Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
File: oUaknFXDAyf4rSIKTpm53G5j4Tw.cer (raw, json)
Hash identifier: pbWVz9DTKd3hHc4IR4jcJYdna+cNj0kqTj1Gn13UQu8=
Subject key identifier: A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F6AD062B53220FD2C99A16FAB60CDA95B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jul 2026 12:04:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.213.194.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:d0:62:b5:32:20:fd:2c:99:a1:6f:ab:60:cd:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 12:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:22:d2:7f:54:1f:9e:24:d5:c1:f8:5d:57:
00:6a:ab:c8:b1:8f:c5:67:6e:c6:34:9e:17:71:af:
8c:e1:c8:da:29:57:b1:c4:5a:03:4d:88:b8:e9:bd:
4b:62:b1:74:96:8a:24:38:0b:56:84:87:1e:71:56:
8f:69:58:9e:57:1f:1f:45:92:3d:45:b0:31:8b:90:
40:1b:6e:91:4e:4c:13:60:97:61:8e:df:a1:32:86:
fd:b0:b6:16:09:d5:17:e8:53:fc:13:96:8a:49:1e:
6b:f1:f9:f8:2b:73:c5:9d:49:3a:86:94:14:e3:1f:
5b:17:1e:ed:3c:4a:12:fa:55:2d:66:6a:46:61:8d:
82:34:99:63:40:14:c4:08:20:bc:60:47:06:0b:79:
55:af:7f:c8:5c:fd:eb:fe:a5:b3:1f:2f:42:ff:ee:
1e:73:8b:97:46:d4:7d:b0:a2:22:63:5a:d5:2c:aa:
3e:cc:89:a0:9a:5d:63:b4:0c:9d:a9:67:e2:fa:f2:
94:1a:b5:e7:0f:b7:6e:31:02:12:63:ac:96:d1:37:
0f:48:67:5b:c9:b5:3b:dd:8c:1c:89:7c:9d:0d:94:
11:28:43:7c:59:df:e4:66:94:09:57:3a:7a:81:eb:
18:02:03:7d:2d:ef:9e:55:d8:42:80:f9:0a:fa:ab:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3d:ea:4b:0b:e0:3f:1e:17:02:9a:15:14:47:7d:e2:2b:5e:
da:87:95:c8:76:8d:87:e3:35:b7:5d:59:4d:e9:5b:94:36:92:
f0:1c:50:55:5a:c8:ee:e9:ba:e0:26:bf:d7:b1:f5:ff:a8:aa:
4e:f5:13:c3:6e:84:38:93:b1:0c:a6:55:87:43:de:1f:6d:b3:
cc:e6:0c:91:ef:61:4a:f2:4e:fb:15:50:d8:11:61:ab:23:38:
d1:97:a5:c4:ff:89:0c:84:cd:dd:40:36:f1:14:70:91:99:b9:
46:05:d0:93:53:1f:b0:d7:fd:d0:c5:66:76:4e:ed:06:fa:6d:
fe:b9:fb:fe:8f:fb:aa:47:bf:39:02:4a:af:47:aa:53:5d:7d:
15:2d:61:f8:bd:61:f2:23:1c:eb:17:ff:68:40:f5:5f:1c:7e:
e8:3f:25:a6:9f:9f:04:66:93:d9:2a:0a:8e:a7:43:0c:eb:2c:
7c:2f:c2:7e:b6:ed:e1:68:90:53:18:88:8f:06:dc:35:09:3c:
8a:62:d5:ed:77:6a:51:f7:c9:bb:97:26:40:c8:4e:80:21:69:
f4:07:b3:92:9d:15:be:3f:e4:88:9e:ad:9b:7f:23:41:86:6e:
6c:fb:3f:14:2a:f2:11:53:fa:46:d8:ef:ac:dd:1a:e9:05:a9:
75:ab:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:40 2026 by rpki-client