Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
File: ZElsSn06I8ONKqy0awbLYXVHsR8.cer (raw, json)
Hash identifier: E0MKSEgPuMEERunSgi/mfX5GkR5q33ZEmLeZzxIHjoE=
Subject key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1737FC95C44EC0135720ED08FB9D085E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 25 Oct 2026 14:38:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15562
IP: 45.138.228.0/22
IP: 2001:67c:208c::/48
IP: 2a0e:b240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:7f:c9:5c:44:ec:01:35:72:0e:d0:8f:b9:d0:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 25 14:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:3f:74:dd:f8:19:72:f1:e5:60:2f:45:e1:
d6:5b:f1:94:bf:e3:8a:59:ef:99:2f:b9:0b:06:74:
f2:29:d0:c6:9b:2e:e7:e9:95:da:ff:7c:83:27:97:
69:37:2b:9f:81:d4:c6:15:af:09:49:de:0b:b7:c1:
a8:ec:b7:a9:16:d7:40:d4:92:84:a6:e8:0d:6e:fa:
a4:75:c7:0d:54:1a:07:df:f2:92:9c:97:ee:c0:73:
e1:59:b2:11:4f:5e:30:0e:af:e0:7a:3e:28:67:e4:
ef:2c:6a:61:ea:99:de:42:78:79:85:92:c8:8b:c7:
cb:4b:d2:da:10:8b:75:2f:87:7b:06:d7:d3:46:e5:
45:b4:8f:01:ea:92:75:b3:1c:8d:3f:65:de:a1:3a:
b3:b3:be:d3:39:62:a8:e6:02:dd:31:0e:48:02:5a:
6e:d8:cb:58:a8:81:aa:1e:4f:c2:67:83:4e:00:b2:
84:bc:16:19:ff:58:ac:1e:90:60:51:b7:23:37:69:
40:5b:fb:b1:63:7f:5f:7c:3a:2e:ac:8f:16:26:91:
e8:24:2c:8e:d9:b9:38:e6:c0:6d:2b:43:18:74:bc:
47:ba:c6:d8:50:a3:a7:3b:60:63:0c:54:27:1c:dc:
cf:1a:70:17:0c:57:02:43:86:1e:2c:e0:fe:05:34:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
IPv6:
2001:67c:208c::/48
2a0e:b240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Signature Algorithm: sha256WithRSAEncryption
1d:f8:31:c9:e5:13:c3:d3:45:41:38:4f:58:9e:78:88:30:5c:
ef:8a:f6:cc:9e:c5:32:dc:a8:73:28:6e:03:33:41:e6:bd:aa:
ad:bf:d0:24:64:b1:36:43:9c:a7:dc:da:f4:ca:d3:45:1e:08:
bb:9b:bc:a2:96:4a:28:f2:54:cc:a4:a8:24:6d:b7:d2:b2:e5:
f0:a6:78:a3:12:5b:ea:f8:19:ba:15:35:bd:24:8e:be:13:ef:
d4:23:98:7b:28:57:d7:3e:c9:3f:38:4b:15:c7:9b:fd:54:13:
23:23:c3:a7:dd:9d:cc:28:6c:a7:6e:ed:8a:df:d8:a8:e0:06:
a8:ae:f5:08:17:8e:d5:02:eb:27:7c:3d:5c:5d:a9:1b:fa:f2:
9d:92:db:fb:93:14:0e:e8:74:59:7e:27:63:d0:73:ab:53:2a:
2e:fc:ad:43:dc:37:d2:5d:9c:1e:e6:10:5a:9f:9a:d7:54:12:
72:ca:85:c5:19:ef:8f:44:7d:de:8b:54:a6:4e:38:d6:5f:c0:
fa:97:9b:37:ba:17:39:ea:c9:04:f5:4e:ba:c2:98:8d:bc:2f:
49:1f:3c:14:2f:04:96:da:33:f2:a3:a2:0c:52:46:07:19:5c:
75:a8:ec:d7:b3:5e:3c:02:93:48:ab:2e:50:a8:8b:e1:42:6b:
89:95:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:32:43 2026 by rpki-client