Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
File: S5IeM_-6Ocahgd1C7jwK-gwiINA.cer (raw, json)
Hash identifier: ay4F8+ZM481OZcHF/nqTt6NsAmeRl4Vn2GJineF5cCM=
Subject key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F0390703E1820D74FBCC26618E1B0267F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 10:53:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210734
IP: 111.88.74.0/24
IP: 153.56.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:90:70:3e:18:20:d7:4f:bc:c2:66:18:e1:b0:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 10:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:6a:7a:f6:af:61:c0:19:bf:14:c3:fb:e6:
59:95:7e:57:ba:86:f6:04:7c:a1:90:d0:ae:97:e8:
e1:00:78:3b:2c:bf:ea:b6:3b:d9:a5:f7:44:22:7c:
09:6a:c5:78:d6:68:d3:46:fe:ef:84:bb:16:b2:96:
17:eb:53:8e:3e:04:86:af:1a:9b:a7:3a:19:e4:1c:
c9:c8:c8:f3:43:9c:b5:e2:7d:25:01:35:0e:4d:8b:
16:3b:89:75:e3:be:b8:48:fe:eb:cb:49:a2:77:eb:
16:63:38:22:4f:a7:cc:a4:73:9a:0f:4d:ba:fa:61:
56:93:85:9a:d1:af:3c:bc:80:14:23:78:26:cf:19:
c1:0e:fd:43:e4:fe:d5:f1:47:c9:0d:42:e2:4d:77:
08:c0:97:77:6b:b4:b3:8c:91:f0:90:db:c0:2c:e7:
d8:c7:8a:87:ec:f8:40:fc:9b:f7:ed:d9:a0:43:3a:
a0:e6:97:ab:60:be:cc:bd:20:97:dd:71:ad:6e:36:
db:bb:f3:e9:a6:76:38:05:04:14:23:85:2a:8d:40:
2a:49:e5:92:d6:4c:d0:7b:5d:22:14:5a:aa:af:4f:
c5:82:d7:0e:04:eb:ba:b4:16:2c:81:68:ed:9b:ff:
81:ce:12:5e:d1:b1:6a:9f:9e:68:44:34:e1:5b:ee:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.88.74.0/24
153.56.171.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210734
Signature Algorithm: sha256WithRSAEncryption
7a:54:3a:d0:f5:ca:06:e9:d5:7e:20:4a:54:13:6b:82:f8:6f:
04:85:92:02:c7:46:29:b9:42:35:e7:4f:d6:5a:20:67:a3:58:
c2:26:23:f9:6a:c8:91:25:e5:e9:b6:bb:fa:f3:a4:3c:3f:b1:
b5:87:b5:86:98:51:4c:b3:71:c3:6f:cc:88:ac:4f:55:76:27:
9f:e3:3a:55:4f:29:0f:8e:b0:20:9e:b9:27:17:35:69:ef:0d:
38:b5:cc:d8:52:ba:fc:24:ec:9f:a7:31:02:6e:47:a1:1f:c8:
37:33:ed:29:a3:73:ca:f3:6d:72:fd:4c:e4:df:2c:25:ca:02:
5f:75:d9:bf:1a:6a:b6:cd:d1:9b:e8:fb:02:c9:5c:22:3d:1c:
25:df:7d:f0:83:db:46:f1:bd:78:f5:25:8a:63:e2:27:11:5d:
8e:95:76:9b:f5:e7:9a:9a:5f:81:91:51:cb:0e:af:62:31:1e:
50:40:cd:75:ed:e8:b4:fd:f1:59:5b:85:c4:3c:b1:40:e8:ba:
da:7a:15:f9:31:42:87:83:24:f1:df:60:5f:ce:29:39:68:9b:
57:13:cb:0b:c2:61:bd:44:e9:27:a3:f3:5c:a9:47:4b:04:e8:
3f:26:79:f4:21:26:cf:43:88:f6:ce:39:bd:9c:0b:bc:67:5f:
41:87:a6:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 12 02:28:39 2026 by rpki-client