Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
File: 9OobD89CmqOLUtkXHOfJI8qKrIE.cer (raw, json)
Hash identifier: LzuhKImA6HSCJdqtKxJF1Z6eM+yTtFx1iIPXTph6SEc=
Subject key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9D9465CCFD15792178F1E9A72FBE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35393
AS: 44756
IP: 37.0.72.0/21
IP: 46.21.192.0/20
IP: 62.100.128.0/19
IP: 78.41.232.0/21
IP: 81.93.240.0/20
IP: 91.191.144.0/20
IP: 94.247.176.0/21
IP: 185.67.152.0/22
IP: 188.130.0.0/17
IP: 193.47.184.0/24
IP: 195.14.0.0/24
IP: 195.114.18.0/23
IP: 2001:758::/32
IP: 2001:900::/32
IP: 2a00:cb80::/32
IP: 2a05:f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:d9:46:5c:cf:d1:57:92:17:8f:1e:9a:72:fb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:93:32:08:eb:16:36:d1:4f:b8:e6:90:5b:
53:d6:ce:d7:e0:16:b0:38:33:84:2a:0b:a9:bc:80:
71:db:10:4d:2a:82:a4:74:bb:67:51:b3:9f:c8:05:
95:16:2f:a5:6d:45:e8:67:d8:8f:d0:bd:9d:c7:06:
1b:b3:3a:d0:2d:5f:4c:95:9d:af:94:74:54:e4:82:
41:bf:a9:b8:b3:4c:c9:fe:60:4c:fd:95:38:bf:77:
31:4c:bb:03:cd:eb:37:7c:e6:92:6a:79:eb:d0:5d:
75:91:77:3f:37:ca:2d:27:0d:8a:44:a5:ca:a8:5b:
e6:c9:1d:2e:74:8a:00:be:24:b5:70:54:5c:ee:cd:
12:8b:a4:03:6d:a1:f0:b3:31:81:99:0b:1f:68:1d:
b5:15:21:d4:ed:73:9e:7b:f2:61:ab:a2:6f:ed:a9:
2a:5b:de:8b:00:de:21:bb:c6:2a:6a:e2:b6:ad:32:
2c:cf:81:5f:d7:db:0c:6f:51:9b:ac:9d:56:0a:80:
e5:c0:a3:62:9a:71:c1:0e:e2:e7:31:4c:86:b8:e3:
64:55:52:de:62:03:83:89:2c:b8:66:c9:b0:77:89:
13:7b:15:c4:c1:ee:cb:d8:e8:8b:a9:9e:5f:02:1e:
3b:54:c7:0b:f6:20:8f:f7:d6:7a:7b:68:a0:1a:da:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.72.0/21
46.21.192.0/20
62.100.128.0/19
78.41.232.0/21
81.93.240.0/20
91.191.144.0/20
94.247.176.0/21
185.67.152.0/22
188.130.0.0/17
193.47.184.0/24
195.14.0.0/24
195.114.18.0/23
IPv6:
2001:758::/32
2001:900::/32
2a00:cb80::/32
2a05:f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35393
44756
Signature Algorithm: sha256WithRSAEncryption
86:51:94:a4:73:4d:ea:5a:26:ab:73:a3:44:af:65:f7:16:8b:
39:d8:d7:b9:1b:46:79:00:65:34:94:f8:4f:fd:63:8b:3a:60:
e4:00:44:ca:e3:ff:58:87:cc:6d:3a:73:f8:3f:09:7d:7d:06:
16:fa:d2:67:1b:58:64:22:3a:c0:aa:61:50:c0:83:05:56:86:
78:2d:ec:15:9a:c3:98:ca:95:f1:f7:d5:d3:36:01:6e:d0:3d:
f0:2d:7d:ac:16:f3:64:e8:a1:1e:da:58:3d:8f:49:40:1e:ac:
ae:e5:f9:42:47:a7:21:ea:21:1f:61:1a:d1:c2:f6:a7:08:ba:
f7:48:6f:99:b0:fe:c8:d3:ac:3c:fa:8e:13:c4:e8:28:71:ff:
3e:07:d1:8f:60:cf:c9:01:f6:64:73:94:94:a5:f6:58:f3:b7:
46:a3:06:9d:92:39:ce:15:ee:20:b6:8b:ef:4d:a6:ee:11:49:
37:1b:fc:83:cc:c4:65:90:fc:88:2a:44:bc:f7:f0:ae:7d:46:
44:1a:41:18:55:0e:a3:9d:1e:c1:8d:fd:4b:fd:17:a2:28:bc:
83:84:42:75:25:66:d0:d5:01:ae:89:db:b6:45:08:a9:66:93:
ec:26:db:b3:28:99:7b:d4:b2:89:e4:66:7c:06:11:2f:ca:0f:
7c:57:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:32 2026 by rpki-client