Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer (raw, json)
Hash identifier: /CwnPVuVdTNd2z78noKRUthdgndBOCwel2nFLF4fOjs=
Subject key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CF6F580CB6E48C949838CA2ACC90A7B6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Mar 2026 14:03:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202649
IP: 85.137.236.0/24
IP: 85.137.250.0/24
IP: 89.35.112.0/24
IP: 2a12:5740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:f5:80:cb:6e:48:c9:49:83:8c:a2:ac:c9:0a:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 14:03:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3afb9f43a46f059827a9dec366d1496d66089134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:f0:45:ac:48:00:6b:82:65:f7:49:d3:65:
4c:45:1f:5b:8d:6f:3b:1a:db:28:f6:db:0a:ba:24:
c3:a7:df:b1:f5:e3:23:f1:1c:63:4f:c1:58:7a:1f:
eb:29:67:0b:28:17:8e:e5:b2:c3:32:b9:44:77:c4:
34:6f:9f:8e:b4:83:e4:f1:4d:82:3b:b9:6c:90:87:
fc:71:de:fa:3e:74:d6:95:fb:10:b3:1c:d4:f8:b0:
96:12:af:95:a5:01:05:40:7e:ca:3d:00:24:d0:02:
51:5b:30:e3:67:a8:b6:d1:f9:f8:27:aa:28:6e:ba:
8c:88:cd:a5:9a:8f:bb:2c:ff:1c:5e:22:92:3e:b0:
1b:94:f2:26:07:ec:5e:44:6b:19:d5:96:6d:e3:8c:
20:88:38:4a:44:f8:7c:82:34:d3:4a:65:3d:28:26:
2d:5d:65:e3:fb:e0:6d:fa:fb:a4:4d:48:5f:08:08:
a1:ee:b5:b8:14:f2:0d:ee:41:b0:0d:09:92:e2:ce:
32:dd:d3:d8:b8:3e:56:bd:c0:9c:91:8e:be:93:f4:
93:cd:29:b1:9d:c0:8a:52:71:50:10:f4:16:96:c8:
e6:ea:3d:91:52:d4:02:48:61:07:77:7d:a4:6d:81:
04:d7:d6:a8:55:d0:fb:c1:43:7f:9a:37:74:76:e8:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.236.0/24
85.137.250.0/24
89.35.112.0/24
IPv6:
2a12:5740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202649
Signature Algorithm: sha256WithRSAEncryption
89:5e:e9:66:8b:be:8c:48:a5:03:01:10:db:e3:f7:cc:b5:79:
00:a4:7d:a9:0a:fe:89:92:7d:3b:e8:bf:11:01:b7:4a:11:2d:
47:b8:f8:c8:ce:91:a2:d9:db:6d:3a:50:c1:90:df:2b:f1:3a:
78:4e:cf:99:94:56:03:2d:d4:f8:00:d3:57:ae:30:c2:99:8c:
ce:1e:2c:51:41:02:97:62:3e:9a:eb:ae:b7:d4:ba:54:c8:d5:
5a:d3:0d:6a:b6:3c:da:df:0d:af:b5:38:20:d6:11:9a:8d:3d:
a2:96:10:59:08:f5:03:5c:c6:43:e5:9e:dd:89:84:c6:2f:ac:
6b:48:6d:9b:7b:21:77:cc:9f:2a:c2:56:db:ba:43:07:1f:22:
77:45:b3:83:97:d3:9d:36:c8:0d:75:50:ff:87:6e:ad:d9:f1:
04:8d:bf:69:d7:43:85:77:5f:da:b3:aa:b8:25:dd:b8:5e:40:
2d:36:80:c7:ae:fb:66:e2:b3:8c:e1:5e:a1:ce:3f:a4:69:31:
04:68:e4:55:2b:6e:58:8d:21:05:58:d7:1a:82:49:1a:1d:e0:
6e:0e:1f:b5:99:f2:c4:d8:02:30:fb:e5:2d:8b:a4:de:4c:01:
fd:94:29:95:d5:6e:87:6a:d1:29:52:96:ed:e0:ae:63:c7:07:
fd:3c:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:25 2026 by rpki-client