Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OQX2atSu7j1pmLHW5HjBfz3xUxU.cer
File: OQX2atSu7j1pmLHW5HjBfz3xUxU.cer (raw, json)
Hash identifier: 6ozp5eUTVQrnSbQnfHGiLKg4HJVF4v4ONvF4NV49Ih8=
Subject key identifier: 39:05:F6:6A:D4:AE:EE:3D:69:98:B1:D6:E4:78:C1:7F:3D:F1:53:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D24FB91DFBA43911693DDE305D839CF6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/OQX2atSu7j1pmLHW5HjBfz3xUxU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Mar 2026 12:32:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199792
IP: 45.82.56.0/24
IP: 45.146.4.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:fb:91:df:ba:43:91:16:93:dd:e3:05:d8:39:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 12:32:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3905f66ad4aeee3d6998b1d6e478c17f3df15315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:97:72:51:30:aa:b4:16:ab:54:0e:1e:8f:80:
3d:ef:98:93:3b:28:82:40:82:e2:92:b8:5a:cf:a5:
4d:ea:00:32:82:53:64:14:45:11:55:a8:ed:ef:bd:
ea:e6:2c:d5:62:cc:87:39:68:a4:e9:c0:27:b1:ad:
02:9d:8e:a0:99:91:5e:0c:38:5e:1a:a7:e5:6c:d9:
1f:74:d6:5c:db:a8:bd:3e:c0:11:47:59:ab:6e:b4:
9d:b7:54:35:a8:77:73:51:4a:be:c5:60:3c:e7:5e:
f0:76:68:50:91:ad:17:f7:02:a8:4d:1d:fd:d4:28:
5b:4f:30:1a:5c:8d:d1:32:ba:af:31:ae:92:5e:b0:
fd:46:30:bf:f0:dc:3f:b6:c0:75:63:c4:cd:b6:f4:
76:f3:bd:e2:5b:9a:16:a5:1d:0d:01:76:f5:03:32:
68:1f:3c:34:47:7f:7d:13:61:11:b7:23:4b:26:5d:
04:26:be:1b:39:a4:3b:5e:47:46:b0:b9:5c:d0:5a:
24:ab:1b:57:26:00:d6:cf:6e:d7:0b:9a:37:19:9d:
42:ab:31:cd:be:c2:20:b0:19:fc:65:0a:86:c5:ba:
d9:08:22:4c:51:9e:2b:30:f8:53:ab:38:cf:33:25:
11:34:b7:69:fb:f7:f6:a2:99:c6:2f:35:e2:24:b4:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:F6:6A:D4:AE:EE:3D:69:98:B1:D6:E4:78:C1:7F:3D:F1:53:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/OQX2atSu7j1pmLHW5HjBfz3xUxU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.56.0/24
45.146.4.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199792
Signature Algorithm: sha256WithRSAEncryption
80:4f:b6:13:24:92:e9:d4:c8:4b:1e:ad:a0:c1:59:3e:46:33:
6e:20:e5:fe:40:44:ff:06:4f:9c:d5:a3:7d:77:ae:1a:da:b0:
89:df:b5:ff:87:e6:a6:82:a1:e2:5d:b4:f6:f5:f7:92:e0:99:
83:9f:3c:59:ab:31:da:e5:60:23:15:f8:29:49:44:2c:46:fc:
67:60:8a:a1:6f:86:87:56:d6:1c:b2:00:6d:b8:ca:04:5c:be:
c8:0e:a5:bd:ff:e7:4e:2b:db:cd:33:ec:16:c7:89:44:7e:ab:
7f:69:63:7c:ea:c5:17:b8:d1:09:01:2b:e1:61:12:7c:86:d2:
6b:88:b2:ee:60:b3:4f:02:f8:36:1c:2e:47:50:da:ff:e1:c3:
6d:75:d8:c1:c9:ec:6d:c1:e3:13:3d:3f:e8:eb:1b:68:48:7f:
d5:cd:29:7a:a7:55:75:4b:2e:c7:f7:c0:95:74:59:09:5b:91:
6a:38:1d:2f:99:4d:47:00:d2:07:a9:59:cf:c6:47:d0:bc:fc:
9d:bd:19:83:d9:2c:f6:f0:d1:a7:bd:61:1b:f8:95:42:ac:e2:
50:45:d1:c5:42:bc:d0:f2:78:10:0b:af:68:82:68:1c:a5:06:
8f:65:df:cd:78:9a:b8:c5:3d:80:cb:6a:c0:b9:6a:d2:5a:c7:
36:9b:33:f1
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZ0k+5HfukORFpPd4wXYOc9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI1MTIzMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTA1ZjY2YWQ0YWVlZTNkNjk5OGIxZDZlNDc4YzE3ZjNkZjE1MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JdyUTCqtBarVA4ej4A975iTOyiC
QILikrhaz6VN6gAyglNkFEURVajt773q5izVYsyHOWik6cAnsa0CnY6gmZFeDDhe
GqflbNkfdNZc26i9PsARR1mrbrSdt1Q1qHdzUUq+xWA8517wdmhQka0X9wKoTR39
1ChbTzAaXI3RMrqvMa6SXrD9RjC/8Nw/tsB1Y8TNtvR2873iW5oWpR0NAXb1AzJo
Hzw0R399E2ERtyNLJl0EJr4bOaQ7XkdGsLlc0FokqxtXJgDWz27XC5o3GZ1CqzHN
vsIgsBn8ZQqGxbrZCCJMUZ4rMPhTqzjPMyURNLdp+/f2opnGLzXiJLSxVQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFDkF9mrUru49aZix1uR4wX898VMVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2YxYzE4
ZC0yMzM1LTQxMWMtYWFlYi1lZWRkOGQ5MDg2ZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZjFjMThk
LTIzMzUtNDExYy1hYWViLWVlZGQ4ZDkwODZkMC8xL09RWDJhdFN1N2oxcG1MSFc1
SGpCZnozeFV4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQALVI4AwQALZIEMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwMMcDANBgkqhkiG9w0BAQsFAAOCAQEAgE+2EySS6dTISx6toMFZPkYz
biDl/kBE/wZPnNWjfXeuGtqwid+1/4fmpoKh4l209vX3kuCZg588Wasx2uVgIxX4
KUlELEb8Z2CKoW+Gh1bWHLIAbbjKBFy+yA6lvf/nTivbzTPsFseJRH6rf2ljfOrF
F7jRCQEr4WESfIbSa4iy7mCzTwL4NhwuR1Da/+HDbXXYwcnsbcHjEz0/6OsbaEh/
1c0peqdVdUsux/fAlXRZCVuRajgdL5lNRwDSB6lZz8ZH0Lz8nb0Zg9ks9vDRp71h
G/iVQqziUEXRxUK80PJ4EAuvaIJoHKUGj2XfzXiauMU9gMtqwLlq0lrHNpsz8Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:30 2026 by rpki-client