Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
File: mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer (raw, json)
Hash identifier: 1viiBwmQqaAxXrIYVdJSNihoQbgz+bNEZh7tQcMFuKA=
Subject key identifier: 98:1A:11:87:F5:6B:DB:63:7D:56:A7:80:3A:47:CD:A5:4E:0C:62:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC9A5A29296A231CD349448EB59BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25504
AS: 41078
AS: 57115
IP: 83.243.56.0/21
IP: 89.200.168.0/21
IP: 91.223.141.0/24
IP: 91.230.83.0/24
IP: 94.102.208.0/20
IP: 109.235.56.0/21
IP: 151.252.48.0/20
IP: 158.58.144.0/21
IP: 185.90.232.0/22
IP: 193.254.184.0/21
IP: 195.191.92.0/23
IP: 2001:67c:2394::/48
IP: 2a00:19e0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c9:a5:a2:92:96:a2:31:cd:34:94:48:eb:59:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=981a1187f56bdb637d56a7803a47cda54e0c62af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:01:6e:0a:95:78:ae:f6:d4:0e:1a:b3:0d:
31:e9:3c:5a:5e:95:d5:aa:6c:b7:2c:3f:52:10:21:
72:c4:e5:b3:43:34:74:95:90:1b:f8:26:89:ed:92:
2d:65:d6:e4:ca:e9:02:9f:92:eb:92:27:e7:d0:99:
e4:6e:b4:e2:0c:81:9d:d3:c1:ed:a6:f0:b2:8a:be:
7e:fa:c4:a3:b9:40:4a:f2:1c:8a:43:b6:fa:81:ed:
1b:a2:ae:d6:89:4f:4f:e1:4b:c6:e1:b1:41:60:77:
c8:7e:78:4a:a1:66:d4:03:27:de:5e:c2:85:bf:55:
12:f0:31:30:83:eb:d7:af:69:b1:ac:aa:93:07:e5:
36:86:47:14:47:79:df:96:de:30:a1:b8:12:38:19:
17:4f:70:08:02:0f:c1:e7:d5:84:b3:b4:d3:1d:bf:
01:fa:66:e0:e1:c7:9b:ae:b0:3e:f0:6c:82:7b:3a:
71:e2:13:47:96:2d:47:cb:46:a8:82:33:e9:d5:c4:
fd:48:fd:b1:4f:aa:22:40:e7:60:08:15:d5:37:2e:
91:75:0e:67:9e:68:bf:ff:a4:43:27:48:ad:14:17:
e3:25:79:3f:c8:b6:a0:42:2f:41:36:35:8b:3b:8d:
e9:95:42:f0:f1:c8:ab:6f:04:48:eb:f3:db:ad:fd:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1A:11:87:F5:6B:DB:63:7D:56:A7:80:3A:47:CD:A5:4E:0C:62:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.56.0/21
89.200.168.0/21
91.223.141.0/24
91.230.83.0/24
94.102.208.0/20
109.235.56.0/21
151.252.48.0/20
158.58.144.0/21
185.90.232.0/22
193.254.184.0/21
195.191.92.0/23
IPv6:
2001:67c:2394::/48
2a00:19e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25504
41078
57115
Signature Algorithm: sha256WithRSAEncryption
64:1b:a4:4d:09:b1:ce:37:b1:f8:7a:80:46:bc:bf:c3:50:cb:
5a:f7:c8:d3:27:6f:9a:c3:60:b0:ed:d9:57:19:a1:b8:88:73:
f4:b5:2f:f8:74:d1:a2:90:b1:49:09:59:e3:20:66:d4:c2:31:
ec:e1:be:df:f2:94:94:28:0b:af:cf:19:44:be:b4:c8:b1:3c:
9e:b9:ae:f1:66:b4:62:79:06:72:6d:a8:5f:f9:c7:c6:81:54:
4e:13:67:ed:e8:9d:c9:89:d8:88:b1:03:00:1b:1b:4a:84:c3:
a0:48:c2:52:20:54:b8:3a:57:9f:30:42:d3:4c:76:0b:6a:bf:
75:c5:52:e0:7f:70:3d:1c:41:e4:3c:0a:ff:31:ce:14:f0:b2:
48:f9:63:50:b5:d6:c1:ce:c2:85:49:86:48:2d:d4:d7:af:4d:
cd:3f:64:73:ee:db:f2:f4:57:0b:6f:59:88:71:10:f0:68:cf:
c2:ab:5a:8e:f5:37:26:b6:c6:20:c8:fc:43:ce:b7:3a:7d:18:
a8:bd:a1:89:f8:4f:f9:45:77:f1:7e:01:7b:fc:af:19:5a:d5:
9c:60:ea:e2:74:d8:d3:6e:7f:4f:13:e7:4a:82:39:29:c3:0a:
be:77:2c:1b:5f:2c:46:a9:76:dd:53:f7:03:cf:dd:f0:a2:f0:
66:cb:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:02 2026 by rpki-client