Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
File: 5BOmx2sTFEjjCg3GojAAdHAUAzo.cer (raw, json)
Hash identifier: elVW+OSMcep1n7SpPyw7GqmpdY64toxwf12Nze1elFM=
Subject key identifier: E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E897187419F25CC006A97FCC375BBBFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 15:16:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51946
IP: 128.240.0.0/16
IP: 192.100.135.0 -- 192.100.140.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:97:18:74:19:f2:5c:c0:06:a9:7f:cc:37:5b:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 15:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e413a6c76b131448e30a0dc6a23000747014033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:74:cb:ca:8a:70:39:14:95:e7:70:3b:11:
48:8e:6e:a3:39:f1:fa:d5:c1:e0:bc:70:e4:df:bd:
6a:1a:de:43:22:e4:e6:90:c9:f4:74:96:24:a5:44:
d7:3d:fe:93:45:91:c2:8a:e8:ba:c0:90:e4:8e:e4:
d5:3c:ed:88:4f:57:72:dd:df:c7:6c:39:0b:5c:43:
27:ea:99:58:25:19:b3:f8:9a:fd:27:e5:4c:01:85:
bf:46:48:2c:41:fc:f7:26:c0:04:65:5f:1c:fc:32:
54:2a:9f:d9:e0:3e:e5:df:5a:1c:66:41:4d:82:29:
ec:a9:8a:9e:65:d4:a5:9a:89:f6:69:c7:18:e6:e0:
24:0a:b6:b5:f0:1c:b5:b8:59:72:30:ff:86:85:a2:
09:bf:14:ba:62:b5:19:43:76:f9:2b:c1:aa:08:93:
bc:12:03:ba:1c:b6:20:5c:d2:4e:a4:96:c7:58:c3:
5f:14:00:58:c0:a4:b1:d8:c8:5b:5b:b8:97:b3:07:
11:d5:0a:4f:7a:43:91:71:ba:59:e3:0c:e1:ab:cd:
9e:c6:16:73:64:d0:d8:bb:5c:09:59:de:86:be:a1:
02:2a:cd:39:e5:8a:ca:c7:d6:78:39:ac:47:81:28:
cd:3c:61:4a:1c:2c:f8:48:5f:43:82:cb:a0:ba:68:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.240.0.0/16
192.100.135.0-192.100.140.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51946
Signature Algorithm: sha256WithRSAEncryption
20:89:ee:a9:0e:2d:a3:67:04:48:d0:b8:45:12:85:a6:f5:8b:
03:08:76:1e:0a:01:a5:4e:06:a9:9c:6e:5e:92:88:2d:9d:33:
eb:44:8f:d8:e3:c2:8f:87:bd:56:43:13:93:51:e1:d1:a1:97:
35:6b:74:c7:18:f1:d9:b4:fb:2a:d4:69:b7:6c:e3:57:f8:3a:
31:9b:4a:99:56:41:62:be:58:88:71:3c:01:63:f6:29:d2:15:
2b:06:2e:b2:50:21:0d:b7:43:9f:0a:f1:94:01:89:e4:0a:2e:
a5:4b:d1:90:be:98:a0:95:a6:8c:f4:14:51:38:80:e6:5d:a3:
19:19:aa:af:54:76:1e:40:49:00:6f:15:90:77:49:3d:42:e9:
48:18:e4:d9:2e:b9:f6:78:bd:63:73:11:aa:8a:44:08:e9:8e:
ca:ec:45:1d:56:fb:a8:c8:9d:e8:fc:77:ab:98:46:1e:f2:81:
bf:52:21:1c:1a:a7:b0:64:70:f1:02:bb:df:be:60:91:4c:00:
2a:f0:da:fe:db:63:d3:37:38:95:a0:10:c6:35:19:26:94:ef:
05:58:67:9c:72:c0:d3:0e:24:ed:22:a3:ea:5a:e2:e4:f6:ab:
9a:86:87:e2:0b:70:a3:dc:84:0d:b7:6c:a9:0e:b0:ff:df:ae:
84:ad:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:47:09 2026 by rpki-client