Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.cer (raw, json)
Hash identifier: LvYS/ncyrwcZhe3e1XqOBoYygFLD3ojNxZo3REvaFVs=
Subject key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1349C7D289E7F70C545DD55F44CE89
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.216.156.0/22
IP: 2a0b:b940::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:49:c7:d2:89:e7:f7:0c:54:5d:d5:5f:44:ce:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:3b:00:08:0c:4e:af:ed:16:72:d4:ce:fa:
e5:d8:1d:4d:24:e2:47:55:11:71:37:08:fa:52:9b:
23:d0:47:a0:ae:d9:ef:9e:4b:14:90:18:0d:72:32:
85:bc:ba:fa:a0:a5:ee:34:f6:c2:08:65:32:71:58:
04:ae:ee:e5:4e:7d:bd:fb:60:3e:c7:9a:97:aa:08:
64:a9:00:e1:f5:65:b9:b5:27:2a:77:1d:e5:8d:45:
40:bb:d2:ab:52:c0:6d:5b:b6:70:ca:a8:22:b9:12:
21:41:61:ad:f1:d5:77:99:8a:df:77:ca:7d:c7:08:
80:dc:0f:f0:6c:41:76:77:1c:2b:8e:e2:80:a5:e4:
73:1d:d9:33:d7:61:6a:dc:1a:d9:e0:be:6d:3f:1b:
33:0d:b7:0e:a6:6e:47:46:7e:0c:fe:64:82:18:ff:
c0:d8:67:40:9e:c7:6c:d7:3f:bc:80:a3:a3:e4:b3:
db:f7:a0:0c:04:c6:bb:bb:a0:16:72:f6:1c:d7:d1:
f1:48:c8:9a:28:3e:6d:b9:87:fa:46:ec:46:7e:a8:
90:66:9c:b3:28:bb:60:cf:3d:d6:6c:a6:d5:64:9d:
ce:e7:b6:de:f7:35:fd:2c:4d:5d:27:69:4e:96:90:
28:2b:6b:2c:e1:b2:95:bb:ce:06:e8:a9:38:e9:cc:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.156.0/22
IPv6:
2a0b:b940::/32
Signature Algorithm: sha256WithRSAEncryption
7e:03:35:e1:07:47:cb:86:6d:05:a9:4f:7f:97:45:68:a6:6b:
80:e4:ea:d6:9c:71:ab:81:5c:be:4e:ed:f8:ee:41:bf:92:cb:
19:6a:2a:08:1e:b3:a0:ee:25:92:cd:a1:57:92:22:e3:b6:ea:
d6:a4:78:02:5f:55:cd:99:49:81:aa:ee:cf:11:ad:03:73:ce:
e0:a0:25:7e:29:0b:b1:fe:c4:9f:dc:bc:69:3f:ce:33:a8:47:
b1:89:6f:c6:66:b6:5f:1c:fb:b0:42:c2:f8:97:5d:6e:ab:bb:
af:c0:70:3d:eb:98:c9:b4:15:26:8c:a6:96:39:4e:e4:d0:35:
16:09:dc:66:19:71:61:cb:ea:f1:bc:c4:90:47:23:3e:a2:b0:
11:82:3b:2f:c3:07:cf:a9:64:a4:08:8c:05:76:58:15:99:52:
37:da:f9:07:e5:ff:32:61:67:1b:b2:77:89:b0:97:fb:e8:26:
ee:b1:7b:f9:f0:0e:a6:17:0e:b7:d8:f1:5f:47:95:53:d5:b7:
f9:93:14:f7:24:6e:d5:e0:46:83:c8:3b:6f:52:14:5c:27:c8:
15:51:b6:56:53:ff:be:53:4b:94:f3:95:92:f4:63:f6:07:fe:
e2:ec:e9:19:84:a4:a0:ea:b1:b3:d9:49:64:fe:6b:ac:08:7e:
07:d5:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:24 2026 by rpki-client