Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
File: XhaJMumSpccwToD1-CkHmJrYwNc.cer (raw, json)
Hash identifier: lSXBk+p+T8qDrzUBONuG8K+Ni58pRU4GCTn4fyl5Ezk=
Subject key identifier: 5E:16:89:32:E9:92:A5:C7:30:4E:80:F5:F8:29:07:98:9A:D8:C0:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A55764AE0EFBD229B5EA6D126FB4127E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 13:52:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218836
IP: 157.173.71.0/24
IP: 2001:678:1308::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:57:64:ae:0e:fb:d2:29:b5:ea:6d:12:6f:b4:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 13:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e168932e992a5c7304e80f5f82907989ad8c0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:49:16:31:e4:cf:62:88:1e:07:fb:3f:d9:
63:54:18:c8:61:cf:64:17:c6:bc:40:25:f3:a8:8a:
a9:3d:18:52:b9:7b:5c:03:0f:3f:65:6a:00:d7:62:
e8:6e:1f:6c:90:3a:42:84:03:d0:29:0b:5b:97:6e:
10:1f:25:8d:2d:a8:70:77:93:45:db:c2:49:22:ff:
11:c5:09:3e:c7:b1:4b:58:98:83:94:c4:7b:d1:32:
da:96:c9:93:1c:23:f6:03:86:59:b1:2c:8d:cc:dc:
17:c2:0f:a0:51:cb:4c:8d:d3:6d:14:ed:cd:89:b6:
91:b9:a5:bf:5e:c3:df:c0:08:aa:b8:b3:71:fb:c5:
c2:80:71:63:ff:56:f7:3a:fc:ed:71:62:02:08:5f:
0d:32:b9:6b:23:8b:56:4c:f2:98:74:20:cc:a3:49:
bd:ad:87:e3:22:b2:94:8e:29:81:81:76:fc:a0:e5:
6c:9d:f1:9a:50:f2:5d:b9:c6:9b:92:00:df:0b:16:
44:7e:9c:ae:47:c8:65:aa:54:a0:a1:21:ba:c5:71:
37:44:be:d9:6f:b3:de:26:a4:6d:7a:d5:0b:1a:a4:
5e:d2:cc:5c:6d:48:a7:d9:0a:cf:74:86:ef:c9:4d:
f0:5a:50:8b:8c:26:58:23:26:96:13:2a:3a:06:85:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:89:32:E9:92:A5:C7:30:4E:80:F5:F8:29:07:98:9A:D8:C0:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.71.0/24
IPv6:
2001:678:1308::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218836
Signature Algorithm: sha256WithRSAEncryption
35:c3:37:90:3e:17:37:c9:4a:01:45:56:26:ee:9d:1d:a7:05:
81:1a:e9:f4:00:e6:33:c8:4b:46:6a:9e:99:e6:e5:6d:f7:df:
16:57:ba:d3:cb:80:03:f0:30:01:ac:25:4b:ed:c8:34:f2:1f:
98:07:8a:24:52:ec:58:e9:40:1f:59:63:ff:51:7d:f7:b1:e7:
d7:9b:14:5d:8e:15:c2:ab:ac:45:dc:5d:c1:ae:d8:c5:9b:26:
d9:ab:88:48:91:6d:48:6e:fe:0a:89:27:d0:f1:71:56:27:d1:
e2:79:ac:4e:92:32:88:2c:43:a4:77:d2:87:9a:8c:6c:a9:3e:
7d:d5:74:77:f7:f7:4a:be:14:27:48:15:f0:2d:34:56:85:31:
2a:68:07:04:fe:48:c3:cc:d3:ee:e3:0c:77:a6:0b:81:cc:42:
f3:87:fd:96:48:a4:7e:62:2c:32:04:95:7c:57:a3:00:8e:c1:
8e:97:03:a3:9f:13:1a:8f:46:9f:d3:02:93:55:a6:13:1b:b4:
13:9a:7d:ea:75:93:60:4d:ad:2c:80:29:14:16:8e:22:fa:73:
5a:37:38:ec:c4:90:f9:28:c0:06:01:2b:cc:73:c5:f5:1f:c4:
4f:7b:c4:de:4f:1b:b3:ab:20:16:8e:cc:a8:8a:50:15:2d:44:
ca:fb:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:55 2026 by rpki-client