Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
File: 1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer (raw, json)
Hash identifier: GZgi4cQ9IfyCzsE9HpWvzMX54sH3GnM9Qw00RoBFw2s=
Subject key identifier: D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F82DE5D0534EF882217DCF609F4126369
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 04:10:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219388
IP: 153.56.136.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:de:5d:05:34:ef:88:22:17:dc:f6:09:f4:12:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 04:10:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:8b:aa:83:fe:03:1d:5a:3c:34:05:14:e6:
96:ce:ad:ac:7c:6b:94:bf:74:5e:ae:8c:95:71:ff:
14:73:d1:ac:ba:fd:fe:b7:5e:1a:71:86:21:fc:db:
13:5e:5e:99:87:ad:1e:a0:ef:7b:80:32:12:2b:5f:
c1:e9:b8:36:84:90:c8:a2:4a:6e:9f:43:4f:f9:d1:
95:1b:c5:64:12:3f:ae:0a:39:80:84:95:e1:fc:b5:
44:e4:12:cf:62:1a:60:8e:da:f9:cd:0f:dd:3c:a0:
dc:94:ea:48:f3:56:b1:84:c6:57:33:53:33:45:10:
63:5d:e8:15:99:89:9b:c3:25:09:28:34:6d:0a:f0:
50:e0:72:28:2c:23:b1:74:86:12:c3:75:31:fe:3f:
e3:7f:c5:d1:f7:59:2c:91:c0:4d:71:2b:d8:a5:cc:
09:51:53:b2:d6:da:23:99:9b:a4:f9:c9:f2:4f:3d:
9e:2e:e2:3c:76:25:f1:aa:12:4c:b5:7c:02:02:4f:
7f:a2:ae:18:ca:3c:fa:01:38:6f:a0:22:9b:9f:3e:
a7:f2:a6:f8:61:91:d7:72:a6:38:eb:ac:be:60:15:
b9:e9:c0:8f:18:8d:9f:ac:93:4b:6f:db:06:50:85:
bb:2e:56:43:2a:21:79:0a:0e:a4:96:b1:cb:2f:ab:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.136.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219388
Signature Algorithm: sha256WithRSAEncryption
77:56:56:8d:e6:ac:4a:9c:24:ae:2d:5c:6a:e8:3e:0e:3a:36:
5b:89:0d:81:75:aa:a1:b0:aa:6f:45:59:02:e7:33:3a:4e:49:
0f:d7:9a:e6:13:8b:db:b4:be:84:0f:8e:42:2a:72:bf:8f:f2:
30:56:d6:f9:85:fc:74:88:84:6d:bd:33:93:fb:52:d9:9d:2d:
ff:50:4d:ce:89:6b:3b:fc:28:ed:2c:42:d3:72:a4:23:d6:b9:
49:eb:1b:ff:50:0e:2c:a0:39:4e:7d:60:5b:8f:73:d1:8c:e3:
85:3b:bf:b3:bd:16:45:d5:dd:fe:0e:43:3e:d8:4c:88:15:a1:
d6:df:07:b0:95:8f:f9:64:6c:47:60:f9:00:81:4e:ad:75:31:
07:db:75:f0:61:fd:7e:95:3d:62:93:a7:ca:1e:93:76:80:52:
5e:09:5f:7d:ee:86:02:ba:78:f4:2d:1a:c5:5f:5b:da:94:1f:
5d:f1:95:5e:c8:6e:f2:67:49:9e:3f:e2:87:ad:56:a2:28:d2:
a4:fa:f6:c5:78:20:08:3f:18:7c:ec:49:56:5c:a1:e7:65:71:
89:fd:e6:d4:d3:aa:9c:35:21:de:a9:ec:ef:45:a0:86:25:34:
82:f4:ad:b4:a8:fc:ab:16:5e:c2:55:a6:38:89:f7:03:19:45:
d4:48:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:21 2026 by rpki-client