Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
File: OLB6ACu3vw06zI3UqV8jesYf1ng.cer (raw, json)
Hash identifier: zQXi1AYM+S20OfbsnxSpdSZHPJBXfFqWYv1Y08UZ4yM=
Subject key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D488A8CF773E4AB9171398765DE821F6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Apr 2026 10:15:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215018
IP: 81.172.46.0/23
IP: 81.172.102.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:8a:8c:f7:73:e4:ab:91:71:39:87:65:de:82:1f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 10:15:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:de:e8:c6:63:a4:29:c4:e6:aa:f6:06:75:96:
05:fd:ef:cb:c9:4d:50:2d:f5:31:da:fa:1e:97:92:
c8:9e:71:18:ec:ed:ae:59:d0:b1:7d:9b:27:63:8d:
6c:4f:1a:8d:73:bc:05:d9:dd:f8:a5:91:43:78:57:
07:ae:94:9d:e7:b4:df:88:84:53:42:96:40:6d:47:
ca:03:ec:e9:4e:67:a5:92:59:57:5f:1a:8c:17:c1:
b2:e3:ea:81:b3:2d:0f:34:11:20:c9:0a:79:4b:af:
30:0e:7a:92:ae:09:f1:91:b8:e2:7e:bc:f9:8f:7d:
d2:d3:fe:ff:25:51:03:5b:e1:d0:b7:1e:00:99:8c:
18:da:6e:07:a0:6e:b3:97:2c:c7:8e:ee:ae:cd:37:
83:0d:b6:c5:78:85:74:d9:3f:5b:f5:3e:72:e8:a9:
29:92:d2:77:50:b1:5f:a2:b6:83:6f:94:69:a1:db:
04:a0:1e:b6:a4:bf:4c:c8:2f:ae:bf:7d:d5:41:f7:
2d:76:a4:b6:c5:7e:e0:cf:34:b5:42:f1:a9:fa:76:
2f:96:4b:e9:af:23:1d:e3:d4:30:3a:5f:d0:ec:f7:
af:53:15:2e:98:6a:35:db:ea:6a:5b:ba:be:5f:e9:
a3:0d:c4:52:53:5d:98:5e:ca:bf:6b:74:12:28:37:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.46.0/23
81.172.102.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215018
Signature Algorithm: sha256WithRSAEncryption
2c:8e:8b:6c:e4:01:36:45:bf:8e:bb:68:37:8d:d3:59:fd:97:
90:7b:f6:17:85:24:11:9c:cd:54:4b:51:f8:a6:c2:91:4b:7a:
be:00:21:70:56:a3:f1:e0:e6:42:60:1a:4a:8d:5f:cc:8c:d7:
d7:b2:ca:f4:79:94:d0:87:be:a3:16:43:89:3a:7a:7e:13:f5:
43:f7:d3:31:db:44:92:d2:00:2e:dd:6b:b8:c4:00:1b:4b:62:
93:10:33:81:36:ab:3d:49:f2:c0:ce:68:71:2f:1d:fa:e2:6a:
fa:57:b4:0b:10:b4:75:75:44:22:a7:7d:32:47:86:49:58:1f:
bd:09:cc:6a:40:43:f1:36:6a:f7:55:4c:b0:20:f4:d2:b1:82:
3c:24:a2:8c:37:cf:48:f2:57:61:21:f9:c7:f0:1a:15:81:4a:
71:39:1d:1a:ff:5a:d8:df:1d:dd:60:04:14:0c:f6:b6:c6:72:
11:79:96:e8:67:30:24:74:ae:8f:69:96:e3:37:c6:77:52:39:
53:b4:1c:e0:c7:07:67:38:b6:6f:13:6c:29:37:48:a4:f5:94:
0a:e1:73:72:1c:bb:b6:00:d4:d5:c4:dd:a6:94:31:70:24:d7:
a9:37:76:37:67:89:dc:92:35:3b:69:cc:68:2c:f5:5b:1b:ee:
34:3d:10:9f
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZ1Iioz3c+SrkXE5h2Xegh9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDAxMTAxNTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGIwN2EwMDJiYjdiZjBkM2FjYzhkZDRhOTVmMjM3YWM2MWZkNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA897oxmOkKcTmqvYGdZYF/e/LyU1Q
LfUx2voel5LInnEY7O2uWdCxfZsnY41sTxqNc7wF2d34pZFDeFcHrpSd57TfiIRT
QpZAbUfKA+zpTmelkllXXxqMF8Gy4+qBsy0PNBEgyQp5S68wDnqSrgnxkbjifrz5
j33S0/7/JVEDW+HQtx4AmYwY2m4HoG6zlyzHju6uzTeDDbbFeIV02T9b9T5y6Kkp
ktJ3ULFforaDb5RpodsEoB62pL9MyC+uv33VQfctdqS2xX7gzzS1QvGp+nYvlkvp
ryMd49QwOl/Q7PevUxUumGo12+pqW7q+X+mjDcRSU12YXsq/a3QSKDfRFQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFDiwegArt78NOsyN1KlfI3rGH9Z4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzEzMWUy
Yi1lMThhLTQzZGQtOGE5Yi0wYmI4YTczMGI1MzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMTMxZTJi
LWUxOGEtNDNkZC04YTliLTBiYjhhNzMwYjUzOS8xL09MQjZBQ3UzdncwNnpJM1Vx
VjhqZXNZZjFuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBUawuAwQAUaxmMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwNH6jANBgkqhkiG9w0BAQsFAAOCAQEALI6LbOQBNkW/jrtoN43TWf2X
kHv2F4UkEZzNVEtR+KbCkUt6vgAhcFaj8eDmQmAaSo1fzIzX17LK9HmU0Ie+oxZD
iTp6fhP1Q/fTMdtEktIALt1ruMQAG0tikxAzgTarPUnywM5ocS8d+uJq+le0CxC0
dXVEIqd9MkeGSVgfvQnMakBD8TZq91VMsCD00rGCPCSijDfPSPJXYSH5x/AaFYFK
cTkdGv9a2N8d3WAEFAz2tsZyEXmW6GcwJHSuj2mW4zfGd1I5U7Qc4McHZzi2bxNs
KTdIpPWUCuFzchy7tgDU1cTdppQxcCTXqTd2N2eJ3JI1O2nMaCz1WxvuND0Qnw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 16:57:12 2026 by rpki-client