Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
File: l5oEa_9hohu7Kche9ClhJoX7g0s.cer (raw, json)
Hash identifier: pT1XVMlPiccetoSgvxJpDw2/KPliRyoR3HmtydT08Kg=
Subject key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FABB662E856C973E7BBC6F9E4B85EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.44.75.0 -- 192.44.77.255
IP: 192.108.115.0 -- 192.108.119.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:bb:66:2e:85:6c:97:3e:7b:bc:6f:9e:4b:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=979a046bff61a21bbb29c85ef429612685fb834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:70:de:13:67:9b:c4:1b:66:33:54:8d:a2:
e5:fb:a5:a6:5a:19:30:7f:a4:91:ae:a4:19:71:30:
01:0a:81:50:8e:bd:54:85:74:72:fe:c8:be:f3:8b:
6f:f0:62:7b:b6:d7:16:11:24:62:c3:e8:e2:76:06:
89:d8:63:c0:d2:c5:9f:a8:b8:19:e5:b6:1f:63:8a:
18:61:f4:26:54:f7:22:98:9b:06:ee:c2:ea:bd:19:
bc:98:a3:7f:24:93:74:38:cd:20:7b:8c:05:56:c3:
97:8f:6d:f3:51:09:31:de:9e:7a:04:99:a3:b5:3f:
c8:d2:72:ea:d4:e3:38:49:c2:a4:cd:6b:c7:a6:3e:
12:20:49:ab:42:f7:0a:e0:ad:9d:88:d6:f6:4b:62:
a0:72:63:ff:99:07:90:bd:ab:c3:db:46:53:ff:e1:
20:90:bc:58:bf:7a:91:07:26:b4:07:3c:15:07:ef:
ed:69:6a:86:47:b7:30:31:81:f9:58:10:bb:e8:19:
12:f0:82:98:79:cf:b1:f6:49:cb:f8:4e:5c:aa:7a:
c5:99:d2:6e:13:51:f0:f9:98:e4:31:54:8a:0c:6b:
5b:1a:8c:04:b7:90:18:f2:b9:b7:c8:21:41:be:f7:
af:cb:2f:67:bb:ee:68:08:44:8d:d8:13:1c:75:22:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.75.0-192.44.77.255
192.108.115.0-192.108.119.255
Signature Algorithm: sha256WithRSAEncryption
39:c8:3f:6d:76:79:6a:68:09:5b:15:e8:3c:2f:c1:b7:5e:9c:
98:69:78:37:42:d8:8f:a8:e2:49:c6:f6:aa:14:d0:50:7f:2f:
e0:26:8c:9b:bb:bf:75:52:4e:50:79:a7:b9:16:f3:45:22:a9:
15:04:9f:9c:75:9b:8d:8b:87:51:08:24:08:6f:87:93:c7:19:
d8:be:70:fe:48:68:46:d7:bb:b4:21:80:91:5c:63:3b:d9:9c:
f4:55:94:b2:f3:71:bd:16:d2:60:6a:a8:ca:1e:13:f6:29:ad:
f5:a3:89:d7:cd:82:40:81:19:db:9b:30:32:80:e1:c1:5c:76:
49:8f:55:5f:54:0c:43:b0:c4:29:9f:2e:d2:60:00:0b:0c:b8:
93:cd:07:05:36:c9:f4:1f:88:4a:40:e9:93:01:61:fb:99:9a:
19:64:0f:d8:6a:09:1f:00:10:89:4a:27:3c:47:63:55:97:68:
95:ac:6e:0d:3b:36:75:ba:2e:e6:72:c7:85:b6:af:0d:96:26:
26:76:0c:32:2b:b1:07:3f:d6:73:c6:51:ae:f4:38:bf:c7:81:
2d:6a:14:2a:1c:91:1f:f3:93:b2:87:a8:1f:c8:2b:f1:97:03:
75:1c:2b:25:fa:f0:25:18:4b:d6:32:45:68:3e:2a:62:9d:d9:
31:90:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:04 2026 by rpki-client