Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
File: O4RSPDky4tGYBGI0uWLg3FGr9YY.cer (raw, json)
Hash identifier: nK3OGNrWFmHJ/knN72hEaSvBEwJC5fCGz/ZEjOjVeoc=
Subject key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA377E7FE1C6AA90FED559502ECC4BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:17:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.201.204.0/22
IP: 2a04:c6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:77:e7:fe:1c:6a:a9:0f:ed:55:95:02:ec:c4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b84523c3932e2d198046234b962e0dc51abf586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:fd:18:88:47:13:e0:b9:c7:39:6e:f3:d9:
a5:27:42:41:ae:7b:1c:b2:e6:e6:6c:d1:62:86:48:
3f:3d:a6:85:c7:f8:35:7c:9d:ac:63:a5:d4:e2:09:
97:d1:af:df:c4:34:5a:e3:ae:73:83:bd:c3:78:eb:
9d:b4:cd:ec:16:40:3c:ef:40:f5:64:d0:9d:ed:43:
77:a9:b6:b7:cf:fa:4d:de:8d:fc:39:1b:00:df:2b:
ce:49:ae:08:45:9e:44:c7:cb:99:f0:8c:25:1f:03:
83:48:fa:25:4f:71:62:92:7d:ca:36:8e:dd:dd:ce:
6e:b6:3b:4e:ac:dd:ac:7e:07:f1:22:7f:f8:3e:1a:
51:2a:25:71:d8:6a:1f:97:f7:d8:dc:68:b5:bf:b2:
70:7d:7c:0f:dc:a2:9f:bd:e6:b9:28:cd:61:ff:b9:
7e:1d:23:08:9d:c6:8c:66:63:2c:b5:91:8d:90:90:
36:f2:44:cc:31:c8:b3:ce:9d:5c:d9:11:31:36:cf:
d3:68:42:98:b2:48:e5:c4:60:cc:1d:c5:b7:94:0e:
08:56:3f:3d:51:7e:db:2a:28:08:55:da:63:07:d2:
a1:b4:75:ab:b7:60:48:f2:f0:be:02:79:3b:63:c6:
2e:2e:8f:6e:02:3b:6c:41:85:0b:6e:29:14:3c:83:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.204.0/22
IPv6:
2a04:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:20:52:3b:36:e9:04:cd:7e:a5:5f:bf:49:e9:7d:bd:28:e9:
40:f4:25:92:b2:37:d8:ea:6f:7c:10:35:1f:71:d2:6f:ba:23:
96:b4:dc:ef:68:d9:ea:f6:ee:3b:f8:d9:5a:ac:2b:3e:de:c6:
28:a9:0b:73:66:dc:64:12:20:a0:83:5b:76:45:96:ce:46:c1:
aa:e0:9a:d6:be:09:36:02:16:7d:19:16:f8:8f:17:f7:49:ed:
d8:12:af:53:60:62:23:9b:40:fa:f4:c2:2c:aa:2a:24:ba:14:
49:ec:4a:b5:52:59:26:88:60:b9:43:34:4b:35:00:dd:36:f9:
37:fc:08:68:5b:57:b9:ce:e0:ca:c0:60:78:5e:db:ab:8d:ef:
8c:11:61:b2:3f:48:ed:6e:41:c7:ec:f8:7a:13:c5:98:b4:ee:
b2:6f:5c:97:d1:c0:4f:71:6e:18:f5:90:14:13:57:dd:6b:9f:
c4:77:89:71:d6:c5:48:8e:1e:60:1d:2a:5c:6c:8b:ac:c7:ed:
09:c8:38:c0:82:c3:de:63:c2:5f:17:93:2e:5b:ee:42:45:b8:
1d:4c:04:f3:08:9f:e7:84:1d:20:41:8c:9f:ef:e1:fa:bc:fc:
4e:0d:55:87:e7:d2:26:97:4a:a7:ff:8a:28:ef:ce:90:9e:2d:
93:1c:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:42 2026 by rpki-client