Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer (raw, json)
Hash identifier: 7RFi7f7Ghh3fCyms1CfXJeLAnbZQ8RqLxIOWRzj/61w=
Subject key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0AE760528EB61EE3576665FA9D7850F21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Sep 2026 08:22:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210694
IP: 45.8.24.0 -- 45.8.26.255
IP: 45.11.52.0/22
IP: 45.11.176.0/22
IP: 45.13.108.0/22
IP: 45.14.216.0/22
IP: 45.15.196.0/22
IP: 45.82.4.0/22
IP: 45.83.240.0/22
IP: 45.85.188.0/24
IP: 45.85.190.0/23
IP: 45.88.84.0/22
IP: 45.88.184.0/22
IP: 45.91.116.0/22
IP: 45.93.149.0 -- 45.93.151.255
IP: 45.132.120.0/22
IP: 45.133.140.0/22
IP: 45.153.200.0/22
IP: 80.46.128.0/19
IP: 91.212.20.0/24
IP: 91.212.27.0/24
IP: 91.212.38.0/24
IP: 91.212.45.0/24
IP: 145.63.208.0 -- 145.63.255.255
IP: 193.39.215.0/24
IP: 193.39.246.0/24
IP: 195.80.230.0/23
IP: 195.82.132.0/23
IP: 2a0e:4200::/29
IP: 2a10:2380::/29
IP: 2a10:3e40::/29
IP: 2a10:5e80::/29
IP: 2a10:5f80::/29
IP: 2a10:6080::/29
IP: 2a10:6380::/29
IP: 2a10:6480::/29
IP: 2a10:6580::/29
IP: 2a10:6680::/29
IP: 2a10:6780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:76:05:28:eb:61:ee:35:76:66:5f:a9:d7:85:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 08:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:4b:50:1f:4f:7b:cb:fc:57:20:80:1c:1f:
3e:42:07:f8:50:23:c4:89:62:2d:44:d4:b2:d7:af:
55:7f:9d:e1:0f:a3:8f:cd:ff:d5:31:2f:85:4d:5b:
b3:f4:1c:73:50:25:4f:12:7a:d8:a3:bf:d5:2f:b0:
9c:70:ee:5b:b8:fa:7a:04:31:d4:9c:2a:65:b9:3d:
05:3a:57:9a:b0:9b:16:b7:70:cc:91:81:aa:b1:10:
21:f5:a7:20:23:38:43:0b:38:e1:3b:f1:09:71:d4:
86:1a:b3:c8:d7:65:ef:e1:8d:11:0a:b3:1c:0a:6e:
a5:94:23:b4:dc:c6:23:48:01:f2:be:27:8f:0b:c3:
10:1f:c8:3a:b8:3a:da:4a:a0:01:93:7b:66:eb:02:
f2:b6:00:0a:97:7f:b7:96:c9:e9:c7:2b:3b:47:c3:
0c:e9:35:b7:e8:6b:51:d2:8e:01:27:60:e3:59:c4:
50:0f:8f:08:cf:7f:78:e7:90:25:61:35:ae:17:74:
38:30:bc:7d:73:9a:7f:50:70:da:cf:fb:93:74:fd:
2c:d5:bf:2c:8a:7d:e5:0b:db:ee:f8:ad:5d:10:20:
6f:2a:d1:d4:35:57:a6:5a:04:8b:f3:2b:12:ad:51:
cc:bc:10:f6:a7:2c:9f:6f:54:13:cb:e3:6d:08:d2:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.24.0-45.8.26.255
45.11.52.0/22
45.11.176.0/22
45.13.108.0/22
45.14.216.0/22
45.15.196.0/22
45.82.4.0/22
45.83.240.0/22
45.85.188.0/24
45.85.190.0/23
45.88.84.0/22
45.88.184.0/22
45.91.116.0/22
45.93.149.0-45.93.151.255
45.132.120.0/22
45.133.140.0/22
45.153.200.0/22
80.46.128.0/19
91.212.20.0/24
91.212.27.0/24
91.212.38.0/24
91.212.45.0/24
145.63.208.0-145.63.255.255
193.39.215.0/24
193.39.246.0/24
195.80.230.0/23
195.82.132.0/23
IPv6:
2a0e:4200::/29
2a10:2380::/29
2a10:3e40::/29
2a10:5e80::/29
2a10:5f80::/29
2a10:6080::/29
2a10:6380::/29
2a10:6480::/29
2a10:6580::/29
2a10:6680::/29
2a10:6780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210694
Signature Algorithm: sha256WithRSAEncryption
29:33:86:52:5e:f5:25:76:16:bb:01:f7:c4:4a:88:01:28:b5:
31:54:bc:31:9a:1c:68:a5:c2:6b:30:37:d6:2b:a2:a2:10:19:
6b:38:ed:5a:9c:15:0f:73:18:5e:27:37:04:c6:ea:e3:43:b6:
8f:d9:4f:34:b9:97:d3:e7:42:a5:33:53:d0:f0:de:ca:68:cb:
a1:f4:ba:af:52:f4:0e:78:54:1b:11:7d:db:b3:d7:f0:66:95:
6c:a2:c0:03:96:69:a7:0c:b4:20:0c:c4:a1:cc:7c:e4:82:47:
f1:2b:d5:ed:28:b1:10:1e:51:18:3c:86:54:2e:f5:d4:3f:62:
48:2c:92:5b:e2:4a:12:5a:17:f9:d2:03:b5:9e:41:c4:ec:0e:
e0:ab:a3:a7:f0:42:6d:74:83:9a:a1:4a:d9:37:ce:8a:1b:bc:
d5:cf:5a:4a:d0:a1:15:48:37:b5:d8:ba:36:53:58:17:71:2e:
d3:8d:c5:15:3f:de:e3:77:77:0f:6a:79:cd:89:82:97:a7:b2:
7a:60:f1:54:51:b7:9c:d8:44:92:33:d4:ff:d1:c9:a6:90:b5:
07:bf:3e:5c:41:2a:0e:20:01:1b:cf:52:d5:28:27:6a:67:54:
0f:f6:31:dd:9c:0e:6a:74:e0:7c:cb:9a:23:2b:0c:d5:27:68:
84:0d:36:5a
-----BEGIN CERTIFICATE-----
MIIGpDCCBYygAwIBAgISAaCudgUo62HuNXZmX6nXhQ8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE3MDgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTFjMTE2NThkMjA0MWVhZjI1MDJmZTU0MDhlZDQ5M2JiZDRmMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFdLUB9Pe8v8VyCAHB8+Qgf4UCPE
iWItRNSy169Vf53hD6OPzf/VMS+FTVuz9BxzUCVPEnrYo7/VL7CccO5buPp6BDHU
nCpluT0FOleasJsWt3DMkYGqsRAh9acgIzhDCzjhO/EJcdSGGrPI12Xv4Y0RCrMc
Cm6llCO03MYjSAHyviePC8MQH8g6uDraSqABk3tm6wLytgAKl3+3lsnpxys7R8MM
6TW36GtR0o4BJ2DjWcRQD48Iz39455AlYTWuF3Q4MLx9c5p/UHDaz/uTdP0s1b8s
in3lC9vu+K1dECBvKtHUNVemWgSL8ysSrVHMvBD2pyyfb1QTy+NtCNIUZQIDAQAB
o4IDsDCCA6wwHQYDVR0OBBYEFI4cEWWNIEHq8lAv5UCO1JO71PMYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzcwYmY4
Yi1kOGM0LTQwYzMtOTAyMi02MzM0OGNkYmYwMjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNzBiZjhi
LWQ4YzQtNDBjMy05MDIyLTYzMzQ4Y2RiZjAyNC8xL2pod1JaWTBnUWVyeVVDX2xR
STdVazd2VTh4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBLQYIKwYB
BQUHAQcBAf8EggEcMIIBGDCBwAQCAAEwgbkwDAMEAy0IGAMEAC0IGgMEAi0LNAME
Ai0LsAMEAi0NbAMEAi0O2AMEAi0PxAMEAi1SBAMEAi1T8AMEAC1VvAMEAS1VvgME
Ai1YVAMEAi1YuAMEAi1bdDAMAwQALV2VAwQDLV2QAwQCLYR4AwQCLYWMAwQCLZnI
AwQFUC6AAwQAW9QUAwQAW9QbAwQAW9QmAwQAW9QtMAsDBASRP9ADAwaRAAMEAMEn
1wMEAMEn9gMEAcNQ5gMEAcNShDBTBAIAAjBNAwUDKg5CAAMFAyoQI4ADBQMqED5A
AwUDKhBegAMFAyoQX4ADBQMqEGCAAwUDKhBjgAMFAyoQZIADBQMqEGWAAwUDKhBm
gAMFAyoQZ4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzcGMA0GCSqGSIb3DQEB
CwUAA4IBAQApM4ZSXvUldha7AffESogBKLUxVLwxmhxopcJrMDfWK6KiEBlrOO1a
nBUPcxheJzcExurjQ7aP2U80uZfT50KlM1PQ8N7KaMuh9LqvUvQOeFQbEX3bs9fw
ZpVsosADlmmnDLQgDMShzHzkgkfxK9XtKLEQHlEYPIZULvXUP2JILJJb4koSWhf5
0gO1nkHE7A7gq6On8EJtdIOaoUrZN86KG7zVz1pK0KEVSDe12Lo2U1gXcS7TjcUV
P97jd3cPannNiYKXp7J6YPFUUbec2ESSM9T/0cmmkLUHvz5cQSoOIAEbz1LVKCdq
Z1QP9jHdnA5qdOB8y5ojKwzVJ2iEDTZa
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:57 2026 by rpki-client