Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kO8bIyasFe3LfCBP5aIu7A4ys38.cer
File: kO8bIyasFe3LfCBP5aIu7A4ys38.cer (raw, json)
Hash identifier: U7ecFxF2sQbIW/iNawUvso5bFFTsT26xCjScuBFFFY8=
Subject key identifier: 90:EF:1B:23:26:AC:15:ED:CB:7C:20:4F:E5:A2:2E:EC:0E:32:B3:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6A9FFDD3E5DE4D80F3599EB328EAA6CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 08:03:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216413
IP: 93.187.67.0/24
IP: 2a13:b940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6a:9f:fd:d3:e5:de:4d:80:f3:59:9e:b3:28:ea:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 08:03:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90ef1b2326ac15edcb7c204fe5a22eec0e32b37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:32:23:95:23:d0:ea:23:3c:2c:dd:ae:a6:
73:88:57:b3:c5:26:6d:61:4d:1a:77:a1:df:fa:cf:
66:69:71:b6:42:5b:c4:b2:87:9e:a0:74:8d:0c:12:
80:de:4b:de:bf:a6:ae:e8:1b:17:b9:b6:20:c5:96:
72:a1:49:19:be:59:75:46:5f:72:88:1a:5f:d3:95:
45:ea:0a:ff:ed:51:ac:cf:e5:70:c0:43:47:6a:1d:
f1:31:28:55:f2:45:3a:46:40:10:f1:81:b9:34:bb:
fa:f8:7c:f1:03:10:48:c6:be:e4:32:91:97:f9:70:
da:16:a2:08:e4:a8:d6:88:5c:e2:4e:98:70:4b:56:
c6:60:58:55:50:b4:e3:e5:16:ad:8d:3e:b1:13:cf:
20:c8:dd:e1:de:21:4e:dc:9d:4e:98:8f:56:9b:f2:
58:72:73:f6:3e:32:3a:1b:d0:76:68:22:4a:17:06:
c8:bb:ce:25:15:7b:c6:6a:99:7c:b0:c0:39:c2:8b:
af:e5:5a:1e:07:0c:a9:72:31:be:0e:f7:b7:30:55:
d4:31:45:78:51:df:46:92:19:f5:53:50:3c:f3:85:
90:44:3b:a0:c7:83:33:8c:74:ab:56:a7:3c:cc:9a:
f4:79:ee:70:3d:11:e3:a5:a7:b9:30:21:11:0c:17:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:1B:23:26:AC:15:ED:CB:7C:20:4F:E5:A2:2E:EC:0E:32:B3:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d49018-4e82-40b8-a598-3b15067238b6/1/kO8bIyasFe3LfCBP5aIu7A4ys38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.67.0/24
IPv6:
2a13:b940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216413
Signature Algorithm: sha256WithRSAEncryption
9b:8b:f5:85:66:7b:c8:d5:a2:c9:f0:14:82:a4:a1:f4:77:1a:
87:22:d8:56:0f:f7:9b:38:bb:aa:c3:44:7f:8f:2f:17:ba:64:
9f:57:9d:16:da:fe:ca:bd:20:aa:79:d0:43:35:a3:19:c0:63:
a9:62:ed:1a:20:83:10:25:88:12:83:83:d7:75:69:fa:49:0e:
ea:ae:95:30:de:b6:06:8e:3d:94:cb:64:3d:4d:3a:85:5f:0e:
ac:3a:65:ab:04:8b:11:ee:14:2f:43:0b:27:7d:6a:be:3e:35:
68:a2:6c:c6:27:04:fb:f3:6d:99:92:ee:d8:17:75:e4:e6:13:
d2:ad:dc:c5:25:76:87:eb:d1:45:e0:71:ed:b7:b9:d1:bc:66:
3a:0d:02:fb:5a:19:da:a9:7e:4e:c8:a7:36:10:4f:89:bd:ab:
f6:e1:4e:5f:d3:b3:c8:76:21:cc:b0:fe:28:cb:a2:4f:1a:ac:
90:46:6d:c2:a2:41:2d:4b:45:27:3d:87:0d:dd:94:87:d9:bf:
75:bb:8b:4c:75:d1:56:e0:51:3c:fb:a0:c7:35:83:5d:85:4a:
0f:26:42:fb:e7:ed:75:e1:35:c4:66:ba:18:be:b8:62:8b:72:
d0:dd:3e:df:d4:98:bc:4b:32:7d:f5:13:0d:60:89:31:f5:52:
3b:b9:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:47:37 2026 by rpki-client