Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
File: Og6YCIquzFusI9Wg5intsMVT5y4.cer (raw, json)
Hash identifier: X0ufwjIa/58YVcNdwsfJM4t4osEyVGaEWchOwNrjcgc=
Subject key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE32CC5E7206073362D0387E39533B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:19:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212310
IP: 185.237.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:32:cc:5e:72:06:07:33:62:d0:38:7e:39:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:b0:e7:b1:e9:82:66:6b:38:34:10:a8:da:
f7:95:3a:16:ac:e9:c4:b4:e3:ab:52:d7:4f:e1:03:
86:a8:e3:f1:2b:a3:e4:06:7a:1e:ec:9c:be:3c:0f:
04:55:a1:12:ec:d8:14:2c:09:b9:cf:3f:06:41:ac:
03:a4:ab:3b:db:f3:79:a2:5d:73:04:29:71:bd:12:
2b:06:4e:1c:e9:8e:8d:37:10:fd:50:ae:38:5c:69:
66:8b:30:35:fb:71:ff:f6:93:d4:f3:76:ca:45:b9:
da:97:c2:87:f3:cb:8b:0c:06:85:ce:a7:9d:fb:e2:
81:9a:7a:f5:4b:c6:f5:bf:1f:5d:31:62:4e:3c:09:
fe:68:6a:70:80:51:50:b6:fa:a4:b1:3a:bd:48:28:
d6:27:46:bb:87:5a:ea:6b:3a:ce:55:ad:e6:1b:10:
b7:b7:13:07:10:1c:85:f3:3b:41:9a:f7:1d:5e:8a:
3b:de:f1:95:4f:29:3f:72:5e:f1:f6:5d:48:0e:f9:
a7:32:26:1d:df:90:bb:e3:90:12:c8:4e:c2:6f:97:
4b:79:39:25:c4:8a:33:65:af:d4:da:cb:60:18:c5:
48:84:c8:dd:a2:db:f3:9d:b0:e2:0f:91:07:3e:07:
8d:8f:80:25:4c:73:76:f5:1a:e6:43:45:b2:0e:fb:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.192.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212310
Signature Algorithm: sha256WithRSAEncryption
27:7e:5a:b4:0d:00:d2:e9:3e:43:b8:fe:da:15:08:7c:b5:c0:
99:89:82:30:88:09:a2:37:90:9a:26:fb:a9:ce:c3:64:70:3d:
3b:f3:71:e3:8d:e0:e1:2a:59:34:e3:63:ee:23:bd:9b:7f:ad:
ec:e6:6b:15:39:c8:2b:f8:9a:f3:e5:2f:c4:3b:ef:47:4f:0f:
5e:cb:67:a0:4e:0f:c6:d7:90:6c:20:a2:f3:50:32:b3:a5:56:
2a:ff:d7:fa:61:f5:47:de:c7:38:0d:bd:ba:e9:a2:28:fa:4f:
c5:01:b2:bf:0a:99:8a:cd:df:c1:10:c8:42:40:04:0c:db:54:
39:0c:d3:97:82:f3:bb:42:7d:89:3f:80:3c:28:2d:da:a8:0b:
29:87:cc:bf:d3:ef:6e:50:18:df:c5:82:ee:c7:06:7d:56:d7:
a8:6b:a2:3b:58:f3:bb:20:a3:d4:00:fb:30:84:aa:05:13:0f:
e9:07:8f:26:82:29:2a:89:a7:0b:3a:7a:8e:3d:17:c4:fb:38:
99:c6:4a:2e:5f:2a:2e:c3:80:73:ee:0d:74:cd:4d:3e:16:26:
41:7c:66:15:c8:25:e5:27:cc:d3:4c:2a:0e:ac:99:b0:91:78:
48:ab:a2:3c:d9:20:ca:49:4b:0b:99:59:cb:16:71:24:d7:92:
db:00:d9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:32:01 2026 by rpki-client