Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
File: 8okKqmI_iRMlIMqknt14C4WW2qA.cer (raw, json)
Hash identifier: rhTfoQiVbK5NqesMl9m4MCbmdkFApH0Jf5PH+Wrerq0=
Subject key identifier: F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C861F17A87F820CFA33836007E65BEC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 09:10:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 158.223.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:61:f1:7a:87:f8:20:cf:a3:38:36:00:7e:65:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 09:10:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2890aaa623f89132520caa49edd780b8596daa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:b6:8e:95:a1:08:a7:b5:5a:ac:1d:b0:2d:
86:66:74:7a:a0:cd:2f:fd:74:b7:fb:d5:6f:ae:45:
92:fe:c3:45:d0:6f:e5:8c:6c:c9:e0:f2:42:98:90:
8d:00:ea:9b:99:40:f2:ba:dd:79:4b:26:42:ac:b2:
18:a8:c3:7a:b0:d0:94:cc:36:e5:42:90:a3:74:ae:
d2:80:ea:16:f3:14:fe:8c:7d:a2:17:26:25:28:0a:
48:2a:de:43:de:73:d7:d0:78:2a:a1:f7:98:4d:dd:
dc:8a:35:8c:88:61:52:71:4e:8c:2b:fd:6f:ea:23:
7c:ca:bd:f1:1b:f6:4d:62:2c:18:4f:8a:d6:ed:68:
f3:0d:b9:48:ed:00:7a:02:0a:38:55:61:6c:12:20:
f0:56:db:2b:ec:2b:08:82:da:33:2e:67:3d:28:9f:
67:1d:9b:c4:31:49:c7:6d:d1:57:54:d7:f5:9e:fc:
28:58:f4:09:c7:42:97:28:14:0c:bb:24:88:0d:b1:
98:71:70:a6:c1:ce:41:d1:d1:09:7b:be:a5:27:b2:
d6:ea:09:dd:8f:39:4c:a5:e8:cb:18:ce:c1:7e:1f:
56:29:18:ec:ca:06:48:2d:30:2c:8a:db:57:f7:39:
8c:e4:52:25:5e:19:c9:46:a5:c9:a6:51:5d:1a:29:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:be:06:d8:a7:4c:fa:18:cb:8e:95:1f:74:41:91:3b:f1:25:
1b:d0:f9:ca:2f:ef:bb:78:b8:e1:64:9b:9c:e7:00:7c:52:78:
e9:cd:49:d1:1b:3e:8f:26:c2:0d:ce:c5:95:77:9d:53:3b:9d:
f6:da:c9:2f:3f:35:65:ee:d7:5b:3b:0f:70:13:23:4b:ae:22:
75:04:71:42:ee:da:62:ae:49:6c:d1:f2:c4:ff:a7:e7:af:d2:
88:96:9d:57:48:90:d9:6a:2d:ca:0d:52:dd:5b:49:d5:34:01:
11:16:38:8f:11:6a:c1:07:89:e5:05:e1:8d:bf:c2:29:5d:6e:
46:61:13:87:a3:7c:77:08:c9:50:f7:d8:6e:9d:aa:d3:7c:a7:
5f:73:24:11:32:b1:81:73:8b:f4:94:af:aa:c8:41:3a:12:f0:
94:d7:ca:3f:05:86:0a:b2:d2:f8:2e:f0:98:8d:ff:53:44:f6:
0d:ee:9e:09:77:27:83:7c:e5:02:6e:16:4c:85:c8:1e:e3:6a:
4f:d3:c4:0c:c3:3a:21:13:d5:16:32:80:b4:81:e8:32:b9:0a:
02:64:61:6d:84:ad:89:8d:93:9d:ac:33:eb:e6:a9:35:84:3c:
aa:32:6b:a7:b8:84:ab:b8:c3:7a:f2:e9:2d:7e:30:a3:42:15:
d6:a3:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:21 2026 by rpki-client