Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OjLwwcjLEx0TZbOPCKTltYLiW0E.cer
File: OjLwwcjLEx0TZbOPCKTltYLiW0E.cer (raw, json)
Hash identifier: xiSFI+lNc0d53wyHgtRO0MgbleAXcJE5wNRULGrjRXw=
Subject key identifier: 3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC1B67DB6FAB4BD139E96721B5D648
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 134.151.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:1b:67:db:6f:ab:4b:d1:39:e9:67:21:b5:d6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a32f0c1c8cb131d1365b38f08a4e5b582e25b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:c0:bc:f5:f1:cc:f4:25:23:5d:59:c0:46:
82:7c:c5:a8:89:f9:6c:19:bb:53:3b:db:47:eb:32:
c7:9c:dd:75:ed:92:1f:32:55:0d:35:10:b7:1a:35:
73:c1:42:4e:e4:7e:1b:eb:b5:e4:7b:78:99:50:62:
ad:8f:f6:66:3a:40:e8:9c:7c:7a:bf:19:94:2c:18:
53:e4:8f:d9:c5:b0:53:a5:a2:86:27:11:4a:37:ab:
51:98:7c:ab:b7:ec:63:30:83:27:7f:18:c7:1a:37:
ef:78:1e:59:e6:d8:fd:28:2f:e4:14:21:34:6f:51:
75:7b:8a:1f:e8:23:be:87:25:ed:00:65:f9:58:a3:
17:30:ce:06:03:15:8d:5e:ea:52:5c:03:b8:91:c6:
a2:07:2b:d8:2f:6c:8e:c6:13:de:d1:ed:a7:ad:e9:
24:2c:4b:9a:c7:2d:6e:16:cc:30:7d:8b:a3:f2:97:
42:ec:fc:c6:7a:0d:56:5e:7f:e8:91:e6:4d:28:94:
fc:ae:08:56:da:8e:8e:d5:ed:fb:2e:c5:0f:1f:ea:
62:db:c5:90:8f:cd:7f:8e:06:39:1b:4b:e3:4a:96:
79:03:d1:f8:b4:e5:15:1b:5e:6e:57:c9:b8:16:77:
fd:e1:0c:16:03:26:58:b8:9c:f5:ef:53:6b:d9:e6:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:F0:C1:C8:CB:13:1D:13:65:B3:8F:08:A4:E5:B5:82:E2:5B:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/384653-95ad-4f86-bcdb-b1b8db650e40/1/OjLwwcjLEx0TZbOPCKTltYLiW0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:c2:40:ca:63:33:59:a7:0a:68:12:e0:37:71:ff:e0:5e:c7:
87:60:60:d5:d9:f2:8a:ec:f8:5b:ed:7b:54:48:e4:3a:d8:c5:
a5:26:72:4c:f7:76:c6:dc:25:43:cb:52:10:02:4c:37:90:b3:
83:a2:26:b4:dd:51:7d:2c:81:f8:ab:99:62:c2:4b:e5:39:7a:
ae:9b:b5:e7:d4:40:05:25:8a:77:b9:ec:67:c2:be:36:ea:64:
d6:68:14:7f:94:17:3d:4f:30:b7:5d:30:68:13:fb:c2:7b:2e:
eb:11:15:de:a5:5e:fa:f1:23:56:8e:91:7d:8c:60:44:ba:29:
06:54:37:a5:18:b8:b2:fd:b3:b1:10:67:f3:e4:9c:cb:89:03:
10:e9:20:3f:e0:fe:a2:c0:45:f2:25:50:fb:06:aa:dc:14:21:
cb:9d:5e:7e:27:45:de:93:01:89:0a:ab:cb:25:b1:bb:2a:2d:
a1:e4:25:4e:f4:21:3b:57:14:ce:2e:2c:ca:50:86:ae:ac:03:
1f:41:e0:71:dd:15:59:13:fe:bf:36:ff:dd:b7:56:90:f7:58:
85:04:90:ff:c8:8a:7f:de:db:7f:f3:f9:25:20:ea:86:73:78:
6e:b6:4d:19:0a:a8:0e:fc:69:e9:85:30:52:01:da:df:ec:ff:
03:c2:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:47 2026 by rpki-client