Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
File: O8o0owNBd9CEM40zsIm34DzKOoo.cer (raw, json)
Hash identifier: osShgtgnuWc70l0bZg3xzQ79oOi6GE8qJupdLss73PE=
Subject key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC80D5D6B1391DFE224CA8451FD362C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:18:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13289
AS: 29624
IP: 82.212.192.0/18
IP: 185.111.32.0/22
IP: 2a00:cb0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:0d:5d:6b:13:91:df:e2:24:ca:84:51:fd:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:6b:3c:91:00:dd:e2:b9:45:20:95:40:c3:
37:c2:73:a6:68:f0:c9:b7:bd:b9:64:3c:56:ec:e2:
b7:96:d8:85:11:8b:52:8f:bc:7c:4b:ea:a2:a0:f8:
59:59:bd:ac:c0:39:ab:7b:54:c6:22:50:a8:be:9e:
79:29:69:83:9b:a5:90:bb:0a:15:7a:82:c1:af:12:
74:5e:c3:db:a4:cf:65:94:bc:4f:65:50:93:38:93:
6b:e8:7d:13:c3:1f:76:45:a8:55:15:c0:0e:18:b1:
6f:d7:f5:e2:a2:2f:dc:63:62:11:c4:f8:68:01:db:
98:8a:e0:3d:ee:ad:e2:b4:82:7f:a8:85:ed:51:93:
98:aa:d8:6f:3a:7c:fc:87:7b:d6:b4:bc:80:eb:d6:
ce:43:69:5e:76:98:5a:be:08:de:da:7f:ae:76:49:
4a:83:f5:40:60:b5:8a:3e:ef:11:b2:01:9a:3b:23:
ad:8c:62:19:65:e1:77:0c:26:4f:f1:08:1f:f7:68:
63:dd:38:fc:f9:7e:b5:46:a4:0c:1a:bb:45:4c:d8:
83:ce:cd:69:a5:9c:e9:36:b1:36:fc:a5:41:69:c1:
22:ae:5e:97:8b:71:af:0c:93:e1:9a:c9:55:69:b2:
50:40:cd:36:1d:31:6a:4a:50:92:2d:e3:d2:6a:a6:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.192.0/18
185.111.32.0/22
IPv6:
2a00:cb0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13289
29624
Signature Algorithm: sha256WithRSAEncryption
20:f9:22:3e:7b:8b:33:c5:57:7e:f3:4b:73:c2:78:61:b8:97:
ae:bd:68:1e:47:9c:41:b9:07:71:c3:a5:b1:18:cf:8f:86:e1:
02:d9:86:f0:54:6e:bd:41:66:4a:81:a3:a5:2a:1b:7c:a4:f9:
8a:a2:be:a5:8f:34:a2:47:60:7b:36:59:71:f4:20:61:ed:da:
a9:7a:6b:db:cf:b1:fe:9a:0c:86:d8:4a:86:5d:19:79:e5:61:
c2:ac:aa:9a:c1:b3:8c:77:1f:db:57:e7:ee:5b:46:48:82:b1:
e4:21:bd:2e:8d:23:ce:e1:82:46:54:d5:46:b9:8f:ca:8e:fa:
90:f5:86:e0:b6:fe:8e:ac:6c:d5:d5:cb:23:e9:9e:fa:dd:3b:
0a:45:8b:81:f4:04:0c:f8:97:be:94:4f:3b:09:6b:56:09:3c:
e8:2b:66:34:f0:01:30:5f:b9:78:b4:ab:6d:19:8c:2a:d1:8b:
9c:31:dd:bd:a8:cd:46:86:3d:00:e4:fe:c7:69:04:96:2c:fa:
70:0b:7d:47:0a:67:00:83:d8:e7:96:01:35:bf:60:f4:2d:aa:
05:b6:e8:fb:e1:31:18:49:62:98:c2:51:2d:e4:0b:e6:e1:2d:
e7:61:fc:c3:44:40:95:13:86:44:8e:32:10:6d:62:60:92:11:
24:51:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:11 2026 by rpki-client