Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer
File: aoKFGhN-YFmlwZ4lJ_OepsrXxKo.cer (raw, json)
Hash identifier: mw5/YbinDkJfxNjze4ZvmyyFDNyPJr4c0AOv+D3kuqs=
Subject key identifier: 6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F95EE39F6BD49D25F7D899BB7E17C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213098
IP: 85.209.42.0/24
IP: 185.222.20.0/24
IP: 188.72.42.0/23
IP: 193.47.189.0/24
IP: 194.34.11.0/24
IP: 195.62.88.0/24
IP: 2a0c:9c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:5e:e3:9f:6b:d4:9d:25:f7:d8:99:bb:7e:17:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a82851a137e6059a5c19e2527f39ea6cad7c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:61:04:05:bb:61:42:35:90:1e:10:44:1c:
9b:c1:c6:14:3e:fa:4d:bc:91:23:30:6f:c4:9f:d2:
0b:87:62:7b:c7:5d:f2:0b:10:32:0d:d6:b6:8a:55:
51:9b:d6:20:66:be:97:34:eb:22:e1:c2:a7:00:89:
51:a8:c1:cf:05:a4:f9:31:0e:9c:78:8d:2c:9d:59:
4f:8e:aa:75:82:bf:9c:6b:16:67:c3:49:6e:31:e1:
c8:67:74:78:5f:8d:50:a0:6f:62:c1:0d:a4:1c:55:
37:8c:a1:a7:96:49:b0:11:4b:7d:08:b5:38:b1:ff:
da:da:7a:5e:92:56:5e:87:1a:a3:92:05:7c:08:51:
7e:bb:c0:66:1d:45:42:78:d7:c5:81:4d:7d:aa:1d:
ea:a0:a9:b2:f2:e1:8f:de:b6:9f:b6:c5:a9:7e:40:
dd:c4:5f:5e:fe:a7:92:92:4b:cb:22:06:24:db:08:
e5:78:a0:67:3a:49:66:41:39:94:35:81:49:18:19:
90:4a:9a:35:87:eb:f7:60:0e:23:a2:7c:68:b2:91:
01:cb:ee:bd:5a:8d:2c:81:07:fa:8e:18:74:a2:4e:
a8:73:38:d7:a2:52:39:92:6f:70:c2:95:bb:1d:21:
76:c2:76:a0:9c:a7:38:b9:08:00:d5:bd:a3:f4:f0:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:85:1A:13:7E:60:59:A5:C1:9E:25:27:F3:9E:A6:CA:D7:C4:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d6de0b-9e38-4244-b9f3-93ba820a75b7/1/aoKFGhN-YFmlwZ4lJ_OepsrXxKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.42.0/24
185.222.20.0/24
188.72.42.0/23
193.47.189.0/24
194.34.11.0/24
195.62.88.0/24
IPv6:
2a0c:9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213098
Signature Algorithm: sha256WithRSAEncryption
55:8d:bb:18:cd:73:b6:ee:03:c4:57:7b:57:ca:4d:38:bd:f0:
ca:44:b6:be:7d:e8:dc:0a:5f:bd:5d:7f:76:a2:15:3e:6f:4d:
ba:d6:31:76:54:c9:a4:fa:73:c6:90:b8:23:2b:5c:2e:4f:89:
29:c6:be:b9:11:01:df:14:9a:e8:05:82:8a:02:fe:24:35:91:
3b:89:b7:8d:75:04:88:89:87:53:d6:43:9c:26:04:8a:a7:55:
9f:2c:54:29:b6:12:1b:da:e0:b0:4f:37:4f:1d:4e:96:8b:f7:
22:e9:c5:33:4c:73:1d:d9:c0:3e:81:f7:f8:58:42:89:55:02:
72:51:66:67:bb:bb:b7:cf:8b:15:6d:95:b1:cd:e2:86:33:36:
ab:7b:91:7d:ee:7f:11:85:d4:c6:79:92:21:f8:19:19:58:2f:
1c:19:9c:19:f9:b5:4e:12:ee:11:92:c4:8f:3f:27:a4:79:4f:
d3:7a:ae:e5:b1:fb:d4:53:51:89:94:9d:ce:30:4c:e6:a4:9a:
c5:e9:a8:2b:94:c3:aa:25:39:d7:43:8f:3c:cd:3e:79:96:c6:
3c:4a:57:3f:79:30:d4:73:65:26:7d:bc:03:80:e2:6a:7c:e8:
12:9a:9e:b8:9d:2e:5f:b0:9c:00:2a:e0:63:0b:ad:5a:d8:c9:
1a:64:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:36 2026 by rpki-client