Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
File: olrSzhcYk-YHpyuunQVE_AHTCao.cer (raw, json)
Hash identifier: k19DNNocMgqEqJ+CK8pq5JYBkEBH2xOc1ltLyk+kiZ0=
Subject key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DE24F13B58E8A8E716FB0F5B23C486ADB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 May 2026 06:52:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199813
IP: 195.60.85.192/26
IP: 2001:7f8:170::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:4f:13:b5:8e:8a:8e:71:6f:b0:f5:b2:3c:48:6a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 06:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:28:28:01:95:f3:57:96:7b:33:e1:ed:d0:
64:61:f7:4c:89:50:00:b2:1f:9f:5f:53:4a:bd:32:
7c:f2:72:7e:3f:d6:d2:b9:3e:78:c7:c1:b6:33:a9:
4e:11:f9:c9:92:24:ec:5f:59:29:d2:94:60:a9:11:
ef:92:46:39:46:24:b7:6a:05:06:09:69:7d:5b:31:
76:a5:a1:59:a5:7a:0f:42:ed:28:77:12:f7:5c:65:
9c:9b:da:6f:e3:ed:b1:bc:21:c0:09:b7:0f:e5:03:
02:9d:c9:16:12:ff:26:80:73:d8:fe:70:54:94:2d:
78:5d:23:4e:07:87:36:94:3b:43:50:9b:c8:4d:c3:
81:00:18:ec:e0:85:86:60:bc:55:b8:c8:e8:48:0d:
0f:8d:5a:48:41:70:67:b9:cf:6d:3e:a3:88:48:ad:
f9:90:c3:c4:35:3c:bf:b1:3e:85:e1:85:0e:0d:34:
7f:b2:f2:84:7b:af:be:e5:a1:55:7c:ac:45:ef:d0:
1c:b5:7d:bc:2a:11:c6:50:32:42:fe:85:88:3e:59:
39:f2:b8:46:ad:e6:a4:c4:b5:ca:54:6f:86:e5:0e:
c1:46:93:4c:3b:a6:b0:bf:f2:8f:3a:e6:a9:15:53:
b4:f2:2d:07:9d:a4:33:98:8f:5e:8f:6f:7e:32:c5:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.85.192/26
IPv6:
2001:7f8:170::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199813
Signature Algorithm: sha256WithRSAEncryption
72:7f:98:e6:da:99:ad:c8:33:0c:16:21:b1:04:22:73:f0:38:
c6:fa:6b:c7:6d:05:a5:26:3d:c1:30:d0:29:c9:37:71:96:68:
24:96:35:84:ad:99:6f:36:0b:d7:78:93:33:01:06:43:4e:01:
e9:f6:e9:ef:c6:be:35:6b:48:74:c2:21:ec:81:be:71:0c:b7:
d3:99:6e:bb:ad:ea:8e:95:c2:d8:0a:10:52:36:d2:73:fb:46:
b7:10:0a:57:60:41:07:fb:9e:cf:1e:11:ac:da:9a:52:54:fb:
42:b6:d3:ec:fa:15:f5:47:fb:8c:0d:58:b2:0c:d5:84:a1:ab:
cf:41:db:8d:68:8a:b9:53:71:ee:ca:5e:dd:a8:63:3a:17:a4:
5a:ce:a7:54:dc:3f:dc:60:22:f7:48:fe:e1:a7:a6:87:7c:e5:
e0:93:bd:09:79:b0:53:4d:66:fb:e9:c4:cd:8c:b6:6e:d1:86:
8d:a8:84:b8:e0:ab:90:18:29:ea:22:70:bb:ef:35:3a:ec:55:
a8:c9:48:65:a3:68:50:8e:a3:a2:9f:0b:c3:db:e5:b3:ec:39:
b4:4c:cf:39:6e:f6:4c:9b:31:ca:db:26:d7:be:e0:d1:74:5e:
f3:64:f2:8f:7b:20:f6:e4:34:39:3a:6a:ae:ad:10:53:4c:04:
b9:19:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:51 2026 by rpki-client