Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
File: C_O8-guoLZPRT4VYcCen53NRGmE.cer (raw, json)
Hash identifier: KmyaGI6BxjZ1sl++LEoaCtxvO4kaz0GCPJ2JDfEUQNQ=
Subject key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834B4E7B07FFF4A8DBFEF92D7B633BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:17:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.142.244.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:b4:e7:b0:7f:ff:4a:8d:bf:ef:92:d7:b6:33:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:2e:e7:c4:3c:72:06:d3:ee:cf:a8:b3:4a:
4a:56:2a:92:3f:f7:83:45:83:8a:64:d1:fb:30:0f:
0e:b5:63:c9:cd:0c:99:ac:4e:f5:8a:88:20:82:b4:
d3:86:2e:2c:06:5f:83:b3:c8:0a:cc:4d:97:82:e8:
7c:f2:70:2e:df:b4:df:7f:eb:5d:8c:17:d7:cd:ef:
b7:d0:8a:97:b6:34:b9:ce:c3:78:32:04:66:61:07:
3c:a3:51:e1:30:f0:13:1d:0a:12:ea:8f:10:22:5e:
bd:fa:e2:66:d9:c3:db:5f:c3:ca:09:65:1a:d5:c4:
96:a7:53:d1:5d:26:5e:e3:04:54:68:28:f1:f9:b2:
6b:7f:55:03:f6:25:6f:d5:0d:ce:48:40:0b:71:c6:
0f:d6:13:a7:51:4d:33:1a:38:64:ad:a7:c7:22:5f:
d4:04:d6:59:e4:4a:d0:11:01:d5:c2:e0:c7:3d:1f:
7c:f8:4d:10:d1:3e:f2:8c:99:fa:c8:d3:e9:80:67:
ad:41:9c:80:fc:f1:dc:33:04:8d:4b:4a:63:50:99:
5a:0b:e9:fa:12:56:d4:99:c6:40:57:e9:69:f2:7f:
60:8a:48:89:68:f7:09:b6:ba:f6:b1:89:f5:e3:2f:
1d:07:4f:bf:97:85:af:f5:d2:f6:f4:ec:53:e7:f4:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:99:42:f2:86:62:52:d2:db:5c:1e:71:5d:3d:5d:23:18:f2:
42:d6:bc:ca:e8:9c:5b:fb:80:8f:7b:1f:5a:d2:59:05:94:5a:
fa:8e:b8:08:15:a8:3c:c5:f7:27:0b:fe:06:d1:ef:c1:7a:94:
dc:6d:2e:af:9f:be:b4:9f:a0:2b:b2:0c:e5:50:58:8b:59:8d:
31:c1:b5:01:d3:e3:b8:60:c1:4d:c3:83:9a:3e:0f:bc:20:6d:
b9:28:e9:7f:5d:eb:6b:43:a9:b3:7c:14:ef:11:cc:7d:96:c7:
3e:cd:03:a5:27:2d:92:02:d5:42:7e:60:4f:57:ab:39:98:9f:
3d:02:78:97:bb:6c:99:c1:50:8f:27:8d:73:66:c7:5c:1e:ba:
dd:1e:c6:7d:67:99:d4:7d:63:ce:c4:93:40:99:fc:dc:00:0d:
e1:9a:19:d9:3a:40:d2:98:f7:e5:8f:72:71:75:13:ce:0e:1f:
5d:9c:fc:52:ac:2a:35:67:c7:ed:6d:5e:03:8a:2f:31:66:83:
a2:05:25:cc:35:ec:a0:70:a5:19:08:7f:d8:7b:68:58:0a:d5:
84:f0:02:d9:47:ea:27:18:6f:10:67:11:66:d0:9f:75:b9:b0:
28:77:50:64:05:96:71:b5:72:38:2d:88:70:7c:e8:9e:5e:d1:
d0:ad:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:11 2026 by rpki-client