:
90:09:fc:8d:f3:d6:a9:3d:81:a7:a0:8c:b3:56:3e:7a:97:bc:
fc:f1:cf:79:a8:5d:ef:d3:2e:be:ac:7f:50:39:42:5d:f7:da:
d8:2f:e2:f7:1c:1e:72:c0:fa:09:ef:16:eb:ff:82:f8:1d:a6:
ab:1f:d3:52:21:55:2e:ca:2a:7f:ef:e2:2e:ed:c1:1e:ec:74:
46:b8:8d:37:61:a3:8b:4a:a5:66:e8:e0:6f:a8:41:4d:e3:33:
76:be:96:1b:04:92:82:cc:2d:1c:b4:09:f4:83:b7:fa:e4:35:
ef:c2:c0:c5:6f:77:11:a1:d4:d6:18:10:a0:ce:39:a3:01:ab:
d3:93:12:9b:cb:70:00:33:d0:a9:d0:de:5c:3c:c7:19:83:a1:
d1:83:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:36:27 2026 by rpki-client