Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.cer (raw, json)
Hash identifier: VhSWmrUvUhOjzudaq8eVONxe3bzx72stpeKzym+dhEg=
Subject key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A36EA1C307E280972CD005D5C32404
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201466
IP: 2.57.108.0/22
IP: 45.134.152.0/22
IP: 185.73.168.0/22
IP: 185.160.168.0/22
IP: 185.222.164.0/22
IP: 193.36.144.0/22
IP: 195.191.48.0/24
IP: 195.242.72.0/22
IP: 2a03:4460::/32
IP: 2a07:bec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:6e:a1:c3:07:e2:80:97:2c:d0:05:d5:c3:24:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3be9593d290e0250278a73b313550329327bd589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:25:da:90:41:86:7a:49:64:cf:d7:e6:1e:4b:
99:c2:56:dc:85:03:18:f6:cc:67:9d:a1:ad:94:b1:
b1:dd:f2:4d:47:20:54:46:15:6f:bd:cf:6b:dd:9e:
c1:9b:6f:bd:ad:95:68:64:41:ea:d2:5e:6e:04:52:
b6:c7:d6:18:a8:43:be:76:fa:8a:9d:fc:09:93:a0:
71:51:76:60:49:8c:7e:3c:25:a8:b7:f5:67:ea:4f:
53:02:10:f1:8f:c0:18:37:14:95:fc:b3:6e:35:65:
2d:ae:7e:de:84:85:93:e1:84:52:29:a8:20:52:25:
e3:6b:4e:6c:d9:ef:0d:3e:a0:c2:f3:1c:c5:58:48:
8f:dd:f5:33:f5:98:82:b8:c4:84:8a:e5:3b:01:95:
32:9f:e3:83:15:0e:00:47:a9:52:58:92:02:d0:6a:
6c:2e:74:09:00:67:02:d3:92:fd:7b:85:f5:1e:7b:
64:9d:2a:72:5c:f8:dd:8c:31:0b:07:4d:1e:56:df:
5d:47:49:ae:f8:30:31:02:b1:10:3c:1a:cc:a3:d1:
71:75:a7:30:a5:ad:fd:70:1f:ac:d7:92:e1:0a:0c:
1a:43:6c:09:15:b5:c4:3b:e8:d0:fc:88:77:bd:66:
ea:5f:40:23:3d:fd:01:60:fa:a2:de:3c:ff:df:a5:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.108.0/22
45.134.152.0/22
185.73.168.0/22
185.160.168.0/22
185.222.164.0/22
193.36.144.0/22
195.191.48.0/24
195.242.72.0/22
IPv6:
2a03:4460::/32
2a07:bec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201466
Signature Algorithm: sha256WithRSAEncryption
80:f3:68:da:ff:54:f5:73:f6:32:b4:04:be:cc:4f:84:72:e0:
40:32:a3:3d:0a:1a:5a:8c:98:2c:10:49:ac:ee:21:b9:17:54:
9d:c7:68:95:36:6e:de:7b:d0:ba:d4:5a:f7:f1:8e:8c:79:4e:
a1:68:26:73:a6:c6:72:59:7b:b5:db:1d:49:7d:6d:d8:35:5e:
33:eb:3e:e3:60:c2:b3:cd:19:83:2c:17:a9:34:0e:29:85:bb:
5e:69:02:9f:d2:db:e5:a0:11:d7:e8:e6:39:98:be:fb:6f:f9:
1c:3c:92:ca:3d:e7:a9:96:a7:d8:f4:62:5e:67:c7:55:15:00:
9e:ff:e1:33:13:e5:d9:b3:ae:b4:88:75:35:6b:a6:46:04:4d:
54:8e:14:41:a0:de:36:b6:90:6a:57:35:2a:86:e2:41:a5:c7:
8e:f2:df:57:c9:24:d9:72:12:a7:cf:1e:e3:c1:de:23:ab:0d:
01:56:bd:1a:32:c5:c5:f5:4c:10:6b:9f:47:fd:38:07:4c:06:
a6:b8:1b:b9:05:59:8a:f2:85:2c:9a:fa:99:e6:98:dd:7a:a7:
a7:40:48:46:dd:55:5f:3b:1c:94:2d:25:f8:7c:a5:37:d0:b2:
ee:1a:45:6b:2d:86:3c:fa:aa:42:4c:1b:70:35:6c:90:78:cd:
cd:59:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:02:33 2026 by rpki-client