Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer
File: cha_aL4onmHE01vUAmZi2OT76vE.cer (raw, json)
Hash identifier: bmvQ3QuXtV0T0WYuKRHYuYNCVi+Ex6+E3E4dS93ezcU=
Subject key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0786D8CAF8C591349E8565D5AACD5C34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Oct 2025 16:07:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205924
IP: 2a0b:4900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:86:d8:ca:f8:c5:91:34:9e:85:65:d5:aa:cd:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 16:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:c3:92:9f:1e:df:ba:39:82:d5:68:b2:f0:
78:26:62:95:e4:00:fa:1d:38:41:4f:46:f5:4c:ba:
eb:bc:d2:b8:87:e0:69:dc:a1:05:f6:ef:ef:50:1f:
3b:98:06:7e:bb:d2:5b:df:14:a3:6c:17:25:2d:38:
a9:50:7a:a0:42:f9:87:fd:58:3d:2b:46:76:9e:3f:
01:ba:ae:de:7a:b0:f4:53:2b:78:b1:82:84:e3:e2:
3a:1b:97:0d:c3:82:e4:15:5f:ac:4e:bf:82:59:91:
94:63:e8:4e:25:b3:43:53:ab:03:c0:1e:cc:f2:0e:
f7:65:13:04:3e:55:d7:98:57:47:a7:33:2c:14:4a:
a9:07:ee:1a:12:cc:a0:dc:c8:c2:c2:75:d6:fe:d8:
d9:81:46:fa:48:85:0d:ff:a7:2a:53:94:7f:83:88:
23:34:26:e3:5d:3b:cc:b9:b4:8a:7a:a2:fa:fa:b5:
81:d7:2d:18:ec:49:9c:94:dc:ab:cd:de:91:bb:78:
ef:17:6a:07:d0:fc:d9:87:95:b6:b7:d9:8e:45:9a:
69:7b:4e:a6:f5:b6:d9:1e:fa:fe:74:34:c1:e6:a1:
78:b6:e2:a5:6c:2d:de:06:f4:37:45:62:ad:cd:01:
1f:ad:14:b0:38:d6:f9:03:a2:e3:8f:d1:5b:10:f6:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205924
Signature Algorithm: sha256WithRSAEncryption
01:5e:1c:24:95:11:2c:a6:84:d9:90:82:3b:44:d6:b2:3d:ce:
d6:e2:2a:6d:d0:b8:46:d7:81:f1:7d:97:00:f2:92:e5:3c:90:
8f:47:63:0b:65:a0:a0:71:c5:cc:84:a8:28:a5:94:31:9d:a6:
44:35:66:be:2b:a1:6a:c7:18:17:71:4d:8e:6e:45:e7:63:d9:
d2:4c:d3:41:6a:4a:23:d9:f5:56:95:3e:25:1e:a7:12:5e:6c:
c7:6f:8b:90:20:aa:7a:e2:10:e7:21:bd:91:00:07:b5:f0:68:
47:5a:46:79:06:31:36:8b:3b:44:f9:72:ea:7e:3b:98:81:c4:
46:de:41:38:60:24:bc:c6:56:f2:41:86:a6:3c:0c:67:42:2e:
8d:e2:d5:fa:26:e1:1a:9f:34:3c:08:c9:db:60:ed:33:17:8f:
6d:8b:5d:b2:7f:20:5c:6a:92:a8:8f:9b:96:67:d3:bf:fd:ee:
4c:db:d3:94:8f:70:df:cc:a9:d8:0d:5e:3c:e8:01:ba:63:45:
25:39:4b:1a:c4:76:c5:a8:2b:48:f3:22:a3:c9:ff:b5:cb:ed:
06:19:4f:ce:6c:0b:77:04:fa:a9:39:57:e2:9d:41:18:a7:26:
6c:0c:db:79:aa:7b:97:bb:40:56:c2:ff:55:bb:78:2a:f8:52:
08:53:3a:9e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAZoHhtjK+MWRNJ6FZdWqzVw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDIxMTYwNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjE2YmY2OGJlMjg5ZTYxYzRkMzViZDQwMjY2NjJkOGU0ZmJlYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvTDkp8e37o5gtVosvB4JmKV5AD6
HThBT0b1TLrrvNK4h+Bp3KEF9u/vUB87mAZ+u9Jb3xSjbBclLTipUHqgQvmH/Vg9
K0Z2nj8Buq7eerD0Uyt4sYKE4+I6G5cNw4LkFV+sTr+CWZGUY+hOJbNDU6sDwB7M
8g73ZRMEPlXXmFdHpzMsFEqpB+4aEsyg3MjCwnXW/tjZgUb6SIUN/6cqU5R/g4gj
NCbjXTvMubSKeqL6+rWB1y0Y7EmclNyrzd6Ru3jvF2oH0PzZh5W2t9mORZppe06m
9bbZHvr+dDTB5qF4tuKlbC3eBvQ3RWKtzQEfrRSwONb5A6Ljj9FbEPaqeQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFHIWv2i+KJ5hxNNb1AJmYtjk++rxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzliYmE0
OS02MTkyLTQ4ZTMtOTRmMC00ZDQ1MjMxYzcyMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvOWJiYTQ5
LTYxOTItNDhlMy05NGYwLTRkNDUyMzFjNzIzMy8xL2NoYV9hTDRvbm1IRTAxdlVB
bVppMk9UNzZ2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgtJADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDJGQwDQYJKoZIhvcNAQELBQADggEBAAFeHCSVESymhNmQgjtE1rI9ztbiKm3Q
uEbXgfF9lwDykuU8kI9HYwtloKBxxcyEqCillDGdpkQ1Zr4roWrHGBdxTY5uRedj
2dJM00FqSiPZ9VaVPiUepxJebMdvi5AgqnriEOchvZEAB7XwaEdaRnkGMTaLO0T5
cup+O5iBxEbeQThgJLzGVvJBhqY8DGdCLo3i1fom4RqfNDwIydtg7TMXj22LXbJ/
IFxqkqiPm5Zn07/97kzb05SPcN/MqdgNXjzoAbpjRSU5SxrEdsWoK0jzIqPJ/7XL
7QYZT85sC3cE+qk5V+KdQRinJmwM23mqe5e7QFbC/1W7eCr4UghTOp4=
-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:48 2025 by rpki-client