Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
File: 4oi1UXtPv_4T0fw--obcf_VWGIE.cer (raw, json)
Hash identifier: G75Gy9KtvKSUTJU2ekgsThSXoNK6s1zKMLs9pF10hcY=
Subject key identifier: E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB320FEDD2A62FC85F9493310E6B4C4EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Mar 2026 09:56:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57188
IP: 46.228.16.0/20
IP: 185.174.92.0/22
IP: 2a03:1f80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:20:fe:dd:2a:62:fc:85:f9:49:33:10:e6:b4:c4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 09:56:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:fa:76:47:c3:35:0d:02:53:94:18:8e:6e:
4c:ff:d2:43:4d:9e:31:5a:9e:5c:96:6e:7f:c9:fc:
0f:cd:48:97:85:42:18:ea:c4:8c:52:88:0b:48:b2:
64:c9:e7:5b:5a:7d:42:18:4a:09:f1:86:aa:3c:44:
b1:80:82:a5:c6:75:04:e0:91:ac:4e:08:d8:58:d8:
7f:0b:e9:8b:fe:d6:50:d3:fb:03:d3:41:a4:fc:d0:
47:2c:38:a1:c3:d6:10:15:bd:3b:a2:8a:0e:51:58:
28:79:25:13:75:3a:ba:2c:9c:cc:4c:75:69:56:35:
00:b4:d2:35:90:a6:00:ee:09:70:9b:a9:7c:b4:e6:
ea:4a:1e:c9:d6:28:45:7e:9b:e3:42:1e:95:8d:44:
03:89:de:4c:ca:ef:23:8f:83:f5:97:84:33:9b:9f:
aa:a7:37:cf:9e:46:22:1c:9e:79:5f:d3:0a:98:1a:
f3:43:a8:2d:ec:09:d8:ea:7a:d5:8f:eb:ff:cd:08:
ab:cb:29:25:7e:d3:3d:be:f8:b3:e4:c3:17:5f:8f:
6a:b8:3b:d8:25:44:2f:d3:eb:b6:12:c8:e5:83:3c:
71:bb:46:81:eb:a3:2b:2b:20:77:98:90:5e:22:03:
18:33:18:37:76:67:87:e3:08:58:cf:50:ab:d7:d7:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.16.0/20
185.174.92.0/22
IPv6:
2a03:1f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57188
Signature Algorithm: sha256WithRSAEncryption
67:67:17:46:ea:a9:4c:6e:03:18:99:57:a2:64:7c:51:6b:58:
1d:e2:47:6b:8b:27:b4:06:27:b2:35:79:56:35:03:43:bc:f6:
07:fe:3b:5c:60:39:4c:fd:d1:63:56:66:96:73:e2:e2:a6:54:
c7:c6:79:e9:0c:df:87:ca:41:2d:41:ac:f2:d9:26:84:a3:c9:
dc:11:99:28:da:00:78:8d:24:79:3d:75:ba:f1:95:13:40:b2:
fe:88:01:ce:0f:33:df:80:92:a1:c4:a9:cc:2b:94:93:43:5a:
88:e2:94:70:a4:77:96:f1:bf:ec:00:bc:a8:8a:ce:a2:a5:ee:
88:f8:0b:ea:9f:a0:31:cc:ed:78:55:19:11:2d:3f:75:fc:6a:
43:4e:e7:9b:47:be:05:b1:0b:fc:ef:e0:0e:57:8b:ed:9f:ba:
71:fa:ee:f3:4d:cd:c7:e7:ae:b8:a7:b7:dc:d8:90:d4:f4:1b:
13:a6:4f:c7:5c:3c:64:87:8d:c0:1b:e7:d2:d1:ea:1c:4b:4e:
88:a5:6c:56:33:69:ff:dd:f3:f8:03:cb:10:b8:ef:4a:fe:df:
23:ad:14:53:bc:99:2d:e8:9c:03:63:bf:cc:25:22:8b:21:42:
5b:00:db:d6:1c:f9:ef:94:3e:42:71:5e:ee:32:fe:d1:0b:c2:
e9:57:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:26:47 2026 by rpki-client