Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
File: oXYKUBSDGdYXKjgg2IipJMCdel8.cer (raw, json)
Hash identifier: 7/qPINszz3+AtariQyAPa1rmkmphoMPJs0G8NM3txtU=
Subject key identifier: A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A2764C19E4D37DE6AF2B45A14FAE4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:17:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 25167
IP: 193.109.113.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:76:4c:19:e4:d3:7d:e6:af:2b:45:a1:4f:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1760a50148319d6172a3820d888a924c09d7a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:42:f0:8d:69:93:f2:84:16:de:6d:07:2e:
87:96:94:1b:43:95:ef:db:af:d7:ab:36:f7:44:1f:
91:43:af:97:01:2a:cd:58:07:bf:91:5a:d3:b3:67:
ea:ad:97:b7:6b:d2:7d:4c:64:38:5f:58:e2:67:4b:
08:c2:84:7b:9b:3d:f7:ce:75:65:31:62:3f:8e:a1:
f3:5b:26:98:68:54:ee:2f:59:6f:11:ea:fd:d0:ba:
a6:0d:37:12:23:d9:0c:a0:4c:84:f3:32:73:d2:c5:
d7:c6:6b:55:50:28:f4:85:17:8a:91:bd:08:8b:73:
af:7c:06:8f:e9:99:b5:bd:25:f3:5c:be:f5:5a:d7:
17:45:14:79:b2:c8:22:8d:e2:fb:2e:a4:6e:8e:64:
e2:5b:11:2e:45:d7:42:e9:1a:19:b6:9a:bb:66:e3:
63:49:29:eb:68:55:64:81:bd:d3:a0:3b:13:0b:fa:
13:9c:61:01:02:35:86:1b:2a:1f:5e:f5:ef:a6:7c:
4c:30:fd:92:07:ff:5a:c9:ca:22:90:ad:d0:4d:18:
7e:17:4b:08:38:8f:a2:85:02:7b:2e:fe:32:f0:b9:
77:29:ad:a6:2d:bb:cb:ee:4a:bf:32:a1:4c:84:fa:
7b:40:63:3f:9a:c1:26:a3:e2:b1:21:3a:35:2c:50:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.113.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25167
Signature Algorithm: sha256WithRSAEncryption
8b:b8:80:cb:89:da:8d:90:ff:2e:dc:c1:62:ad:93:09:e0:11:
d0:4e:97:17:f0:1f:14:1a:25:84:44:99:53:39:09:0f:9f:33:
df:46:43:7d:ea:6b:26:8b:49:a2:78:e1:98:1c:7a:2d:fb:be:
53:75:e3:26:2b:4e:eb:a1:ab:29:ab:2b:6b:04:d4:14:1b:98:
55:ae:ae:b8:a2:00:16:78:53:02:36:2b:6c:5a:77:1a:2d:a8:
b0:13:73:0e:f2:ba:2d:1c:ca:42:fc:55:4d:ec:cb:ba:58:11:
a6:ca:e8:69:3d:36:9b:b6:42:bb:c5:fe:fb:1e:ce:ec:68:71:
af:71:95:58:84:40:15:00:a4:b6:56:93:79:f7:98:79:8c:23:
47:05:3f:69:68:69:35:9b:4e:bf:4a:f7:6c:91:20:b4:0c:0a:
03:67:67:5e:25:22:dc:16:d4:69:3d:a0:f4:a6:97:78:6b:63:
90:83:b8:e2:5b:f6:68:96:3e:e5:b7:18:40:de:fe:56:c9:f9:
d8:c0:79:66:a1:7b:dd:63:c9:c5:bf:1a:45:ea:f2:fc:17:c4:
00:02:c2:86:01:b5:5e:b3:18:b3:ef:85:a3:11:5e:e2:08:51:
0f:ab:35:ce:d5:87:14:5a:d2:32:44:e3:4a:3a:2b:fa:db:e1:
d0:b8:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:23 2026 by rpki-client