Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
File: O1T6YLMnoIA9yF6XCpt2pFFM614.cer (raw, json)
Hash identifier: 7wq5wlluylrXN1tWYJ2uq9PyG273Ghs6PEc+aKpSH50=
Subject key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE4AF61FEDFCE57320B722317D499F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206469
IP: 62.106.71.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:4a:f6:1f:ed:fc:e5:73:20:b7:22:31:7d:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:f5:0a:75:93:42:92:2a:e7:01:54:4c:54:
6c:33:53:cf:32:25:89:27:00:87:9d:7b:b7:eb:57:
73:fe:01:9b:3f:61:e6:5a:23:0d:50:63:ed:02:65:
73:5c:56:bb:c6:61:79:16:4c:de:81:00:be:a9:0e:
3a:7c:86:8b:13:84:1b:92:78:a7:12:25:36:2c:5b:
fe:5b:b6:fe:72:8e:58:6b:76:b5:73:d9:8e:35:07:
60:3c:49:1b:48:94:94:4f:66:34:5c:75:54:9e:f7:
61:f6:ca:12:3c:1a:64:d5:64:8c:32:ef:ec:af:1a:
19:a4:24:39:b9:40:b1:71:0a:70:9f:ea:53:73:ae:
0e:03:39:c8:fc:7a:0f:e4:81:91:f6:e6:e9:59:f3:
8c:a4:13:6c:25:4b:cc:2a:18:06:76:e3:06:36:25:
09:96:55:9f:35:fb:76:48:3e:18:49:1f:f9:f1:68:
83:b3:80:a5:01:3e:f5:4a:6b:8d:6d:a0:d2:c3:34:
10:28:37:b6:c5:31:03:0d:15:b3:ab:40:85:53:8b:
10:33:ad:1f:a7:49:aa:fa:4d:23:06:8c:12:61:83:
f1:17:1f:aa:db:7d:32:84:91:82:d9:a8:ff:9f:6a:
6a:a0:c9:0b:4b:fa:04:33:03:13:f1:b8:b3:0e:11:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206469
Signature Algorithm: sha256WithRSAEncryption
af:ca:2b:bf:76:c6:12:fa:e5:09:31:22:48:53:68:26:21:81:
31:82:74:fd:11:a4:d6:5b:74:2c:3e:93:48:02:18:c0:19:f7:
2f:4f:77:5f:0b:36:de:25:0a:54:03:9c:ce:c9:54:fa:bb:df:
a7:ad:5a:18:59:79:b7:37:87:f4:86:4c:7b:a8:63:81:55:d7:
46:94:3f:f6:c0:5c:99:6a:e5:db:e8:7f:cd:51:0a:3c:9d:5d:
0b:be:48:9e:25:cc:66:8e:65:56:ca:50:8a:e7:9d:fe:10:74:
f9:31:49:2b:fe:0a:ab:af:b0:f3:38:8d:da:ce:6b:78:80:5f:
b0:05:d6:46:14:7b:57:c8:32:5d:c4:43:78:ba:41:19:ae:86:
71:fa:d7:c2:ca:00:33:04:41:cf:96:4a:5c:d4:db:21:49:6e:
0f:63:64:ba:c7:50:e2:3d:c8:a4:36:7a:ef:d7:0f:1e:40:17:
0c:b2:a3:73:bb:dc:a9:b9:ab:f0:9e:5c:d6:e9:85:0b:f1:ec:
4d:38:6b:cb:7e:6a:16:08:dc:0a:32:d4:70:86:0f:d3:29:96:
0b:b2:4d:c5:46:c2:e0:d9:9f:e5:9b:17:23:65:9f:69:41:af:
06:9c:90:32:1f:dc:10:14:fa:b2:8a:be:9c:d8:5b:c0:8e:a0:
4f:89:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:18:29 2026 by rpki-client