Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oB9A-8vTc1D6zq6XhosVLj7BveU.cer
File: oB9A-8vTc1D6zq6XhosVLj7BveU.cer (raw, json)
Hash identifier: CCkRK1LoCdLzGCv9cQeHMdoiR0elLmrTCdJhiaiY1yA=
Subject key identifier: A0:1F:40:FB:CB:D3:73:50:FA:CE:AE:97:86:8B:15:2E:3E:C1:BD:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9F483AD2B8454ABEFE03FFF7C2D89C42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Feb 2026 13:27:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203362
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:48:3a:d2:b8:45:4a:be:fe:03:ff:f7:c2:d8:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:27:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a01f40fbcbd37350faceae97868b152e3ec1bde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:14:de:ea:e2:cd:6a:78:32:a6:91:a8:89:
f1:64:0c:7b:30:47:0b:4b:90:82:0c:8b:fa:41:e0:
95:36:06:2d:50:bc:17:80:31:96:20:7d:c5:85:4c:
93:66:f3:83:19:2c:91:b4:1a:05:67:30:37:ff:0a:
5a:d3:94:6d:4f:b4:71:a7:4e:cb:cd:06:70:11:b3:
e9:70:93:a5:12:25:7a:7b:82:bc:70:25:a1:10:54:
ba:86:77:f8:05:ca:4c:6c:46:87:56:e6:c2:06:90:
7a:1a:f8:b7:e1:5f:42:9b:8b:92:3e:fd:2b:0d:98:
21:5a:84:ec:d6:b4:fa:43:4d:46:80:88:53:bb:47:
41:8c:e8:4b:f3:9a:42:07:e5:4b:62:b6:b8:c7:12:
a0:3c:c6:64:3c:8a:7a:38:25:57:8f:f4:26:b1:76:
9c:dd:bc:d4:7e:ce:eb:60:68:7e:c8:57:ed:73:3f:
2d:a4:a3:76:8c:96:ff:35:2a:a0:3f:85:e5:cb:5e:
a4:30:aa:8d:c1:4b:f6:56:2e:11:47:d6:c8:ea:c6:
b4:7f:fe:12:c6:26:67:ff:6e:bf:40:b0:21:ce:f2:
06:03:06:c3:90:1d:5b:4a:64:c7:bf:25:6e:87:15:
25:0f:55:98:84:32:2f:23:04:3e:ee:01:a8:15:56:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1F:40:FB:CB:D3:73:50:FA:CE:AE:97:86:8B:15:2E:3E:C1:BD:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203362
Signature Algorithm: sha256WithRSAEncryption
68:21:d7:5c:ff:39:54:c7:6c:ef:e7:01:61:88:70:6b:7b:37:
25:59:95:b7:97:98:ad:8c:30:fe:a8:86:8b:3a:70:9b:12:f7:
09:d7:34:4e:21:08:25:fd:3b:3a:6e:6b:e5:00:e1:90:5c:8b:
76:ac:bb:8c:65:54:03:70:7a:2a:5e:e9:c5:06:83:58:65:7b:
7b:16:b1:bc:82:20:8c:36:07:ee:f5:c0:6a:89:67:af:aa:8c:
73:49:d9:65:6c:42:61:ef:80:00:f7:17:a7:e4:c4:bd:c7:6b:
c8:2b:a8:78:c8:0d:ea:3d:cd:75:01:e9:8c:14:94:95:2e:2b:
cb:7d:6c:ef:59:97:84:4b:b3:3a:85:3d:83:04:c8:72:e2:4b:
4a:72:4c:fb:95:1c:9d:5a:bb:c2:42:9d:71:b8:6f:99:c3:04:
55:7d:ff:56:0b:97:45:cb:18:5d:b4:e7:97:4a:a5:d6:59:e0:
e8:1f:dc:35:a5:ee:11:28:a7:3c:87:90:05:04:73:02:55:9e:
7c:a0:32:07:9e:31:d5:48:48:6d:b3:e4:fd:25:fc:e9:f7:51:
77:53:c3:d8:49:40:df:5d:45:e6:ad:fe:30:6f:1f:27:06:76:
c4:de:f3:69:d0:42:32:be:d1:99:f7:b6:02:0a:55:ae:24:62:
81:64:24:64
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZyfSDrSuEVKvv4D//fC2JxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjI3MTMyNzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDFmNDBmYmNiZDM3MzUwZmFjZWFlOTc4NjhiMTUyZTNlYzFiZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim8U3urizWp4MqaRqInxZAx7MEcL
S5CCDIv6QeCVNgYtULwXgDGWIH3FhUyTZvODGSyRtBoFZzA3/wpa05RtT7Rxp07L
zQZwEbPpcJOlEiV6e4K8cCWhEFS6hnf4BcpMbEaHVubCBpB6Gvi34V9Cm4uSPv0r
DZghWoTs1rT6Q01GgIhTu0dBjOhL85pCB+VLYra4xxKgPMZkPIp6OCVXj/QmsXac
3bzUfs7rYGh+yFftcz8tpKN2jJb/NSqgP4Xly16kMKqNwUv2Vi4RR9bI6sa0f/4S
xiZn/26/QLAhzvIGAwbDkB1bSmTHvyVuhxUlD1WYhDIvIwQ+7gGoFVYJTQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKAfQPvL03NQ+s6ul4aLFS4+wb3lMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2E4MDZk
Ny00NDc5LTRlMWUtYThmNC1hMTI3YzY1MmRmZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvYTgwNmQ3
LTQ0NzktNGUxZS1hOGY0LWExMjdjNjUyZGZlNi8xL29COUEtOHZUYzFENnpxNlho
b3NWTGo3QnZlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaYjANBgkqhkiG9w0BAQsFAAOCAQEAaCHXXP85VMds
7+cBYYhwa3s3JVmVt5eYrYww/qiGizpwmxL3Cdc0TiEIJf07Om5r5QDhkFyLdqy7
jGVUA3B6Kl7pxQaDWGV7exaxvIIgjDYH7vXAaolnr6qMc0nZZWxCYe+AAPcXp+TE
vcdryCuoeMgN6j3NdQHpjBSUlS4ry31s71mXhEuzOoU9gwTIcuJLSnJM+5UcnVq7
wkKdcbhvmcMEVX3/VguXRcsYXbTnl0ql1lng6B/cNaXuESinPIeQBQRzAlWefKAy
B54x1UhIbbPk/SX86fdRd1PD2ElA311F5q3+MG8fJwZ2xN7zadBCMr7Rmfe2AgpV
riRigWQkZA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:13 2026 by rpki-client