Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
File: sobp8IhI5ICx8-mpwGqDLUjON60.cer (raw, json)
Hash identifier: fR+iw7kqPuT3GmvkKZITMZLdOC/9UgG4KhOMcYLmroA=
Subject key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA92946F556D78659D5FB3ACDC6857
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 152.234.128.0/19
IP: 177.177.64.0/19
IP: 177.201.192.0/19
IP: 179.69.64.0/18
IP: 179.253.32.0/19
IP: 179.254.192.0/19
IP: 187.5.0.0/20
IP: 187.14.128.0/18
IP: 187.15.192.0/18
IP: 187.55.0.0/18
IP: 189.12.128.0/18
IP: 189.30.64.0/18
IP: 189.31.0.0/19
IP: 189.73.32.0/20
IP: 191.0.80.0/20
IP: 191.45.32.0/20
IP: 200.138.16.0 -- 200.138.47.255
IP: 200.141.48.0/20
IP: 200.141.176.0/20
IP: 200.149.176.0/20
IP: 200.180.160.0/19
IP: 201.24.224.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:92:94:6f:55:6d:78:65:9d:5f:b3:ac:dc:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:16:12:90:21:ac:4f:7c:d5:2a:2d:b7:c5:
c9:98:60:b9:e3:7d:c9:47:af:41:60:cf:f7:2a:51:
f6:ef:06:6e:4f:64:26:4e:78:ca:20:15:cd:e0:e1:
84:30:e7:4d:7c:94:70:40:9a:7e:fc:9d:86:f6:60:
aa:c9:1c:92:ec:38:e1:0a:11:38:8b:57:71:3e:60:
92:48:57:b3:9c:b2:15:33:af:03:20:a8:d1:68:d9:
ce:df:ce:fb:f7:7c:d3:f9:6f:97:fd:0d:a8:ec:65:
ad:d2:53:e3:fa:eb:63:eb:af:13:7e:73:62:03:04:
2a:52:e5:77:ee:0b:07:77:45:3c:a6:12:41:b3:ed:
98:6f:ac:2e:e9:e7:5e:78:23:a4:b4:f2:c7:7f:5c:
48:d0:b1:02:1a:21:e4:43:56:a6:f0:8c:cc:45:fd:
a8:21:93:61:5a:5d:4a:1c:d4:0a:ee:b9:c9:68:40:
43:80:20:72:52:f0:c6:40:de:45:63:09:8e:26:48:
8b:9f:ac:5b:19:1c:1d:c3:b3:55:d8:d4:9b:3a:7e:
83:9b:a0:cb:47:cd:12:52:2d:d1:64:9e:8b:f4:47:
a0:29:99:aa:52:8f:ff:1e:79:0e:f5:c4:f2:9b:a0:
3d:41:a3:d7:96:1e:d0:e8:71:2c:ae:66:e6:8e:8d:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.128.0/19
177.177.64.0/19
177.201.192.0/19
179.69.64.0/18
179.253.32.0/19
179.254.192.0/19
187.5.0.0/20
187.14.128.0/18
187.15.192.0/18
187.55.0.0/18
189.12.128.0/18
189.30.64.0/18
189.31.0.0/19
189.73.32.0/20
191.0.80.0/20
191.45.32.0/20
200.138.16.0-200.138.47.255
200.141.48.0/20
200.141.176.0/20
200.149.176.0/20
200.180.160.0/19
201.24.224.0/20
Signature Algorithm: sha256WithRSAEncryption
85:68:42:4b:ca:db:b5:0a:16:13:1d:3c:aa:04:24:f2:8c:ee:
e6:d9:f3:58:68:36:a4:d1:ee:57:e2:85:b7:3e:97:53:2a:a3:
2f:c8:28:a8:2d:1c:78:dc:63:fd:1c:e8:a5:dc:ac:8f:cd:fc:
df:ca:ae:00:2d:75:63:8a:66:ac:39:b0:e6:66:e0:a2:50:d0:
ce:f8:57:b1:be:01:15:c2:1e:e3:be:6a:6d:7d:7e:86:4f:8f:
0d:3e:69:75:92:dc:f3:58:de:94:1d:40:f8:9a:65:8a:59:f8:
0f:95:9f:e0:d5:1f:eb:60:01:f6:5a:7a:69:da:6f:03:fc:37:
56:81:0f:fa:52:15:94:82:0a:57:aa:87:15:d0:9c:c9:2d:a2:
98:9a:71:dd:5f:db:46:f6:f2:23:81:95:14:d3:4f:16:9e:73:
59:f5:8d:f5:6f:eb:05:ab:5b:8a:0a:9a:c1:a1:e4:d8:af:be:
99:7c:a2:b5:2e:d2:1b:ef:18:61:e6:60:72:2e:ce:32:2f:8c:
46:35:89:c2:a5:d9:a7:25:41:fa:6e:3c:64:75:74:f1:64:38:
10:55:43:e7:f9:12:cd:db:df:a6:62:24:ee:89:3c:98:c0:dc:
95:c2:11:a4:30:20:3d:a6:8c:f5:76:b3:e5:b7:14:6a:10:cd:
3e:31:82:6a
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZ8Y+pKUb1VteGWdX7Os3GhXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg2ZTlmMDg4NDhlNDgwYjFmM2U5YTljMDZhODMyZDQ4Y2UzN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQWEpAhrE981Sott8XJmGC5433J
R69BYM/3KlH27wZuT2QmTnjKIBXN4OGEMOdNfJRwQJp+/J2G9mCqyRyS7DjhChE4
i1dxPmCSSFeznLIVM68DIKjRaNnO387793zT+W+X/Q2o7GWt0lPj+utj668TfnNi
AwQqUuV37gsHd0U8phJBs+2Yb6wu6edeeCOktPLHf1xI0LECGiHkQ1am8IzMRf2o
IZNhWl1KHNQK7rnJaEBDgCByUvDGQN5FYwmOJkiLn6xbGRwdw7NV2NSbOn6Dm6DL
R80SUi3RZJ6L9EegKZmqUo//HnkO9cTym6A9QaPXlh7Q6HEsrmbmjo2NQwIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFLKG6fCISOSAsfPpqcBqgy1IzjetMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzkwMDcw
NC02YjQ3LTQwMTctYjk3Zi00NjAxNjgwMTczYWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvOTAwNzA0
LTZiNDctNDAxNy1iOTdmLTQ2MDE2ODAxNzNhYS8xL3NvYnA4SWhJNUlDeDgtbXB3
R3FETFVqT042MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGpBggrBgEF
BQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAWY6oADBAWxsUADBAWxycADBAazRUAD
BAWz/SADBAWz/sADBAS7BQADBAa7DoADBAa7D8ADBAa7NwADBAa9DIADBAa9HkAD
BAW9HwADBAS9SSADBAS/AFADBAS/LSAwDAMEBMiKEAMEBMiKIAMEBMiNMAMEBMiN
sAMEBMiVsAMEBci0oAMEBMkY4DANBgkqhkiG9w0BAQsFAAOCAQEAhWhCS8rbtQoW
Ex08qgQk8ozu5tnzWGg2pNHuV+KFtz6XUyqjL8goqC0ceNxj/Rzopdysj83838qu
AC11Y4pmrDmw5mbgolDQzvhXsb4BFcIe475qbX1+hk+PDT5pdZLc81jelB1A+Jpl
iln4D5Wf4NUf62AB9lp6adpvA/w3VoEP+lIVlIIKV6qHFdCcyS2imJpx3V/bRvby
I4GVFNNPFp5zWfWN9W/rBatbigqawaHk2K++mXyitS7SG+8YYeZgci7OMi+MRjWJ
wqXZpyVB+m48ZHV08WQ4EFVD5/kSzdvfpmIk7ok8mMDclcIRpDAgPaaM9Xaz5bcU
ahDNPjGCag==
-----END CERTIFICATE-----
Generated at Tue Jul 7 03:30:10 2026 by rpki-client