Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
File: OVUKm3Usc5f29p6qaoDwm6f32Co.cer (raw, json)
Hash identifier: DahPEC89bbR+yMFEaDuu7ksTa0qhelaLIkwWyU+HFyI=
Subject key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE4D7E22C5D00C62B4114DC502E0A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212644
IP: 31.210.188.0/22
IP: 188.208.132.0/23
IP: 193.163.75.0/24
IP: 2a0d:7000::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:4d:7e:22:c5:d0:0c:62:b4:11:4d:c5:02:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:20:af:2e:05:93:33:78:f6:b0:dd:d2:45:
0e:6f:0c:93:5b:89:fe:41:b6:db:c6:5f:c2:76:37:
e9:6b:1f:cd:6c:26:4d:11:70:c6:31:97:a2:d5:da:
a4:2b:c9:bf:15:24:22:9b:e5:06:86:fc:39:f6:f7:
be:e5:f8:63:fb:c2:1b:6b:44:11:92:6f:91:5f:8c:
1f:81:bf:cf:2a:80:c7:3c:b8:52:d6:be:20:d1:c8:
85:c2:ff:34:bd:01:c9:7e:84:ed:75:97:ce:86:64:
7a:9b:10:14:0f:98:91:b5:f6:2e:4e:36:69:1d:93:
05:51:12:1d:6a:e3:ce:c0:21:56:6f:67:2d:d5:9a:
7a:aa:f5:62:c5:37:63:b4:60:72:f4:13:66:a3:a1:
58:b6:48:50:e6:da:e0:ea:b8:c6:79:41:75:03:d2:
20:9a:24:59:fb:76:b2:24:cd:ba:59:ad:af:ba:73:
25:59:93:a7:65:52:c7:7f:9c:aa:55:8c:75:10:ea:
95:05:82:f0:11:63:e3:4e:c4:a1:69:e1:6e:e9:0f:
f0:9c:87:38:2a:87:ef:19:5f:8b:17:00:e5:0e:61:
2b:b9:e1:14:09:e8:b0:4e:fd:58:9e:7f:81:63:af:
89:bd:e7:f6:2f:df:1f:17:7f:32:23:61:33:b1:4b:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.188.0/22
188.208.132.0/23
193.163.75.0/24
IPv6:
2a0d:7000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212644
Signature Algorithm: sha256WithRSAEncryption
1c:e7:2a:79:d9:09:ce:35:2d:ca:b2:00:a1:41:ef:8e:b4:9d:
7f:a9:63:36:3b:93:c4:d6:0e:4d:70:f7:68:02:21:ed:84:01:
93:23:a1:e8:58:01:2c:63:0a:18:7a:ff:e4:38:de:2b:f5:ee:
ab:0d:bb:27:00:68:a0:28:c8:82:e6:81:4f:58:ba:83:43:ca:
08:f7:4c:18:63:c5:c3:5f:46:fc:e2:e4:fa:3c:f8:2c:d7:06:
ae:d4:85:9e:7f:a4:c8:ec:da:2a:a3:05:ef:bb:df:c2:46:ee:
e9:ed:8e:41:8a:e0:c6:7f:e1:31:1a:28:84:69:c5:93:d7:6a:
82:48:d4:35:89:d3:93:1b:a3:c6:5d:b5:7c:7e:c3:c5:f4:92:
cf:9d:b9:a7:00:36:79:e8:bb:2b:d1:dd:65:74:5e:b3:60:48:
fe:00:ff:e6:76:6c:e7:a7:d0:21:37:87:06:81:b1:fa:1f:70:
ff:33:ee:59:9e:01:f9:44:a0:c4:d1:3d:0d:1c:9c:06:6a:cf:
d5:6f:8e:d6:17:49:c1:59:1f:d3:b5:3b:31:92:6d:f1:9c:5f:
77:84:fd:a4:af:b4:4f:4b:dd:fe:35:7a:04:92:76:cc:aa:81:
bb:9e:12:05:50:39:2b:72:7a:3e:33:40:a4:28:d8:9d:99:a1:
53:1c:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:16:32 2026 by rpki-client