Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer
File: Oae0qeiR-Lmwg-mApq-vRKpqHJU.cer (raw, json)
Hash identifier: ClRH+4fIAnmN5SSKBhve1+NlHlwzkINXjbFEBTkJAF0=
Subject key identifier: 39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB607069F2783B4893C91748F4304C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216297
IP: 195.128.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:60:70:69:f2:78:3b:48:93:c9:17:48:f4:30:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39a7b4a9e891f8b9b083e980a6afaf44aa6a1c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:c3:85:0e:88:dc:da:df:45:5d:31:b1:e0:
df:97:97:8a:fb:aa:6d:fa:61:43:8d:c5:2c:84:17:
77:bb:f8:0c:f9:56:46:32:34:9a:1f:0d:38:2f:d3:
17:b2:82:ff:e3:8c:25:12:68:f2:e0:d4:fc:7e:cb:
de:74:51:6e:ab:7f:9d:b5:5a:87:b8:df:a9:6a:bb:
af:f1:61:20:16:69:4e:13:ae:df:e4:a0:cd:49:fe:
6e:3c:5f:9e:46:6d:e9:33:71:c2:da:00:64:97:8f:
d3:0d:ce:46:90:4f:0b:5a:a9:0f:00:59:7e:71:ee:
72:b0:c4:d6:88:c5:7c:e8:44:1d:de:5f:cd:a4:a9:
bf:8f:a8:6a:25:84:c9:eb:f3:c8:ea:c7:e6:8d:1a:
59:7e:ae:c1:6d:03:86:43:e0:0f:5f:a8:66:2b:6e:
c9:87:2c:aa:09:f1:ad:56:17:1a:49:ec:b6:74:8e:
d8:5a:94:7d:f7:e5:5c:4a:a2:c7:8b:c1:fa:c8:47:
50:0e:a3:b7:e2:5a:bb:fc:71:2e:fb:17:82:64:96:
97:fb:4a:58:13:9d:20:8f:0e:82:ec:00:1c:15:6a:
a9:38:e8:2d:28:6a:15:49:fd:b1:5b:17:86:6a:1d:
6a:8a:63:9c:10:18:f0:df:3d:ab:e6:70:87:f3:ca:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:B4:A9:E8:91:F8:B9:B0:83:E9:80:A6:AF:AF:44:AA:6A:1C:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5850c9-452b-4d3c-9f9f-d58fe1e62e3f/1/Oae0qeiR-Lmwg-mApq-vRKpqHJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.132.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216297
Signature Algorithm: sha256WithRSAEncryption
60:4b:61:7d:2f:7e:31:3b:57:06:87:f2:d1:47:c8:9c:dd:39:
4a:87:bc:01:51:9a:27:c1:04:ba:56:c3:9c:f3:d8:28:94:c2:
66:fd:2e:25:fe:b3:56:4a:a0:8c:85:ca:98:5d:4d:d8:24:ca:
1e:ab:ba:96:c3:71:33:8c:bc:72:eb:b2:e5:c8:87:b3:ed:a8:
da:ab:81:37:d1:8a:21:96:21:42:77:5e:54:be:b9:cf:17:b3:
1a:d9:0d:ee:17:32:2b:3f:aa:0e:86:b4:f6:66:88:03:15:5f:
08:0b:47:7a:be:5f:ec:f3:36:ea:cf:8e:fb:c4:16:7f:31:bd:
ae:74:6b:fa:c7:d9:00:50:ba:b4:b3:c2:09:3a:f1:22:ac:fb:
e3:97:8f:af:23:5e:df:67:e4:63:2e:76:b6:b5:04:ee:22:17:
1b:5b:81:59:8f:08:78:ab:7f:db:a9:08:ee:16:16:fa:b7:43:
8a:43:1f:8a:8e:9c:6c:38:f2:ed:5f:f4:fb:ee:1e:62:82:81:
29:a2:f0:d6:0d:ef:62:8e:39:57:46:47:50:15:76:7e:fe:cb:
27:99:78:61:cf:a1:2b:dd:4b:0d:70:45:dd:a7:2c:35:25:22:
ac:24:87:a9:1b:cf:19:a9:4f:77:09:49:a1:36:84:8e:26:1c:
b7:d1:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:05 2026 by rpki-client