Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
File: KM0SOrdJNbPklTilzaDMnSuurxU.cer (raw, json)
Hash identifier: jFAZ23r1M8bvRtmqGxP4SEG8MChxDN6Igm/zoh37DGY=
Subject key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9CF3E73AC32FC5AE2A40883568AC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.105.246.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:cf:3e:73:ac:32:fc:5a:e2:a4:08:83:56:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:27:53:e5:0b:ea:74:47:bb:50:ea:b0:ce:
63:c0:ab:57:09:8a:8b:fd:e6:f4:04:51:b6:4f:77:
42:83:f8:69:27:29:13:50:e0:a1:c5:04:6b:a1:2c:
9f:20:a1:2c:05:c7:5b:d3:53:b3:be:dd:ad:9f:3d:
10:6d:74:cd:1d:aa:d7:33:62:8e:e8:6e:97:03:4c:
a7:6c:33:f2:10:43:14:02:49:14:42:e4:60:9b:97:
b3:fd:36:a1:49:c1:4f:37:be:a7:d6:af:2e:e5:85:
ef:27:10:9e:ca:12:bb:23:37:f4:00:92:bc:86:5d:
4f:c0:19:1f:a8:8b:94:97:10:80:5b:62:cc:fd:66:
43:5b:29:8d:85:66:79:73:56:fa:9e:e9:64:d9:75:
71:c7:d9:d6:90:47:9b:c6:93:97:87:6b:c1:b3:15:
43:87:13:09:9a:6a:a7:12:a8:e6:9a:34:c3:54:4a:
4a:d2:52:d0:4b:19:ce:b0:75:be:73:37:d9:1e:52:
5b:50:41:e1:1f:1b:f6:b0:43:4e:27:92:14:cf:e9:
7b:44:ad:7d:b1:fb:45:d0:85:a5:93:b4:1b:05:a5:
cf:bb:02:59:d4:d5:25:ef:39:3b:f5:90:f3:7c:fd:
b8:f4:57:9a:ec:80:5e:5e:08:fe:23:7d:e0:0b:e4:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b1:21:9b:de:1c:51:ed:20:9a:d0:3f:ce:a1:82:be:ea:fa:
93:b3:ca:81:7f:ce:c5:84:9d:21:d1:78:9f:2f:7a:48:28:3e:
fa:8b:23:8e:0f:51:e3:f5:db:09:23:b0:40:a0:fe:e8:67:a1:
73:79:30:3f:73:25:6a:8b:2e:8a:dd:92:f8:32:99:63:e4:a2:
79:43:03:c9:51:74:19:eb:54:e7:f5:0a:7b:df:cd:04:1f:8b:
ab:20:39:43:22:4e:91:56:84:05:ef:b2:4f:f6:6d:40:c4:57:
a7:aa:b1:56:f7:fa:f4:ea:d3:23:a3:06:1b:4a:3b:fa:2e:b7:
93:66:93:d4:c3:dc:67:28:a0:e7:b9:cd:4f:e4:ab:54:3b:b4:
3a:c3:a0:6b:c1:87:2b:9a:4e:d7:12:26:10:d3:02:e8:98:a0:
ae:7f:01:11:72:1a:91:93:db:27:6f:12:5a:1b:b5:94:2e:a4:
07:2a:b8:cb:ce:e1:f9:21:6f:2d:3b:c7:b5:5b:c4:b4:b9:98:
17:4b:ea:8a:10:de:60:b1:20:31:8c:57:cd:00:d0:c1:91:17:
d2:df:ae:ab:42:9f:f5:0a:05:f0:e7:7d:1f:34:87:01:79:9a:
51:e9:44:f8:48:d1:1a:ca:b3:8b:ef:93:f7:b2:bb:55:80:ad:
e0:6b:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:50 2026 by rpki-client