Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
File: sobp8IhI5ICx8-mpwGqDLUjON60.cer (raw, json)
Hash identifier: 5Nxyhg+vHOUKABWaBwIs9YlukbJeWemPJk8s/8aEOyI=
Subject key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FC69F64E5EA9D22F9BB79C2C00EA19791
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Aug 2026 07:56:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60666
IP: 152.234.128.0/19
IP: 177.177.64.0/19
IP: 177.201.192.0/19
IP: 179.69.64.0/18
IP: 179.253.32.0/19
IP: 179.254.192.0/19
IP: 187.5.0.0/20
IP: 187.14.128.0/18
IP: 187.15.192.0/18
IP: 187.55.0.0/18
IP: 189.12.128.0/18
IP: 189.30.64.0/18
IP: 189.31.0.0/19
IP: 189.73.32.0/20
IP: 191.0.80.0/20
IP: 191.45.32.0/20
IP: 200.138.16.0 -- 200.138.47.255
IP: 200.141.48.0/20
IP: 200.141.176.0/20
IP: 200.149.176.0/20
IP: 200.180.160.0/19
IP: 201.24.224.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:9f:64:e5:ea:9d:22:f9:bb:79:c2:c0:0e:a1:97:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 3 07:56:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:16:12:90:21:ac:4f:7c:d5:2a:2d:b7:c5:
c9:98:60:b9:e3:7d:c9:47:af:41:60:cf:f7:2a:51:
f6:ef:06:6e:4f:64:26:4e:78:ca:20:15:cd:e0:e1:
84:30:e7:4d:7c:94:70:40:9a:7e:fc:9d:86:f6:60:
aa:c9:1c:92:ec:38:e1:0a:11:38:8b:57:71:3e:60:
92:48:57:b3:9c:b2:15:33:af:03:20:a8:d1:68:d9:
ce:df:ce:fb:f7:7c:d3:f9:6f:97:fd:0d:a8:ec:65:
ad:d2:53:e3:fa:eb:63:eb:af:13:7e:73:62:03:04:
2a:52:e5:77:ee:0b:07:77:45:3c:a6:12:41:b3:ed:
98:6f:ac:2e:e9:e7:5e:78:23:a4:b4:f2:c7:7f:5c:
48:d0:b1:02:1a:21:e4:43:56:a6:f0:8c:cc:45:fd:
a8:21:93:61:5a:5d:4a:1c:d4:0a:ee:b9:c9:68:40:
43:80:20:72:52:f0:c6:40:de:45:63:09:8e:26:48:
8b:9f:ac:5b:19:1c:1d:c3:b3:55:d8:d4:9b:3a:7e:
83:9b:a0:cb:47:cd:12:52:2d:d1:64:9e:8b:f4:47:
a0:29:99:aa:52:8f:ff:1e:79:0e:f5:c4:f2:9b:a0:
3d:41:a3:d7:96:1e:d0:e8:71:2c:ae:66:e6:8e:8d:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.128.0/19
177.177.64.0/19
177.201.192.0/19
179.69.64.0/18
179.253.32.0/19
179.254.192.0/19
187.5.0.0/20
187.14.128.0/18
187.15.192.0/18
187.55.0.0/18
189.12.128.0/18
189.30.64.0/18
189.31.0.0/19
189.73.32.0/20
191.0.80.0/20
191.45.32.0/20
200.138.16.0-200.138.47.255
200.141.48.0/20
200.141.176.0/20
200.149.176.0/20
200.180.160.0/19
201.24.224.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60666
Signature Algorithm: sha256WithRSAEncryption
87:10:d6:20:d4:8d:e5:1d:e4:cc:a8:1d:ff:10:54:41:50:c0:
23:44:84:84:e0:7e:1a:88:05:58:bf:f9:7d:4a:40:b5:fb:43:
b0:00:f2:2d:fc:d3:48:b1:63:38:6f:61:27:53:3b:d9:e1:27:
db:c9:16:dc:80:01:85:6a:ac:8b:3a:7b:d6:c3:2b:60:a0:50:
e3:3a:0e:a7:43:8c:f0:c2:d0:88:58:11:1c:1b:11:db:b1:ae:
c6:90:5b:51:19:20:9e:3b:09:a0:17:9a:23:7e:19:14:ba:d4:
fc:3a:31:1c:c1:2f:14:72:3b:60:00:90:ce:5e:14:95:3a:1e:
ff:e3:a0:f0:76:cb:ce:3f:63:e9:76:04:57:2e:f8:48:06:06:
b8:21:c7:9d:17:f6:c7:a3:1a:7d:8e:ff:fb:36:a5:ce:35:e7:
ad:85:68:b3:ed:ab:e9:4a:67:f7:7f:4c:56:a7:f9:66:0c:d2:
3d:31:5e:5d:27:78:29:7b:8f:ea:da:d6:3c:4f:b3:26:cb:da:
db:fa:3f:9b:58:73:29:92:71:e6:da:f4:90:02:48:17:33:df:
0c:c0:eb:95:20:04:a9:5d:2b:ea:ce:3e:f1:7c:f4:20:2e:b6:
79:46:22:f8:f9:25:df:f3:a1:82:8d:2b:e6:8d:ae:91:ac:aa:
03:5e:d8:55
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgISAZ/Gn2Tl6p0i+bt5wsAOoZeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODAzMDc1NjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg2ZTlmMDg4NDhlNDgwYjFmM2U5YTljMDZhODMyZDQ4Y2UzN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAQWEpAhrE981Sott8XJmGC5433J
R69BYM/3KlH27wZuT2QmTnjKIBXN4OGEMOdNfJRwQJp+/J2G9mCqyRyS7DjhChE4
i1dxPmCSSFeznLIVM68DIKjRaNnO387793zT+W+X/Q2o7GWt0lPj+utj668TfnNi
AwQqUuV37gsHd0U8phJBs+2Yb6wu6edeeCOktPLHf1xI0LECGiHkQ1am8IzMRf2o
IZNhWl1KHNQK7rnJaEBDgCByUvDGQN5FYwmOJkiLn6xbGRwdw7NV2NSbOn6Dm6DL
R80SUi3RZJ6L9EegKZmqUo//HnkO9cTym6A9QaPXlh7Q6HEsrmbmjo2NQwIDAQAB
o4IDKzCCAycwHQYDVR0OBBYEFLKG6fCISOSAsfPpqcBqgy1IzjetMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzkwMDcw
NC02YjQ3LTQwMTctYjk3Zi00NjAxNjgwMTczYWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvOTAwNzA0
LTZiNDctNDAxNy1iOTdmLTQ2MDE2ODAxNzNhYS8xL3NvYnA4SWhJNUlDeDgtbXB3
R3FETFVqT042MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGpBggrBgEF
BQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAWY6oADBAWxsUADBAWxycADBAazRUAD
BAWz/SADBAWz/sADBAS7BQADBAa7DoADBAa7D8ADBAa7NwADBAa9DIADBAa9HkAD
BAW9HwADBAS9SSADBAS/AFADBAS/LSAwDAMEBMiKEAMEBMiKIAMEBMiNMAMEBMiN
sAMEBMiVsAMEBci0oAMEBMkY4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7Pow
DQYJKoZIhvcNAQELBQADggEBAIcQ1iDUjeUd5MyoHf8QVEFQwCNEhITgfhqIBVi/
+X1KQLX7Q7AA8i3800ixYzhvYSdTO9nhJ9vJFtyAAYVqrIs6e9bDK2CgUOM6DqdD
jPDC0IhYERwbEduxrsaQW1EZIJ47CaAXmiN+GRS61Pw6MRzBLxRyO2AAkM5eFJU6
Hv/joPB2y84/Y+l2BFcu+EgGBrghx50X9sejGn2O//s2pc41562FaLPtq+lKZ/d/
TFan+WYM0j0xXl0neCl7j+ra1jxPsybL2tv6P5tYcymSceba9JACSBcz3wzA65Ug
BKldK+rOPvF89CAutnlGIvj5Jd/zoYKNK+aNrpGsqgNe2FU=
-----END CERTIFICATE-----
Generated at Fri Aug 21 06:32:39 2026 by rpki-client