Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
File: ge7UCROD2e1AVtn07_fSYi3c4gU.cer (raw, json)
Hash identifier: 3eKt/ZoqcGHF+J1OAtPrt2vg6/dHDKHtWUEzpk83tAk=
Subject key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA796E2AFA56DC8AB1352559B64658384
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Jul 2026 07:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 3265
AS: 8737
AS: 12871
AS: 39309
AS: 49562
IP: 5.199.144.0/20
IP: 37.188.64.0/20
IP: 37.251.0.0/17
IP: 46.227.232.0/21
IP: 62.131.0.0/16
IP: 62.216.0.0/19
IP: 62.251.0.0/17
IP: 77.160.0.0/12
IP: 80.60.0.0/15
IP: 80.100.0.0/15
IP: 81.204.0.0/14
IP: 82.92.0.0/14
IP: 82.136.192.0/18
IP: 82.139.64.0/18
IP: 82.161.0.0/16
IP: 82.168.0.0 -- 82.170.255.255
IP: 83.68.0.0/19
IP: 84.39.0.0/19
IP: 84.80.0.0/16
IP: 84.82.0.0 -- 84.87.255.255
IP: 85.113.224.0/19
IP: 86.80.0.0 -- 86.90.255.255
IP: 86.92.0.0/14
IP: 88.159.0.0/16
IP: 94.229.48.0/20
IP: 109.72.32.0/20
IP: 128.127.32.0/20
IP: 141.105.0.0/20
IP: 185.2.172.0/22
IP: 185.94.208.0/22
IP: 185.117.108.0/22
IP: 188.142.0.0/17
IP: 194.109.0.0/16
IP: 195.64.64.0/19
IP: 195.121.0.0/16
IP: 195.240.0.0/15
IP: 212.123.128.0/18
IP: 212.182.128.0/18
IP: 212.238.0.0/16
IP: 213.10.0.0/16
IP: 213.75.0.0/16
IP: 213.84.0.0/16
IP: 213.148.224.0/19
IP: 213.197.0.0/18
IP: 213.222.0.0/19
IP: 217.26.96.0/20
IP: 2001:67c:24f0::/48
IP: 2001:67c:2500::/45
IP: 2a02:a400::/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:96:e2:af:a5:6d:c8:ab:13:52:55:9b:64:65:83:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 28 07:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:da:b5:2f:ae:87:95:ad:58:c6:d9:00:95:
f9:4a:f8:52:c3:d6:2c:73:0a:05:b8:08:1f:b6:84:
a3:f8:2c:40:26:f5:5e:f9:8c:5c:09:a9:68:15:de:
02:82:de:ed:e5:bc:e6:0a:87:a8:8a:40:8c:e7:2b:
bf:66:c2:7e:91:66:67:f1:11:0c:8a:3a:e1:a6:3f:
23:c8:ed:50:d3:50:64:88:19:43:43:f9:cb:9a:ff:
04:d1:3a:73:5d:84:c9:94:25:3d:73:11:41:a4:88:
1d:05:bf:b9:18:cc:70:89:e2:a9:21:17:d6:ee:3d:
7c:42:3b:66:31:73:86:ae:32:c6:62:d0:0b:be:df:
91:f0:bd:90:5d:2a:2c:c4:41:be:8e:ad:78:93:41:
8c:f2:67:d1:cf:88:e4:85:80:fd:6e:6c:1f:02:a4:
18:59:f8:72:83:d8:66:69:59:69:5f:55:13:25:b4:
65:2c:bf:ab:6d:41:d3:96:f7:c0:6c:fe:56:cd:9e:
42:97:9f:36:16:fd:84:a0:ce:e0:04:6e:f2:57:2d:
f8:96:5a:eb:ac:9e:d9:5b:d1:ee:d3:3c:fc:ce:c2:
bc:cb:2a:79:cc:1c:e7:d9:c7:b5:37:68:45:50:6f:
93:64:c5:c4:f4:de:2d:19:6b:c5:26:d0:12:de:0e:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.144.0/20
37.188.64.0/20
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.139.64.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
94.229.48.0/20
109.72.32.0/20
128.127.32.0/20
141.105.0.0/20
185.2.172.0/22
185.94.208.0/22
185.117.108.0/22
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
217.26.96.0/20
IPv6:
2001:67c:24f0::/48
2001:67c:2500::/45
2a02:a400::/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3265
8737
12871
39309
49562
Signature Algorithm: sha256WithRSAEncryption
9c:57:26:e0:d2:62:08:09:86:bf:08:ba:9b:7e:ab:59:36:62:
21:59:09:21:87:c1:c8:2b:43:b0:f6:c8:81:9c:32:82:72:ef:
02:7f:dd:ae:02:91:d0:1a:d5:32:db:46:07:8c:77:65:ce:39:
c6:78:23:70:ab:a9:94:df:d4:10:93:8d:e5:92:7d:e3:d1:b2:
5e:f6:01:57:87:f6:23:64:3c:60:76:26:5a:ca:9b:af:e2:81:
76:db:a7:7e:06:c8:14:de:21:3d:55:e3:51:35:7f:b4:44:43:
57:c0:15:29:b9:f7:4a:45:be:de:95:52:fd:ec:e6:cd:9b:80:
eb:b2:94:3e:14:a8:64:2c:37:9f:e9:bf:03:50:d6:25:af:dc:
fb:c9:b7:31:f0:ff:e0:ad:21:42:91:2b:4d:fe:99:f4:6e:39:
40:31:c4:36:62:95:75:bd:80:c3:97:f8:1d:44:8b:d3:32:65:
ce:4f:03:e0:3e:0c:f2:0d:cc:dd:9c:2d:aa:0c:85:3a:32:0d:
9f:4d:6a:82:c3:44:90:a8:db:42:89:7a:77:af:10:bd:17:c2:
44:38:31:43:5a:07:f5:ca:32:1c:94:3a:be:1d:de:8c:3a:20:
56:0e:c2:1e:78:c0:db:1d:1a:bb:79:a1:37:73:e3:00:4a:d7:
44:e3:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:39:44 2026 by rpki-client