Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
File: wesHbRZwLH2-qXLily71dqHyyHM.cer (raw, json)
Hash identifier: ZRlOAauDH0QPjAaYI3IGqrmcIItk18NlSi897W10Ikg=
Subject key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D4305B67493A8842AAE4E98806C599012
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Mar 2026 08:32:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 16140
AS: 61236
AS: 197133
IP: 91.197.136.0/22
IP: 91.238.72.0/23
IP: 178.248.208.0/21
IP: 178.251.248.0/21
IP: 185.14.104.0/22
IP: 185.32.100.0/22
IP: 185.114.128.0/22
IP: 193.202.121.0/24
IP: 194.69.194.0/23
IP: 194.143.132.0/23
IP: 217.114.200.0/21
IP: 2a02:1740::/32
IP: 2a03:acc0::/32
IP: 2a03:d280::/32
IP: 2a06:6e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:05:b6:74:93:a8:84:2a:ae:4e:98:80:6c:59:90:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 08:32:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:a6:6d:eb:21:dc:ba:dd:da:3c:ad:ac:ab:
14:0e:e4:61:9c:da:94:93:e3:58:3f:03:1e:78:c2:
be:20:a0:96:54:16:97:68:00:8b:57:dd:cf:47:e3:
1e:d3:ce:8e:70:73:b7:63:d6:b6:88:fd:3f:f4:54:
5f:47:eb:76:ea:4b:3c:f6:a0:c2:02:f1:7b:da:5b:
00:e6:dc:0f:0f:c3:38:10:c3:01:df:bc:13:56:f8:
8d:be:f0:9a:72:4c:71:81:b0:5d:52:68:4d:c9:f2:
57:9a:97:e0:22:1e:43:06:21:6b:c7:cc:86:6a:63:
4d:a5:cb:b8:7b:c4:13:6c:34:ed:be:c1:87:7d:46:
e0:65:7c:2d:1f:81:3b:91:28:bb:ad:3e:22:98:f9:
23:e0:ce:74:de:0b:0f:d7:83:d2:5f:ad:8f:23:41:
90:95:99:14:ad:0e:5d:c5:6a:b4:58:c4:0d:93:14:
a3:47:ed:9e:73:51:0d:58:60:f5:96:81:0b:33:42:
2b:83:6f:b4:15:ea:8c:06:34:ed:f5:b0:d6:4e:59:
78:c9:98:0a:fd:b6:55:2b:84:15:2a:db:d7:5c:fd:
ee:80:48:2e:e1:bf:ec:b1:73:8c:c6:83:5e:b6:a8:
02:f0:21:ed:ed:8a:d7:46:a4:e7:e7:ee:bf:fe:cf:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.136.0/22
91.238.72.0/23
178.248.208.0/21
178.251.248.0/21
185.14.104.0/22
185.32.100.0/22
185.114.128.0/22
193.202.121.0/24
194.69.194.0/23
194.143.132.0/23
217.114.200.0/21
IPv6:
2a02:1740::/32
2a03:acc0::/32
2a03:d280::/32
2a06:6e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16140
61236
197133
Signature Algorithm: sha256WithRSAEncryption
9d:08:b2:9d:c4:06:a7:1a:5b:6f:26:82:2e:7f:05:0e:09:d4:
83:ca:8b:3d:34:e0:dc:ea:c9:eb:56:81:67:30:fc:5c:01:c2:
1e:4b:02:20:2c:b2:db:66:3f:ce:a2:67:9a:2b:66:f1:d6:ec:
97:b6:37:94:26:60:88:96:a2:cf:39:69:c9:21:56:0b:5e:a6:
0f:e6:6b:65:4b:59:9d:2d:d5:05:45:fc:0d:69:d3:22:cd:12:
d4:d2:11:ac:5c:54:8d:a8:d3:74:e4:00:f3:63:57:e2:48:53:
cb:b8:3d:5a:91:9c:d2:cd:9e:c4:2c:e9:10:e3:e8:e3:72:1e:
5e:b8:ed:08:42:f8:e4:68:b3:e4:9d:64:51:33:b1:af:62:e2:
ec:a8:bb:c4:7f:3a:98:0c:de:38:b6:51:59:29:76:78:a6:58:
a2:b1:13:09:73:81:2a:7b:99:6d:24:97:06:be:96:8a:8d:7f:
2d:ea:ca:d2:0c:d7:0d:d3:44:e3:cc:66:22:4e:f2:de:56:f7:
22:c2:ed:9b:a0:d5:65:0f:d1:d1:8d:30:31:39:6c:81:81:16:
ce:aa:a1:8d:95:34:a3:e5:ed:5c:d0:64:4d:54:0c:e5:9d:6e:
cd:81:5a:79:8a:28:aa:da:7b:79:36:0d:3f:88:4b:e9:e5:ff:
36:e3:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:52:57 2026 by rpki-client