Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.cer
File: OmsIRCbZ3gsQ4BQdHeQ8dinBloI.cer (raw, json)
Hash identifier: mP/e8F7LaOd3qQgapui9MC5OAeyoNNq+twxJphX0TCs=
Subject key identifier: 3A:6B:08:44:26:D9:DE:0B:10:E0:14:1D:1D:E4:3C:76:29:C1:96:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C800F5065D06B9D995C64D004493759
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:18:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57326
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:0f:50:65:d0:6b:9d:99:5c:64:d0:04:49:37:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a6b084426d9de0b10e0141d1de43c7629c19682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:ae:07:aa:e9:ec:ae:71:cb:96:1b:99:c6:
7b:d5:3d:32:56:fb:36:21:7b:d1:c6:d3:17:f5:21:
90:d1:0f:2a:9f:a7:1c:bf:fd:b3:8f:37:6d:81:68:
f6:38:29:87:78:7c:1b:8a:e7:23:a8:21:aa:69:0b:
a8:e3:53:be:bf:d1:b6:c1:b9:dc:8f:04:5b:8c:11:
47:b7:62:79:64:cb:c8:64:9a:9f:03:e4:dd:ce:fc:
c3:3d:5b:4a:01:8a:4a:e8:11:25:4b:aa:44:90:c3:
ed:df:b9:52:f2:1e:42:68:16:e1:09:25:e9:a8:78:
69:04:04:fb:f3:fb:ba:b1:d5:e3:7e:f7:1a:7c:11:
cb:a6:59:4b:21:fe:50:ee:9a:9b:d8:9e:1f:6c:2c:
b8:76:d1:ea:d8:ca:92:6c:df:da:a8:e1:d5:2f:c3:
f0:bd:8f:b0:e1:bb:7f:dd:0a:0d:d6:c7:d3:d1:54:
1a:45:02:d8:d8:42:98:26:6a:46:53:29:4b:49:19:
f1:75:91:29:80:16:4c:20:c9:2c:02:83:5b:c0:b7:
18:e5:dd:20:44:96:a9:e6:dd:5b:07:34:d3:cc:03:
33:2d:5a:60:b5:c5:bc:68:d8:8d:8a:c0:0a:e9:33:
79:46:68:a2:55:87:c0:6c:13:fe:ba:4e:30:53:a6:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:08:44:26:D9:DE:0B:10:E0:14:1D:1D:E4:3C:76:29:C1:96:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57326
Signature Algorithm: sha256WithRSAEncryption
89:ee:f7:6e:45:f3:ba:8b:61:54:16:51:96:01:4b:d6:8a:ea:
ec:a5:c6:c2:f7:55:9c:3c:4f:f3:db:94:52:93:fe:4b:23:4d:
74:f0:68:52:ea:b1:34:90:b2:bb:96:a5:00:dd:07:19:0c:57:
26:e5:e8:47:08:da:70:5a:af:c5:8c:1e:46:00:47:39:ed:6d:
a2:a0:a3:47:a6:1f:ce:49:1a:52:ba:e2:6d:16:63:b9:69:c9:
f0:ce:10:d7:99:3d:57:11:1e:8a:26:ab:50:62:4b:9b:f4:94:
db:18:11:91:8b:84:b4:6c:8c:0f:f1:76:e5:6c:41:64:17:2c:
2f:f5:7e:1d:53:9d:44:f6:63:06:0f:04:57:9f:cc:5c:6d:3e:
5b:6e:0b:83:0d:f5:6f:9f:ca:f1:21:b1:ca:4c:bc:76:e6:22:
5d:bd:f4:91:4b:31:98:bb:7a:f1:4b:c0:e5:f6:56:40:b6:0b:
44:34:7a:3f:28:65:25:97:68:c4:72:22:39:d3:71:84:86:fc:
54:77:93:f8:58:16:92:91:db:fe:ef:a7:14:9d:14:26:ab:5c:
b9:96:8d:a2:d7:22:7c:d1:bb:5e:9e:2a:43:6c:8b:42:89:18:
24:7b:fb:17:86:d8:e9:60:17:c5:c6:de:96:24:da:3a:0f:85:
8a:80:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:16:54 2026 by rpki-client