Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
File: txOOSEDKo6G9UYUnFKE1-w6DfEU.cer (raw, json)
Hash identifier: s1NNsVVYhBhVMoMq0XiFtpKfLcMzhLyzTaJlJjRTvcM=
Subject key identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797E08603252E1B02CD0012F1A961919
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:17:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216359
IP: 194.153.212.0/23
IP: 195.128.131.0/24
IP: 2a13:8840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:08:60:32:52:e1:b0:2c:d0:01:2f:1a:96:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:c3:f3:c3:3a:f2:14:61:5b:7e:b1:24:b7:
36:11:d1:84:c0:b9:7e:f3:9a:09:91:31:79:14:02:
c5:17:f0:95:ae:73:78:15:13:9e:6b:9c:b9:b8:46:
5c:1e:e4:1e:4f:ce:b5:c8:67:72:38:17:b1:40:b5:
45:46:43:ed:e5:a4:6a:9f:5a:91:ec:6e:b8:7b:d8:
1d:32:30:d6:05:b1:68:49:ce:d3:84:f5:a1:41:ba:
d0:3b:ab:26:b4:f0:69:2e:ba:0d:8b:72:74:7c:78:
f6:9a:d0:9c:0f:43:ab:b6:d0:98:18:95:e9:c2:83:
8c:b1:91:6a:25:83:46:7c:46:24:2d:2d:12:f5:a2:
cb:15:8c:44:2c:d7:fe:92:12:e2:a1:91:de:af:a8:
7e:ea:db:c1:fb:de:67:2b:54:c2:29:88:47:71:f0:
6f:f4:92:96:bb:36:47:5b:10:c7:d8:6f:6d:4a:43:
eb:d6:fe:f0:46:08:43:6a:de:54:cc:a9:0c:2b:9a:
d6:f5:e2:80:f5:6c:d9:e6:88:7f:5c:58:fe:ad:1a:
69:f9:fc:9f:84:41:00:f0:12:66:10:ca:78:bc:14:
4c:52:8f:de:d3:b8:88:c7:7c:c8:e9:33:6b:6d:0f:
6d:9c:00:10:75:83:89:01:e0:a3:da:2c:11:66:16:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.212.0/23
195.128.131.0/24
IPv6:
2a13:8840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216359
Signature Algorithm: sha256WithRSAEncryption
4a:fc:c2:5a:f4:d8:c6:31:fc:54:1a:79:32:9e:b9:8b:e4:59:
46:f6:97:31:b6:0c:62:0f:7f:20:44:c7:27:24:1a:2b:ee:22:
8f:ed:1a:a8:c7:09:8f:39:e6:b3:34:c2:7d:be:c8:5f:5a:5a:
c3:2c:cc:f5:8a:b7:76:1e:38:de:df:ef:e0:0e:ef:f9:29:a4:
3c:fe:1b:bb:71:b2:c8:c6:a0:50:d5:a4:c9:02:20:63:af:08:
7e:f1:0e:b3:62:0c:ef:27:d8:33:46:32:fd:95:64:25:f1:5c:
06:90:64:49:0a:ed:0d:00:c2:e4:79:fd:26:94:a9:94:d0:e5:
ed:cc:5c:5d:a4:e2:e7:8d:51:f7:dc:3c:1a:d3:47:28:ef:9b:
e9:d8:36:da:20:a1:49:d1:da:7d:0b:e8:13:13:c9:43:be:d7:
bf:ae:f5:62:20:9b:15:3f:b2:86:a9:81:a8:ff:c9:74:4a:1f:
14:59:73:5d:a6:8f:46:aa:6d:b2:17:6a:4e:3d:67:73:27:d3:
68:57:d9:17:86:f6:3e:65:93:ff:8e:7b:5d:59:70:30:18:f8:
41:a4:18:82:33:2e:9e:4f:44:72:40:51:04:1b:27:d2:df:66:
10:15:73:a3:2d:40:82:5f:da:e1:2e:f6:58:f8:6b:a3:22:8c:
78:f0:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:31:32 2026 by rpki-client