Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
File: OkGxVaq20SKf00jqoD0PeQPxJno.cer (raw, json)
Hash identifier: 99bw+9rseGBNu0Ow206P+9dKBdMD8ChAU5/2YrDQcCU=
Subject key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A351E7ACCB695D0DF059C1DFFE431D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211783
IP: 185.197.136.0/22
IP: 2a0a:7a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:51:e7:ac:cb:69:5d:0d:f0:59:c1:df:fe:43:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:a0:19:c9:b3:ba:5f:e9:7b:5a:5c:4f:ef:
1d:86:6f:a6:1f:4d:6d:a6:68:53:0f:3e:01:3b:19:
f5:16:c6:4f:4d:b4:77:c5:6d:3a:86:71:07:f9:46:
31:da:22:ea:c9:63:cb:b1:ab:5d:fd:15:00:be:b5:
4b:96:ec:6b:81:de:58:e3:96:ce:26:f6:ea:75:16:
be:4f:b5:09:76:80:11:16:76:bd:06:c0:5a:f0:69:
2b:9a:e8:bc:63:14:a8:da:4c:90:90:49:42:10:d0:
7c:72:59:48:e9:c4:c6:82:58:73:18:78:36:da:e8:
37:37:71:a5:70:cc:c2:9c:eb:66:a7:9b:cf:a6:39:
2d:c0:47:7a:49:71:61:f6:69:c5:30:a6:7a:d4:dc:
1e:09:50:8c:76:17:5a:3c:39:8b:c3:ca:0f:90:0c:
b5:32:a0:0e:a8:ba:15:c9:1f:94:25:86:63:d2:47:
19:43:84:c0:5d:da:05:c5:59:8d:29:30:c4:ed:7e:
b6:4c:57:94:00:77:ae:28:31:55:46:78:bb:c7:be:
0f:50:98:6f:1d:f1:65:d2:15:aa:c7:6f:b2:9a:44:
9d:85:dc:b5:fa:35:98:cb:0c:a4:8b:90:2e:25:fb:
17:1d:7d:ac:f9:aa:98:ed:78:14:11:a5:7b:e7:f8:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.136.0/22
IPv6:
2a0a:7a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211783
Signature Algorithm: sha256WithRSAEncryption
1c:06:c8:5b:2a:e1:3a:11:87:ba:7f:e3:f6:78:8a:00:e3:ff:
5f:17:34:4d:be:3b:32:12:a3:6f:e9:7d:98:8a:43:08:83:c8:
8b:b0:b9:5d:31:77:ff:73:05:94:38:e9:a1:32:48:b0:ad:d4:
a8:5c:7e:4e:55:da:33:22:43:c1:e2:71:9f:8c:34:0c:c9:10:
a1:e5:bb:f6:6a:ce:1f:90:b4:7e:3d:1d:0c:96:97:01:97:d3:
7f:7b:46:bd:69:a4:03:3a:a2:d8:5e:77:cf:1f:69:9d:66:4b:
cd:cf:1f:41:1c:a1:cc:07:52:dc:32:0a:01:f6:d6:7c:53:51:
7e:b0:80:c4:f4:b0:f5:74:7a:0d:77:3f:d1:47:5a:75:9a:46:
29:8c:24:ec:0d:90:23:03:ad:64:59:c4:36:2c:ba:04:77:02:
32:b7:b4:14:5b:63:b2:83:55:49:b3:fd:75:01:43:0f:db:6c:
5a:66:0f:64:92:46:34:42:ed:07:87:62:55:f9:dc:bb:be:b7:
30:c5:f7:0f:e6:45:d8:01:34:32:1d:7e:70:37:a3:fa:a5:7d:
c8:77:46:3a:21:99:83:43:cc:31:6c:8f:2a:d0:fb:85:44:5f:
d5:2e:a8:88:e3:50:0c:71:1e:ea:b3:a1:21:21:b1:7f:2d:a6:
a2:c6:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:37 2026 by rpki-client