Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
File: pgD8lkBCiaxYthBH3fhiGH9asn4.cer (raw, json)
Hash identifier: hEMPPhuck5tvXGK50Fzg1nZnJPdvEezFB2yraYug+6M=
Subject key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E91EDF2DCEAC9BC8570902F1496659D27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Jun 2026 09:19:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198024
IP: 31.172.152.0/21
IP: 37.44.48.0/21
IP: 37.72.109.0/24
IP: 185.59.116.0/22
IP: 185.127.60.0/22
IP: 185.127.84.0/22
IP: 185.227.44.0/22
IP: 2a03:7b80::/32
IP: 2a06:c780::/29
IP: 2a06:c840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:ed:f2:dc:ea:c9:bc:85:70:90:2f:14:96:65:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 09:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:b5:ad:6b:79:63:7b:bd:b2:10:4f:f4:4a:
0d:d7:1d:d8:af:4b:fa:fe:9e:c5:66:e9:a4:8f:48:
49:88:41:1f:a4:f0:1d:93:0a:a1:d5:7b:9f:54:cf:
5b:10:1c:9a:0f:f4:b2:22:f9:a9:6d:bc:cc:de:a8:
8c:78:6f:b3:04:ad:f3:06:b7:20:f0:e5:4d:6b:66:
30:eb:78:1f:94:85:10:63:a4:7d:e8:fc:96:76:42:
8b:7b:c7:69:bc:bd:0f:0f:f3:9d:00:3a:c1:0f:0c:
2c:48:69:a1:d0:77:b6:b5:99:82:5f:12:96:8e:b7:
c8:01:74:d4:ab:b3:39:b9:19:ee:d5:fb:fe:e3:10:
ef:fb:00:7b:52:6d:ff:9b:cc:04:09:11:04:db:38:
fc:4e:ef:fc:4c:63:62:99:fc:a3:83:60:21:88:e4:
6b:f8:fb:24:b7:0e:17:39:e4:e8:f4:6a:25:05:5b:
29:10:37:47:d0:4d:d2:04:bb:1e:98:fd:36:a9:27:
56:77:a2:55:a1:ce:63:3c:d2:81:7e:d0:f9:33:57:
7f:9c:9e:cb:4f:43:fe:c0:5f:9f:05:08:7c:60:61:
43:ba:60:3c:91:4d:72:09:87:c4:4c:58:38:f2:22:
4b:54:a4:3a:e4:42:61:f3:de:13:b8:4c:c7:1b:63:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.152.0/21
37.44.48.0/21
37.72.109.0/24
185.59.116.0/22
185.127.60.0/22
185.127.84.0/22
185.227.44.0/22
IPv6:
2a03:7b80::/32
2a06:c780::/29
2a06:c840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198024
Signature Algorithm: sha256WithRSAEncryption
a4:32:ad:83:bd:a1:a3:92:e8:fd:92:e3:2a:c1:46:79:79:5a:
21:8b:2c:f5:46:51:04:54:2e:30:e1:59:30:52:b3:76:eb:96:
43:67:3e:3b:91:84:8f:03:fa:42:4b:fc:67:62:91:5f:a2:80:
8c:b9:1e:42:3f:21:f6:29:f4:b6:65:cd:36:cb:2b:f5:59:fa:
72:1d:a7:dc:6d:b2:07:7d:14:16:d8:b8:dc:74:d9:d4:32:f8:
bd:06:08:27:c2:fc:b1:e5:15:ed:04:6b:55:41:82:50:d5:bc:
cf:37:b6:c0:85:73:f7:34:8c:2b:d3:f9:7f:97:0b:20:c2:dd:
70:19:20:f3:e9:e0:fb:a5:21:1d:7b:61:7c:fd:f6:98:dd:d3:
1e:65:6a:c7:ff:93:dd:5f:47:fb:6d:3e:0e:f7:60:00:61:5d:
16:03:d7:54:56:e4:bc:4b:cb:cf:e9:6c:83:86:90:eb:0d:8b:
25:a7:f4:65:f3:34:83:ef:e5:09:82:7f:b4:31:37:98:83:f2:
a7:b2:01:8c:0e:15:e4:b0:4c:3e:35:8a:fb:d9:ba:68:72:20:
1b:d0:c2:5c:96:e8:0c:d2:a9:fc:60:bc:95:b2:2e:85:93:89:
0f:c4:6e:ae:02:df:45:6f:70:78:a8:5f:fa:86:62:92:e4:fb:
7e:80:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:43:36 2026 by rpki-client