Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
File: NjOS8byM36C-OSjE9VgwM1iE1I8.cer (raw, json)
Hash identifier: D2G5t2JgpSEz1CXVaTTDFWUnwhGO47obMplmM8DPaBs=
Subject key identifier: 36:33:92:F1:BC:8C:DF:A0:BE:39:28:C4:F5:58:30:33:58:84:D4:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A182DCB6DA06557BDC5F6DBD9668BAB7C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Oct 2026 14:14:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 22665
IP: 149.245.253.0/24
IP: 2a04:d840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:dc:b6:da:06:55:7b:dc:5f:6d:bd:96:68:ba:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 14:14:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=363392f1bc8cdfa0be3928c4f55830335884d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:88:20:a7:7a:83:0a:be:1d:49:58:66:78:
37:bb:5c:5c:9e:7b:59:83:97:0f:ab:32:d3:c5:44:
f2:5c:4e:34:06:1a:98:90:27:9d:ae:fa:2f:25:b4:
dc:64:7b:13:3d:5e:ff:b7:4c:24:41:0e:62:35:f7:
66:3c:df:30:f8:aa:4c:23:de:85:cf:61:ef:70:6a:
cd:31:27:ba:2f:d3:53:30:31:51:eb:2a:7d:e8:63:
15:1f:80:56:af:1a:d6:ab:3b:8e:41:22:27:48:36:
d6:f2:a2:0f:b7:28:10:bc:a9:ab:35:20:81:28:41:
05:9c:7f:fa:89:4a:3d:cc:a0:e7:8f:e0:d2:12:02:
e0:d2:26:e2:64:de:8c:4c:aa:36:12:35:94:d6:e6:
5c:1f:5b:fb:2b:f2:ab:a5:b7:e7:4a:26:2c:3c:86:
39:39:67:1f:08:ac:70:dd:19:c1:2c:d1:34:43:2b:
47:72:1e:46:1f:29:9b:cc:c0:fd:fc:9b:f2:8b:04:
39:cd:b5:64:9d:72:85:d8:d4:84:23:b5:3f:4d:fd:
eb:02:57:b5:23:7a:b8:2a:d4:ed:f8:61:0c:e7:09:
49:ee:5b:2a:76:7d:93:50:9a:71:6e:ca:29:9e:6f:
a3:eb:7a:3d:38:11:ae:db:70:64:9a:34:e4:70:25:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:33:92:F1:BC:8C:DF:A0:BE:39:28:C4:F5:58:30:33:58:84:D4:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.245.253.0/24
IPv6:
2a04:d840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22665
Signature Algorithm: sha256WithRSAEncryption
01:16:1e:4a:3d:27:3a:41:78:a2:99:d1:f8:7d:0b:d6:07:07:
21:eb:aa:60:ac:11:2d:f1:19:ec:28:12:b2:0f:e7:de:ed:cc:
56:86:98:93:ff:a1:4e:65:50:d8:be:e6:8a:1b:1c:34:03:88:
88:7c:59:fb:51:cc:54:8d:d1:e5:e8:f2:6a:a1:bb:68:da:b5:
72:d1:8a:a7:15:db:ca:36:9a:fb:ef:0f:38:9c:6b:56:2e:ff:
68:40:14:52:c3:07:c5:7a:d9:8e:bf:04:b0:21:43:0c:6e:4f:
94:d7:bb:07:a9:e4:8c:6c:c0:d6:8b:aa:1d:e9:5c:83:b2:51:
82:b5:c1:9c:f1:77:3b:d3:6b:ba:13:3a:e4:c2:ab:f9:91:b9:
4d:bf:b3:a1:63:46:5d:21:34:39:47:9f:95:0d:d4:72:7e:16:
b8:af:84:47:f2:98:d8:f3:3f:49:a7:d3:dc:25:2a:44:2e:04:
75:96:10:f0:08:ed:bd:59:f9:36:ea:12:60:c0:a8:cf:27:8c:
36:0c:6d:82:78:d1:92:c1:86:e6:a5:08:0b:3b:59:03:a5:b2:
89:22:b0:a6:33:7f:94:2f:b7:22:db:26:ca:4c:15:1f:fd:1c:
f8:79:46:27:01:5c:ee:71:1b:01:78:02:19:fa:b2:5a:3d:33:
4a:44:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:17:49 2026 by rpki-client