Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ConodBYCObrwmOLj3QRnPovIL_0.cer
File: ConodBYCObrwmOLj3QRnPovIL_0.cer (raw, json)
Hash identifier: dJcHpZt51tmWDElrW4M2N3vq7v+/0RonSTn3VhO2pyg=
Subject key identifier: 0A:89:E8:74:16:02:39:BA:F0:98:E2:E3:DD:04:67:3E:8B:C8:2F:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A048BE611DE1701FD76C9D093277F69D58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Aug 2026 14:20:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206432
IP: 185.186.156.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:be:61:1d:e1:70:1f:d7:6c:9d:09:32:77:f6:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 14:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a89e874160239baf098e2e3dd04673e8bc82ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:75:66:e2:13:e9:0f:a1:02:8a:ad:be:65:
d0:22:34:e9:e1:a0:d7:c5:82:c5:e5:e7:9f:23:de:
a1:c7:64:5c:a6:d5:b7:dc:47:07:23:93:2a:e9:c2:
0e:9f:cb:7f:15:02:30:f7:a5:e8:92:10:37:43:2f:
e3:0f:d0:62:fd:2e:7d:a8:60:ee:59:5f:70:47:f4:
85:60:29:4f:a6:73:49:45:6f:27:a6:32:0d:0a:79:
89:46:00:3e:90:6e:0b:9f:18:ef:93:e8:77:65:5d:
d6:bd:ae:00:5f:f3:95:9e:55:ee:62:52:87:d1:e6:
85:4c:8b:2c:9e:71:bc:22:e1:c9:7b:3f:9d:50:85:
33:07:af:b2:d5:82:ce:bd:b8:c6:8b:a4:09:68:03:
c6:8a:b8:8d:fe:11:82:a3:66:ea:b5:1b:5e:a7:21:
61:15:e4:1b:34:ff:8b:e1:2d:69:15:90:49:bc:e1:
de:00:e4:48:70:93:14:77:73:49:18:67:95:b4:df:
a4:62:80:30:8e:56:7c:9b:f1:0f:67:44:64:b3:dc:
9b:89:ed:c2:03:25:d1:2d:ef:e1:9f:46:af:a3:5d:
54:c4:46:2e:8f:b6:94:7e:c7:2d:df:cb:f7:73:79:
11:3f:df:6c:10:01:fb:94:0d:ea:2d:53:6d:58:41:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:E8:74:16:02:39:BA:F0:98:E2:E3:DD:04:67:3E:8B:C8:2F:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/03aad0-9be8-42b3-b412-35f4e352ce9e/1/ConodBYCObrwmOLj3QRnPovIL_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.156.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206432
Signature Algorithm: sha256WithRSAEncryption
7c:31:30:b1:4e:eb:c6:3b:dc:9d:78:8c:5c:61:ed:b9:92:9d:
81:b7:29:0e:df:53:e4:b5:09:f4:7c:46:dd:77:b4:58:e7:7b:
b0:58:ff:44:61:f1:0b:b7:85:5b:ec:9e:7a:4e:4e:67:28:24:
18:7f:01:95:3c:0f:ae:da:12:de:74:a4:ae:76:2f:92:37:48:
2d:52:8c:08:ee:8f:01:f4:f2:15:04:93:22:3b:a1:5c:c9:e6:
82:f5:38:8d:c8:4f:23:c9:8d:8b:3f:c0:43:fc:d7:ab:82:7a:
b4:a1:36:08:3a:95:bf:b7:05:27:25:23:8e:ec:4b:70:2c:76:
b1:5f:e2:e9:47:e4:44:75:39:02:75:b0:54:d9:7c:27:76:99:
cc:e5:14:51:20:8a:7c:7a:0e:8c:75:e9:1d:d3:19:23:ae:b5:
cf:8b:14:c4:65:cd:ff:5a:af:96:e4:68:e3:99:2e:15:53:23:
1f:84:42:4c:8f:9a:da:c4:f3:d7:f0:ae:f6:c4:f0:bc:4f:62:
8b:c8:56:1b:ff:cd:64:93:4a:e0:1b:79:1b:7d:a7:31:39:fa:
67:21:f1:30:7c:4e:9f:47:50:20:ab:cb:9d:ce:71:c5:5d:8b:
f5:7a:78:91:05:66:30:db:67:e7:de:0b:55:d2:5a:4f:51:34:
54:0c:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:46:18 2026 by rpki-client