Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AOOwVedsnogccp7gEWSlhwsrpMk.cer
File: AOOwVedsnogccp7gEWSlhwsrpMk.cer (raw, json)
Hash identifier: IqnIZ2q5zGRNhAbiyVhUT5/U0oXPVj1XM1xiudWTHvQ=
Subject key identifier: 00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA461CEC5549978E1C4D66B4ED387F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.233.80.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:46:1c:ec:55:49:97:8e:1c:4d:66:b4:ed:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00e3b055e76c9e881c729ee01164a5870b2ba4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:f9:6e:a2:3a:f1:7d:85:4b:15:62:66:6a:
7b:af:69:0c:83:38:eb:4d:f9:d2:7f:0a:df:27:f6:
fc:81:0c:18:0f:d1:69:28:d0:ee:04:24:db:9b:53:
2c:a4:a1:05:bd:a4:48:0c:51:72:88:05:db:12:36:
b0:7b:3c:7d:d1:98:4a:28:19:1b:ec:54:35:18:9d:
c9:09:5a:df:36:cc:96:54:49:9a:f4:b1:28:50:dc:
56:7e:03:25:16:77:ac:87:3d:83:d2:87:3b:24:5a:
9d:83:0b:71:da:2a:31:5c:8a:ff:1c:cf:5d:98:7a:
f3:69:d7:43:9e:b2:ae:79:0f:3f:f1:5a:f3:fb:3e:
c9:7e:74:b1:5f:51:14:f5:67:93:f2:d2:99:be:84:
9c:8e:85:06:27:17:27:eb:03:56:86:81:57:7f:7e:
2e:0f:42:f9:de:c9:3d:df:30:51:8f:ff:24:49:5b:
8e:93:7e:da:4d:2a:73:e7:2b:01:ee:7a:b3:a4:51:
78:df:0a:a5:c9:4b:8d:0e:73:4d:59:10:87:14:f4:
f4:43:02:e5:22:5b:84:e5:5d:aa:3d:6c:6d:65:4b:
d7:96:c3:54:0c:f0:56:7d:54:54:c5:01:ae:be:a0:
f8:a3:e8:fd:dd:7a:ec:26:21:c2:51:62:79:a5:b7:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:B0:55:E7:6C:9E:88:1C:72:9E:E0:11:64:A5:87:0B:2B:A4:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/AOOwVedsnogccp7gEWSlhwsrpMk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
78:0c:b6:95:74:2f:62:d5:66:2e:40:cd:e1:d1:2b:83:1e:3f:
bb:cd:70:f6:8f:dc:9d:67:2d:77:fa:e3:27:5b:cc:1f:1c:38:
41:70:6f:ff:52:e0:34:3f:55:58:cd:ea:14:47:af:04:f2:48:
dc:ef:fe:8d:b4:18:f7:63:c0:dc:be:f9:81:56:de:fa:b9:9c:
c5:71:98:54:9d:59:0f:78:5a:1c:6a:52:51:75:91:dc:53:ba:
f2:1b:8e:38:06:ee:62:0d:67:b3:89:00:1c:30:3e:0d:3f:a7:
fa:8b:bd:16:13:8d:ed:74:9c:6a:88:05:54:63:6e:2a:e6:74:
b2:de:e5:3a:ea:57:38:5e:5d:d5:91:96:6a:eb:76:87:61:f0:
6e:8d:5a:28:1f:82:85:72:4a:a4:26:07:61:ed:30:20:5a:0d:
c0:e6:61:48:1c:b0:dd:e7:07:2b:6f:db:c6:1a:17:dc:55:4b:
5a:d5:d3:b4:d7:11:9e:82:11:89:b7:a8:55:eb:c2:b2:f9:aa:
ee:ef:d4:bf:8a:c8:99:7c:92:27:78:c9:29:a7:41:80:ed:fb:
bf:3f:e0:d7:0b:75:6e:58:a8:bb:5a:cd:9a:40:c4:7f:ac:12:
d7:0a:96:fe:06:e9:db:78:ab:b2:62:5a:dd:76:87:61:e1:56:
26:37:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:35 2026 by rpki-client