Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
File: od-mNA5rzLQ37DD8-o9NgtwVzK8.cer (raw, json)
Hash identifier: mnle/RW5SF/35nFDq1HWScLkyMWCh3GrQKnsJrRG+As=
Subject key identifier: A1:DF:A6:34:0E:6B:CC:B4:37:EC:30:FC:FA:8F:4D:82:DC:15:CC:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB2F60138C48550B90F177335B54AFDA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 03 Mar 2026 09:09:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197029
IP: 80.92.240.0/20
IP: 2a02:cbe0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:f6:01:38:c4:85:50:b9:0f:17:73:35:b5:4a:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 09:09:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1dfa6340e6bccb437ec30fcfa8f4d82dc15ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:e8:5c:f9:55:43:f4:ad:70:ad:d3:26:79:
6e:8e:9f:de:81:1f:ce:55:4c:0b:6e:f5:74:2e:80:
de:f3:9d:9d:42:1e:a9:f3:34:85:2b:06:01:e2:14:
34:98:06:c4:f2:76:fc:ab:44:36:89:9a:40:17:6c:
50:9a:5f:83:4c:7e:25:19:c2:06:8b:16:12:fb:50:
00:bf:50:05:33:45:71:21:cf:66:66:ed:47:43:99:
a2:f7:34:f5:53:12:34:3d:1a:cf:c0:a3:2a:78:33:
f0:77:3f:03:bc:7e:44:3d:13:7e:f4:69:8a:87:1c:
5f:32:4c:d3:cb:92:35:48:6a:a5:1e:bc:3b:d2:3f:
2a:c1:c4:ad:30:95:1b:9f:98:b9:08:a7:10:87:a3:
2c:d9:aa:66:14:d8:72:b0:b8:8e:92:13:03:c4:3f:
cf:25:f1:a9:33:19:05:7e:0a:0f:67:0e:0b:cd:49:
c2:a0:24:55:b9:1b:22:82:36:0d:39:ae:25:55:fd:
eb:07:c7:1c:f0:b1:c7:66:45:d7:6e:c4:81:38:c3:
8c:eb:65:86:a6:20:38:22:02:60:3c:d5:9e:ef:6b:
1b:d8:13:d4:ee:5b:74:10:f6:8d:60:dc:a0:38:cf:
90:7d:3b:50:ed:5a:fa:3e:20:e2:bf:24:93:6c:9e:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:A6:34:0E:6B:CC:B4:37:EC:30:FC:FA:8F:4D:82:DC:15:CC:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.240.0/20
IPv6:
2a02:cbe0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197029
Signature Algorithm: sha256WithRSAEncryption
33:47:b8:40:83:8f:dd:9a:a2:83:38:62:bf:12:82:cb:05:8e:
31:2c:89:d0:c4:ee:bf:82:1a:a0:82:a3:2f:6f:87:ed:e6:3c:
a8:6a:d1:b6:dc:45:f1:9f:51:f3:81:8f:4e:82:af:f0:c9:e2:
91:c9:f9:87:b8:9a:7c:c3:b8:91:c5:e3:07:e5:1e:33:7c:57:
a0:12:68:29:70:5a:d9:7b:e7:7f:d7:9a:4c:6f:49:a7:35:14:
bb:da:0e:61:62:40:50:13:84:4d:37:70:21:6f:46:0e:e7:c4:
f1:6e:40:b1:6c:89:a5:80:53:34:9d:35:5b:d9:14:fe:1c:f6:
2d:b1:1b:aa:3f:80:05:b9:81:ca:7d:e5:40:f4:f7:c7:2a:76:
6d:d1:e2:8a:51:11:4e:47:eb:16:1c:1f:c9:c2:cb:9e:ea:73:
62:0e:a0:23:eb:03:8a:2a:6c:ef:a6:6e:f5:78:50:70:68:3f:
62:44:27:be:bd:4c:fe:78:6e:0f:3f:16:54:e7:af:08:41:3d:
08:c0:07:2f:2b:c2:22:e1:22:49:02:5f:6f:4a:48:1e:fa:24:
92:5e:56:df:63:3d:26:8b:01:cb:54:ba:48:c5:60:c1:16:65:
30:5b:ee:5d:cf:77:ff:3a:5b:3a:00:41:3e:0e:0c:c1:35:cf:
9f:2b:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:13 2026 by rpki-client