Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
File: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer (raw, json)
Hash identifier: rgXy+J9TpQdfqxDaQt9vNpQ/vIiwbWGkM6nXxqcDEoo=
Subject key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11BB5737F9B28DD775915264183E09026
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 13:30:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210152
AS: 210475
IP: 2001:67c:e88::/48
IP: 2001:67c:2ff8::/48
IP: 2a0a:3e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:b5:73:7f:9b:28:dd:77:59:15:26:41:83:e0:90:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 13:30:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:64:3f:c7:e1:1d:db:e9:8c:99:cb:01:38:
c1:16:cf:5a:77:31:5b:c4:ee:59:16:21:c6:0e:f1:
3a:2f:a4:83:69:14:ab:3a:06:f6:47:56:d8:33:5a:
c6:60:a4:1d:5b:5f:24:1b:9b:cc:5d:d9:32:6d:28:
03:50:6c:72:ca:fe:8d:d9:b1:f6:55:5f:64:80:80:
e4:dd:5b:97:8d:05:3b:88:92:80:3e:8c:01:6f:8a:
df:63:43:44:a4:3a:ef:40:a3:f0:ca:8a:dc:bf:5b:
2f:ad:d9:19:76:1d:84:07:67:12:e7:e8:7b:c7:6b:
3f:91:3a:e7:9f:d3:98:a8:ce:a3:d4:fa:5f:b5:2c:
1d:6e:af:b2:1e:8a:82:8d:47:9c:e2:95:0b:e2:95:
ef:f8:3b:a9:c5:7b:e8:d8:36:d9:43:cf:fd:87:cd:
0a:9d:89:53:31:36:39:6f:fb:ea:80:ca:06:8c:8d:
41:de:0d:66:e7:7a:f7:52:25:ea:51:e2:90:a7:0b:
99:b2:33:1d:4b:00:95:60:d2:f2:8b:fc:bb:12:5b:
d8:81:08:0c:bb:57:30:57:33:ca:d1:67:26:7d:0b:
a4:44:29:d4:f5:30:9b:80:87:93:9f:b4:00:b5:02:
da:d1:d5:2f:d4:5d:8c:0c:90:78:1b:0b:28:c3:e5:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e88::/48
2001:67c:2ff8::/48
2a0a:3e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210152
210475
Signature Algorithm: sha256WithRSAEncryption
74:0a:ef:d7:62:2e:92:02:2c:21:2c:92:2c:33:11:bb:1e:6a:
a8:c0:32:b7:eb:d6:3d:39:68:2d:80:8e:41:ab:bb:83:dd:94:
06:a5:c6:42:c3:8b:f3:2d:e1:98:a5:2a:39:1e:c4:5d:f6:f9:
35:a1:75:bc:e9:90:bd:75:9e:e0:1b:21:cd:4f:d2:ca:13:0a:
c6:cb:e4:06:4d:98:e2:25:a3:d3:4f:ba:bb:c5:0c:eb:43:a3:
2c:a5:11:0c:1c:68:b1:04:b3:08:31:c7:f5:9e:14:f7:be:a3:
88:5d:1b:5a:c3:9c:33:e7:5f:70:4c:81:d9:a5:ea:27:9f:28:
f5:41:bd:c1:ac:b4:a7:7a:ff:3e:90:bf:da:67:9a:4e:7a:62:
7b:fa:8e:68:a1:b9:b1:2f:31:36:28:2c:48:51:24:ae:d2:dc:
0c:ab:29:6e:4c:41:11:5d:a4:86:92:2a:6c:22:76:39:89:00:
70:04:46:d8:37:64:c8:b9:40:51:e5:f8:09:b4:5a:28:20:8a:
04:9b:76:e2:b8:23:50:dc:27:d7:1c:98:b0:d8:99:af:39:d0:
74:d4:97:09:97:ac:f6:07:19:16:66:73:f9:d2:cc:a4:16:d2:
56:0a:fa:ad:17:9c:7f:1b:b6:6a:6f:26:7a:17:c2:aa:11:d9:
7c:e5:64:b0
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAaEbtXN/myjdd1kVJkGD4JAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA4MTMzMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjUzODY3Mjg0MTMyZWVjY2Q1NmU2YjE1NWNmN2Y2MjdkMjY0ZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0BkP8fhHdvpjJnLATjBFs9adzFb
xO5ZFiHGDvE6L6SDaRSrOgb2R1bYM1rGYKQdW18kG5vMXdkybSgDUGxyyv6N2bH2
VV9kgIDk3VuXjQU7iJKAPowBb4rfY0NEpDrvQKPwyorcv1svrdkZdh2EB2cS5+h7
x2s/kTrnn9OYqM6j1PpftSwdbq+yHoqCjUec4pUL4pXv+DupxXvo2DbZQ8/9h80K
nYlTMTY5b/vqgMoGjI1B3g1m53r3UiXqUeKQpwuZsjMdSwCVYNLyi/y7ElvYgQgM
u1cwVzPK0WcmfQukRCnU9TCbgIeTn7QAtQLa0dUv1F2MDJB4Gwsow+VIWwIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFDtThnKEEy7szVbmsVXPf2J9Jk9AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzNhZDU1
OC01MWEwLTQ4MDAtYmJmOC1iMjA4NThlMjk5M2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvM2FkNTU4
LTUxYTAtNDgwMC1iYmY4LWIyMDg1OGUyOTkzYi8xL08xT0djb1FUTHV6TlZ1YXhW
YzlfWW4wbVQwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUF
BwEHAQH/BCMwITAfBAIAAjAZAwcAIAEGfA6IAwcAIAEGfC/4AwUDKgo+QDAfBggr
BgEFBQcBCAEB/wQQMA6gDDAKAgMDNOgCAwM2KzANBgkqhkiG9w0BAQsFAAOCAQEA
dArv12IukgIsISySLDMRux5qqMAyt+vWPTloLYCOQau7g92UBqXGQsOL8y3hmKUq
OR7EXfb5NaF1vOmQvXWe4BshzU/SyhMKxsvkBk2Y4iWj00+6u8UM60OjLKURDBxo
sQSzCDHH9Z4U976jiF0bWsOcM+dfcEyB2aXqJ58o9UG9way0p3r/PpC/2meaTnpi
e/qOaKG5sS8xNigsSFEkrtLcDKspbkxBEV2khpIqbCJ2OYkAcARG2DdkyLlAUeX4
CbRaKCCKBJt24rgjUNwn1xyYsNiZrznQdNSXCZes9gcZFmZz+dLMpBbSVgr6rRec
fxu2am8mehfCqhHZfOVksA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:53:04 2026 by rpki-client