Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
File: Sbo670PAo_CNKrW5MRwGJcwrEYo.cer (raw, json)
Hash identifier: tQvpDAXphpvlrPnKypCmgfNbERiS3Tk5fMk01n2Att8=
Subject key identifier: 49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FAED9FD5507A9932935994EC9F28004E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jul 2026 17:09:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219178
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:d9:fd:55:07:a9:93:29:35:99:4e:c9:f2:80:04:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 17:09:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:2a:a2:55:3b:04:e2:4a:7e:ae:85:d2:ef:
5a:1a:17:0f:f8:8f:4e:17:35:fe:87:25:37:d0:58:
d4:8b:08:96:28:46:a0:e8:3d:0b:79:4e:56:6b:72:
23:9b:97:e9:60:ae:a3:30:8f:be:a5:22:59:4c:88:
52:c0:fd:c3:b8:db:e5:4a:46:36:4e:a9:cd:1e:16:
6e:5f:69:0a:7d:a8:6c:7f:b2:c4:c5:d4:83:23:0d:
98:2c:68:1c:df:58:a0:15:58:a2:c6:c8:a8:e5:55:
11:d0:b0:6a:fe:86:0e:b7:e0:21:98:82:ab:b7:bb:
8d:62:d4:58:58:a0:bb:40:b7:bd:81:32:2c:c7:e5:
ba:d3:15:36:9e:72:0f:6b:72:d8:6c:3b:0a:c8:18:
7d:69:4f:7f:e7:c2:1f:67:cd:a5:3a:fb:d6:3b:6f:
38:c0:3e:5c:3e:22:bc:7f:df:a7:ce:73:fe:14:b4:
84:10:dc:0b:91:c3:6d:a2:a1:2d:eb:8e:b1:dd:a9:
a4:db:d5:de:27:da:20:20:47:54:47:cc:d0:ce:9c:
a1:fa:ff:37:43:64:6c:9b:7f:19:25:e4:a3:f8:2a:
44:6f:7c:b5:f0:83:c1:3d:f0:3c:ea:18:08:7c:28:
4d:2d:f4:48:40:56:18:72:24:33:64:eb:5a:62:3e:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219178
Signature Algorithm: sha256WithRSAEncryption
2c:8b:11:44:24:89:3d:11:3f:75:60:7d:05:11:c5:04:da:77:
1f:9b:82:37:7f:63:e0:a4:1c:58:93:b0:fb:d7:db:e8:d2:52:
f8:e1:b1:2b:4b:0f:6e:6f:7c:66:ed:8d:06:f3:f7:16:b7:cc:
36:20:5d:25:dd:2f:6a:10:40:79:35:ac:98:a9:10:f1:db:3a:
38:f6:77:39:d2:4d:ed:d7:d3:f6:6e:35:1e:f8:ad:27:08:0e:
97:cf:ae:5f:c7:a4:fe:fd:01:ea:64:fa:61:8b:59:6c:88:9f:
2d:e1:7f:36:09:1a:39:74:f5:4d:79:cf:f6:b2:2f:fe:e5:82:
4d:b4:58:85:40:a9:48:22:a8:6b:6b:77:65:50:52:d9:f9:6e:
0b:b8:0b:d7:9d:24:05:66:ba:80:5b:df:7a:da:7b:a9:e1:bd:
c9:ce:16:d1:a9:f5:9b:85:dc:f0:d8:f1:c3:6d:32:b9:e2:1a:
32:0f:4d:40:07:dd:c5:73:10:b7:ce:87:26:0b:56:04:b2:59:
71:1e:64:9c:c2:c3:8c:97:f2:a3:8a:a8:20:9b:05:c6:ee:31:
9c:21:d5:26:92:56:a6:50:4b:36:c1:88:d6:df:c0:b1:e4:8a:
2e:de:90:65:77:8f:12:e4:43:9b:b6:6b:88:94:d4:16:b4:82:
20:0f:ac:66
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ+u2f1VB6mTKTWZTsnygATkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzI5MTcwOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWJhM2FlZjQzYzBhM2YwOGQyYWI1YjkzMTFjMDYyNWNjMmIxMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SUqolU7BOJKfq6F0u9aGhcP+I9O
FzX+hyU30FjUiwiWKEag6D0LeU5Wa3Ijm5fpYK6jMI++pSJZTIhSwP3DuNvlSkY2
TqnNHhZuX2kKfahsf7LExdSDIw2YLGgc31igFViixsio5VUR0LBq/oYOt+AhmIKr
t7uNYtRYWKC7QLe9gTIsx+W60xU2nnIPa3LYbDsKyBh9aU9/58IfZ82lOvvWO284
wD5cPiK8f9+nznP+FLSEENwLkcNtoqEt646x3amk29XeJ9ogIEdUR8zQzpyh+v83
Q2Rsm38ZJeSj+CpEb3y18IPBPfA86hgIfChNLfRIQFYYciQzZOtaYj41TQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFEm6Ou9DwKPwjSq1uTEcBiXMKxGKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzMxY2Rk
ZC00MWEyLTQ4ZWItYTgzOC1kZjdhMjNhMjM4YWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvMzFjZGRk
LTQxYTItNDhlYi1hODM4LWRmN2EyM2EyMzhhZS8xL1NibzY3MFBBb19DTktyVzVN
UndHSmN3ckVZby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNYKjANBgkqhkiG9w0BAQsFAAOCAQEALIsRRCSJPRE/
dWB9BRHFBNp3H5uCN39j4KQcWJOw+9fb6NJS+OGxK0sPbm98Zu2NBvP3FrfMNiBd
Jd0vahBAeTWsmKkQ8ds6OPZ3OdJN7dfT9m41HvitJwgOl8+uX8ek/v0B6mT6YYtZ
bIifLeF/NgkaOXT1TXnP9rIv/uWCTbRYhUCpSCKoa2t3ZVBS2fluC7gL150kBWa6
gFvfetp7qeG9yc4W0an1m4Xc8Njxw20yueIaMg9NQAfdxXMQt86HJgtWBLJZcR5k
nMLDjJfyo4qoIJsFxu4xnCHVJpJWplBLNsGI1t/AseSKLt6QZXePEuRDm7ZriJTU
FrSCIA+sZg==
-----END CERTIFICATE-----
Generated at Wed Aug 12 20:17:19 2026 by rpki-client