Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.cer (raw, json)
Hash identifier: 6ZXKAnSJPru1W9nSReG+1I4RFp6DTWMNYZLlzT7FMls=
Subject key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC2CB1CCC84F7C4A069E8C6A6DC1F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57651
IP: 193.247.238.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:2c:b1:cc:c8:4f:7c:4a:06:9e:8c:6a:6d:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:6f:52:eb:76:b2:0b:53:3c:09:cd:4b:bd:
d1:a6:31:a4:e2:e0:4c:c0:c5:06:42:f3:3c:bf:74:
1f:d2:00:35:64:07:24:8c:6e:1a:2b:9b:32:1a:9e:
85:8a:c6:9b:57:74:80:b8:47:80:b2:27:32:68:45:
9d:cf:28:5d:a0:f5:56:33:94:63:ba:59:95:a9:24:
c2:f0:e2:90:64:a0:0b:e0:ea:7a:8f:37:1b:08:b9:
5d:3b:1a:d4:f8:d6:2b:fa:4b:21:46:61:bd:ca:4e:
58:7f:e0:f7:15:ba:58:7f:d8:32:6a:a6:68:23:64:
dd:8c:98:57:65:ce:70:48:aa:2d:2f:20:50:7d:f6:
fe:52:63:e7:a6:33:cf:8d:ed:7a:23:30:20:28:38:
f7:2b:cd:6a:d8:ec:19:6e:31:82:f4:d6:59:86:4e:
99:78:7e:00:0a:0b:25:7a:54:cf:2b:1f:e8:b8:b4:
d3:31:7d:29:96:ca:27:74:57:06:af:86:78:73:e0:
03:27:20:df:0a:64:76:36:c9:30:ea:d1:c7:7e:cf:
96:5c:bb:21:ef:54:b0:6b:7f:4c:a8:70:b1:5a:85:
6d:f8:76:6c:03:3c:96:fb:80:0c:88:dd:3c:61:45:
c1:4c:1c:01:94:50:02:ca:15:93:d4:ae:1b:6c:73:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.238.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57651
Signature Algorithm: sha256WithRSAEncryption
6f:8a:d9:19:53:a6:12:90:7e:c4:35:36:85:30:a5:f0:53:3d:
ae:14:ff:b3:fe:0a:17:ca:5a:e6:f4:1e:23:36:be:bb:7a:cb:
b9:b6:84:5e:d0:cf:7a:24:b9:8a:87:93:1d:f8:33:9a:a6:16:
29:4a:06:ee:15:54:ce:af:b4:99:82:2c:eb:37:43:e6:18:29:
4b:b5:a7:80:ed:77:de:20:06:ec:13:30:2c:64:da:b7:6a:05:
17:7f:64:59:c0:47:58:09:92:80:47:76:ec:68:a1:14:e2:59:
b7:57:32:61:5d:0a:76:9e:76:ad:3f:37:f1:a3:75:a6:64:65:
eb:51:9c:d6:d4:55:02:c0:56:3c:87:0c:5d:9f:6f:35:98:50:
8b:e3:63:a3:bd:c3:d8:36:a6:a5:2b:12:50:72:e8:30:b5:15:
cd:55:4e:cd:8f:25:a4:8d:40:10:0e:9c:2f:5c:55:65:80:ee:
96:f4:5f:2f:e8:c0:af:4d:a8:98:9b:ec:81:17:7f:3d:63:ca:
1e:df:cd:09:a7:3d:40:3b:b9:b3:35:37:94:27:56:37:de:2b:
02:0c:2b:f2:41:7c:37:01:84:4b:30:73:6d:66:02:83:42:20:
6f:d5:32:ba:ad:06:72:42:fa:4b:be:8f:09:65:5b:c2:ac:67:
c3:70:db:2f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ8Y/CyxzMhPfEoGnoxqbcHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWI4OTcyN2Y5ZjhlY2U2OWRmOWJlYzRjYzExY2FiY2VlMTY0YmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwpvUut2sgtTPAnNS73RpjGk4uBM
wMUGQvM8v3Qf0gA1ZAckjG4aK5syGp6FisabV3SAuEeAsicyaEWdzyhdoPVWM5Rj
ulmVqSTC8OKQZKAL4Op6jzcbCLldOxrU+NYr+kshRmG9yk5Yf+D3FbpYf9gyaqZo
I2TdjJhXZc5wSKotLyBQffb+UmPnpjPPje16IzAgKDj3K81q2OwZbjGC9NZZhk6Z
eH4ACgslelTPKx/ouLTTMX0plsondFcGr4Z4c+ADJyDfCmR2Nskw6tHHfs+WXLsh
71Swa39MqHCxWoVt+HZsAzyW+4AMiN08YUXBTBwBlFACyhWT1K4bbHOPwQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFI64lyf5+Ozmnfm+xMwRyrzuFkvDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzljYTBk
Zi1kNDc0LTQwY2QtODY4OC0xNzE1OTE5NTY3YzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvOWNhMGRm
LWQ0NzQtNDBjZC04Njg4LTE3MTU5MTk1NjdjOS8xL2pyaVhKX240N09hZC1iN0V6
QkhLdk80V1M4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwffuMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDhMzANBgkqhkiG9w0BAQsFAAOCAQEAb4rZGVOmEpB+xDU2hTCl8FM9rhT/s/4K
F8pa5vQeIza+u3rLubaEXtDPeiS5ioeTHfgzmqYWKUoG7hVUzq+0mYIs6zdD5hgp
S7WngO133iAG7BMwLGTat2oFF39kWcBHWAmSgEd27GihFOJZt1cyYV0Kdp52rT83
8aN1pmRl61Gc1tRVAsBWPIcMXZ9vNZhQi+Njo73D2DampSsSUHLoMLUVzVVOzY8l
pI1AEA6cL1xVZYDulvRfL+jAr02omJvsgRd/PWPKHt/NCac9QDu5szU3lCdWN94r
Agwr8kF8NwGESzBzbWYCg0Igb9Uyuq0GckL6S76PCWVbwqxnw3DbLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:46 2026 by rpki-client