Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer (raw, json)
Hash identifier: G6hAF72mscI9sMQY+6rND2XoQflHD6XGF8cH3tHvlZ0=
Subject key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A228EBFB697F4ED1B765236E2BFAF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210767
IP: 188.64.139.0/24
IP: 2a11:fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:28:eb:fb:69:7f:4e:d1:b7:65:23:6e:2b:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:8b:65:db:9a:8f:35:e3:86:85:93:b9:c3:
88:22:7c:09:ff:b6:d9:4f:cf:11:0b:79:03:41:56:
00:67:80:b4:b5:d3:19:03:1e:43:48:1a:87:c9:1b:
bb:1d:d7:00:de:33:49:34:c8:e1:8f:a8:21:ef:84:
26:63:21:4f:d5:fd:a3:b3:91:24:2f:17:25:f5:23:
15:30:ae:f1:5b:5d:1b:1a:89:b2:b3:46:8c:5c:0d:
2f:be:bb:65:57:73:78:9a:ea:76:c9:d4:44:21:26:
17:70:9f:05:37:04:14:3b:98:7f:10:f5:41:40:4f:
7c:fc:15:e6:de:d7:d1:e2:8b:13:bf:73:ef:b9:a6:
f7:fc:5d:ff:6d:95:aa:a6:74:ca:15:c7:6c:49:2c:
43:39:19:c4:e6:af:d2:14:07:70:d9:59:22:7d:66:
8e:e8:4b:35:05:f2:e2:a8:51:3a:99:d6:eb:ca:6d:
35:e3:85:54:5b:97:6d:20:af:63:dd:a2:7e:e6:e8:
55:c8:fd:74:5e:40:fb:a9:35:94:29:91:6f:6f:ea:
b2:ff:d2:ff:c5:6b:ea:70:01:fb:17:99:d0:d2:e4:
aa:44:11:0b:fe:eb:d7:e9:4d:6d:c3:37:1b:de:6c:
46:f7:39:e6:b5:90:51:09:96:c1:a7:cb:64:52:6b:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.139.0/24
IPv6:
2a11:fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210767
Signature Algorithm: sha256WithRSAEncryption
31:5c:f3:7d:6a:7b:f3:66:0c:29:9c:0e:6c:41:3c:a7:64:99:
e7:e1:12:20:d3:48:cd:0c:f0:5c:2d:cf:c6:84:46:7c:f8:59:
aa:55:c0:bf:02:12:6c:d8:5b:c0:ea:ff:54:2c:cf:60:0c:80:
fc:15:17:ac:a1:aa:a7:b2:9e:21:26:dd:c4:03:e7:e4:fd:64:
9d:18:20:f4:1e:c4:d2:99:1a:42:19:96:4b:8a:1e:8f:fd:fe:
0e:83:dd:b5:32:79:07:4e:7f:18:25:04:79:87:90:c3:f5:08:
22:9c:97:43:a3:d4:3f:af:1a:85:9c:68:be:39:09:38:25:46:
a6:cb:d6:5a:f5:bb:53:8f:98:b1:84:26:a9:03:13:78:6d:24:
fa:90:43:ff:36:72:ef:28:8c:72:20:b8:1d:86:7d:94:0c:45:
e8:c1:7c:8b:e3:fd:5f:44:9e:fb:5e:89:b1:86:da:96:74:98:
09:7d:17:c7:e3:3d:ce:ec:2a:03:5b:1f:85:87:fb:d9:a5:87:
b7:c2:a4:6e:fa:b5:7f:33:51:e4:62:d4:64:40:95:07:8f:3d:
3a:b4:68:7c:77:42:ea:b3:bb:19:f1:7f:08:40:d3:12:b9:17:
f9:dd:06:47:7b:b5:2e:4b:77:dd:cc:5d:ed:27:8e:38:78:e0:
5a:18:41:43
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt4oijr+2l/TtG3ZSNuK/r2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQ4ODg1Yzk3MDJlYWMxZjNkMDEyNjNlNmQzZTU0NDQ5ZWUyMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQmLZduajzXjhoWTucOIInwJ/7bZ
T88RC3kDQVYAZ4C0tdMZAx5DSBqHyRu7HdcA3jNJNMjhj6gh74QmYyFP1f2js5Ek
Lxcl9SMVMK7xW10bGomys0aMXA0vvrtlV3N4mup2ydREISYXcJ8FNwQUO5h/EPVB
QE98/BXm3tfR4osTv3Pvuab3/F3/bZWqpnTKFcdsSSxDORnE5q/SFAdw2VkifWaO
6Es1BfLiqFE6mdbrym0144VUW5dtIK9j3aJ+5uhVyP10XkD7qTWUKZFvb+qy/9L/
xWvqcAH7F5nQ0uSqRBEL/uvX6U1twzcb3mxG9znmtZBRCZbBp8tkUmsWsQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDhIiFyXAurB89ASY+bT5URJ7iFUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzM3YmRi
Ny05YjkzLTQ2YWItOWExNS00MmE0OGRiYzI1MjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMzdiZGI3
LTliOTMtNDZhYi05YTE1LTQyYTQ4ZGJjMjUyMS8xL09FaUlYSmNDNnNIejBCSmo1
dFBsUkVudUlWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAvECLMA0EAgACMAcDBQMqEQ/AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM3TzANBgkqhkiG9w0BAQsFAAOCAQEAMVzzfWp782YM
KZwObEE8p2SZ5+ESINNIzQzwXC3PxoRGfPhZqlXAvwISbNhbwOr/VCzPYAyA/BUX
rKGqp7KeISbdxAPn5P1knRgg9B7E0pkaQhmWS4oej/3+DoPdtTJ5B05/GCUEeYeQ
w/UIIpyXQ6PUP68ahZxovjkJOCVGpsvWWvW7U4+YsYQmqQMTeG0k+pBD/zZy7yiM
ciC4HYZ9lAxF6MF8i+P9X0Se+16JsYbalnSYCX0Xx+M9zuwqA1sfhYf72aWHt8Kk
bvq1fzNR5GLUZECVB489OrRofHdC6rO7GfF/CEDTErkX+d0GR3u1Lkt33cxd7SeO
OHjgWhhBQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:55 2026 by rpki-client