Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
File: 0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer (raw, json)
Hash identifier: OrGAXjZhZwycmcBqvphooUEM7WP8OXTeE/JSQvVE6vo=
Subject key identifier: D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D4958919C208ECA818832C672834E14B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Apr 2026 14:00:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21406
AS: 200986
AS: 213635
IP: 91.211.196.0/22
IP: 193.109.148.0 -- 193.109.159.255
IP: 193.150.174.0 -- 193.150.179.255
IP: 193.164.234.0 -- 193.164.241.255
IP: 193.188.208.0/20
IP: 193.246.126.0/24
IP: 2001:67c:1110::/47
IP: 2001:67c:2e10::/48
IP: 2001:67c:2e14::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:58:91:9c:20:8e:ca:81:88:32:c6:72:83:4e:14:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 14:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:de:e5:d6:ec:4b:ea:fb:e7:b4:3c:0b:97:
66:1e:ff:60:f7:3f:96:75:b7:9e:76:2c:df:2b:4b:
5b:ac:ed:d8:c2:3c:1d:db:73:7b:46:bd:da:1a:38:
c2:30:b4:95:b6:bc:ab:6e:74:08:a8:6b:95:49:b5:
b3:1d:ec:df:9c:54:32:24:58:8b:16:da:f5:78:e6:
37:a4:97:61:c4:3f:18:76:d5:a3:ae:39:5a:af:d2:
fa:53:f7:aa:3e:16:b9:52:3b:8d:76:c5:1c:68:fc:
f6:03:1f:6a:91:c9:09:ed:0f:80:1c:3d:c2:82:d9:
fb:f6:e2:28:02:c4:5a:f3:bf:8e:7b:5f:41:7c:0e:
ee:24:8b:a3:67:7a:3c:54:d7:b0:79:ab:01:f1:fc:
4a:5b:06:5f:65:a6:6a:55:c0:9c:4c:6f:7d:f4:84:
49:cb:9c:9b:6f:c7:e7:7c:66:34:44:f7:cf:02:04:
16:bc:72:47:13:ab:76:37:1b:b6:29:21:1f:60:7c:
77:25:fd:a2:8a:c8:72:78:e6:90:cb:0f:5e:c8:c8:
f3:61:d1:85:35:00:aa:55:dc:03:71:ef:93:2a:1a:
e5:8f:69:5c:39:36:30:2c:67:4e:f3:3d:c1:14:24:
62:f9:21:b9:55:b3:7c:78:67:3d:a6:a7:ec:7d:73:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.148.0-193.109.159.255
193.150.174.0-193.150.179.255
193.164.234.0-193.164.241.255
193.188.208.0/20
193.246.126.0/24
IPv6:
2001:67c:1110::/47
2001:67c:2e10::/48
2001:67c:2e14::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21406
200986
213635
Signature Algorithm: sha256WithRSAEncryption
5b:1b:fc:37:c6:65:b3:52:5a:5b:0f:4f:c8:5b:65:ad:da:5e:
c6:ca:1d:74:35:e3:28:b4:e7:fd:c8:76:e4:1d:b8:df:66:26:
2a:e8:90:21:09:59:2e:d2:99:44:13:66:17:a9:a5:ca:94:dc:
f5:5d:11:f5:11:80:37:f2:91:12:9c:ef:f8:5e:84:5d:64:53:
85:b5:e7:eb:1e:ed:3e:7f:f5:f0:89:13:68:8e:5f:9d:8a:61:
35:42:35:ec:a4:e7:6b:9a:ab:5c:f3:98:ae:a8:1d:42:a5:d6:
ba:79:cc:77:4f:38:0d:5a:3d:14:fc:07:c6:a3:15:c3:4e:34:
8c:74:ca:f2:b4:b2:f4:11:07:6e:54:5c:82:6a:ed:e7:4d:bb:
d3:3d:73:96:0a:81:af:11:c4:32:28:cb:3c:ba:6d:47:03:15:
d1:d8:bb:f0:87:95:08:86:36:93:09:f2:5e:41:ae:23:1d:7b:
96:c9:ad:8c:ba:e3:a9:43:5d:64:19:05:4a:50:5f:c7:bb:cc:
e9:df:55:f0:1e:4e:8e:8c:4f:ef:3f:99:15:5c:1e:47:c0:8e:
00:4c:09:88:ed:32:f5:44:de:e3:98:da:01:e0:1c:b9:20:10:
60:64:ee:23:82:e6:35:28:51:aa:00:8f:6e:c7:41:74:f5:88:
de:80:0a:41
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISAZ1JWJGcII7KgYgyxnKDThS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDAxMTQwMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGMzZjk1NDg4NTQ4M2NmMTJhOWFlZDA1Y2NlNjAzNTdmYTRiNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijPe5dbsS+r757Q8C5dmHv9g9z+W
dbeedizfK0tbrO3Ywjwd23N7Rr3aGjjCMLSVtryrbnQIqGuVSbWzHezfnFQyJFiL
Ftr1eOY3pJdhxD8YdtWjrjlar9L6U/eqPha5UjuNdsUcaPz2Ax9qkckJ7Q+AHD3C
gtn79uIoAsRa87+Oe19BfA7uJIujZ3o8VNeweasB8fxKWwZfZaZqVcCcTG999IRJ
y5ybb8fnfGY0RPfPAgQWvHJHE6t2Nxu2KSEfYHx3Jf2iishyeOaQyw9eyMjzYdGF
NQCqVdwDce+TKhrlj2lcOTYwLGdO8z3BFCRi+SG5VbN8eGc9pqfsfXP4TwIDAQAB
o4IDAjCCAv4wHQYDVR0OBBYEFNDD+VSIVIPPEqmu0FzOYDV/pLS+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2VkNGE0
Yy1lNTY1LTQ2MDQtOTk5Zi1jNTI3NDM5OTQ1OGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvZWQ0YTRj
LWU1NjUtNDYwNC05OTlmLWM1Mjc0Mzk5NDU4Yi8xLzBNUDVWSWhVZzg4U3FhN1FY
TTVnTlgta3RMNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF
BwEHAQH/BGkwZzBCBAIAATA8AwQCW9PEMAwDBALBbZQDBAXBbYAwDAMEAcGWrgME
AsGWsDAMAwQBwaTqAwQBwaTwAwQEwbzQAwQAwfZ+MCEEAgACMBsDBwEgAQZ8ERAD
BwAgAQZ8LhADBwAgAQZ8LhQwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICU54CAwMR
GgIDA0KDMA0GCSqGSIb3DQEBCwUAA4IBAQBbG/w3xmWzUlpbD0/IW2Wt2l7Gyh10
NeMotOf9yHbkHbjfZiYq6JAhCVku0plEE2YXqaXKlNz1XRH1EYA38pESnO/4XoRd
ZFOFtefrHu0+f/XwiRNojl+dimE1QjXspOdrmqtc85iuqB1Cpda6ecx3TzgNWj0U
/AfGoxXDTjSMdMrytLL0EQduVFyCau3nTbvTPXOWCoGvEcQyKMs8um1HAxXR2Lvw
h5UIhjaTCfJeQa4jHXuWya2MuuOpQ11kGQVKUF/Hu8zp31XwHk6OjE/vP5kVXB5H
wI4ATAmI7TL1RN7jmNoB4By5IBBgZO4jguY1KFGqAI9ux0F09YjegApB
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:02:58 2026 by rpki-client