Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.cer (raw, json)
Hash identifier: Q5sK7wvFfnUqaAWL8Jc8v/dTbzkzs4PUX4kgQnn9y9Y=
Subject key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7910A9972BBB52EB635767044452DBE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44322
IP: 185.83.240.0/22
IP: 2a05:a000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:a9:97:2b:bb:52:eb:63:57:67:04:44:52:db:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:85:a8:fc:bc:7c:d0:1a:3a:ca:cf:2d:74:
7a:19:3e:25:ce:51:ee:0f:7a:15:89:82:79:de:f6:
66:72:6f:dc:9c:ed:8f:ad:5d:b8:51:04:1c:f3:07:
13:b1:d6:41:35:d6:b1:03:b1:2b:24:4c:e4:a6:20:
4c:24:db:1a:3a:63:d1:5c:46:32:0f:83:f3:5d:fa:
11:f9:5f:16:23:12:98:d9:0c:35:bd:b1:4f:3f:24:
a8:52:00:29:2a:f2:8f:c2:65:1d:d5:83:ee:5d:65:
aa:3a:e2:6f:26:b1:0b:3e:56:30:13:c6:40:3e:f1:
22:f7:b7:89:2e:85:b3:52:c9:9e:5b:17:b2:1a:3c:
40:fe:13:b6:86:81:ae:7a:8b:28:99:ee:d2:8e:b0:
02:c8:79:f5:74:58:e9:a2:a8:a6:6c:66:8f:ae:c7:
f8:13:21:c6:f4:9a:a4:8d:69:fe:c2:47:15:6d:15:
24:26:9d:22:f5:ba:f6:fa:5f:a0:d2:5d:fa:7f:63:
65:c1:0a:9a:c8:ad:60:a3:cc:81:25:8f:e4:39:29:
75:70:63:c2:89:af:55:15:5b:b3:00:0b:4a:1b:50:
64:89:e5:d5:98:10:34:41:14:83:29:7c:4a:7d:1f:
35:0f:c9:65:b5:53:31:12:df:a7:fd:07:25:3a:42:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.240.0/22
IPv6:
2a05:a000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44322
Signature Algorithm: sha256WithRSAEncryption
67:d5:b1:12:f5:57:5a:ec:f9:ec:cb:f1:a3:db:0b:f2:eb:31:
bc:0a:2d:2d:3a:db:f2:9d:1c:c6:36:99:01:f0:b3:c0:69:9e:
a8:80:ca:66:50:08:1e:eb:ff:c9:72:c6:fd:23:50:cd:db:05:
dc:92:aa:28:0c:5b:8a:c2:f9:72:0c:39:bc:cc:b4:11:54:53:
19:48:36:91:48:e7:a7:83:62:ab:42:a3:3c:db:99:32:dd:37:
29:00:71:42:1b:df:49:68:c2:19:72:d5:25:97:87:7c:0e:10:
66:0b:2a:6a:e4:4a:c9:1f:b4:57:3c:0b:9e:49:4c:89:1e:d1:
6d:5b:1a:27:90:87:6e:70:e6:c9:2c:cf:d7:cd:f3:34:af:12:
7c:a4:69:a1:65:eb:1b:ee:60:00:2a:e0:5d:9e:54:82:e5:b5:
af:3c:4f:a6:cf:58:cf:86:a9:70:b8:05:f8:e1:d9:99:f7:8e:
be:f6:b8:67:39:7e:99:40:a1:dc:ea:1b:94:30:c2:be:64:26:
00:73:92:73:6c:1c:f4:0d:b2:61:a6:40:99:1d:6a:b9:d7:d8:
f3:14:b1:b7:f4:01:cd:3c:93:c2:2e:7a:18:6a:52:cc:85:43:
81:9a:07:67:82:bf:f7:6d:c3:00:37:1f:86:b7:d0:c8:63:6a:
da:37:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:39 2026 by rpki-client