Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
File: OVUKm3Usc5f29p6qaoDwm6f32Co.cer (raw, json)
Hash identifier: AdVPpFtrdn28RgcJlY/rU9LtZBex3YhmK40QTwtPIvc=
Subject key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01985619D98DABDBC30E13AE73E830546FC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Jul 2025 12:13:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212644
IP: 31.210.188.0/22
IP: 188.208.132.0/23
IP: 193.163.75.0/24
IP: 2a0d:7000::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:19:d9:8d:ab:db:c3:0e:13:ae:73:e8:30:54:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 12:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:20:af:2e:05:93:33:78:f6:b0:dd:d2:45:
0e:6f:0c:93:5b:89:fe:41:b6:db:c6:5f:c2:76:37:
e9:6b:1f:cd:6c:26:4d:11:70:c6:31:97:a2:d5:da:
a4:2b:c9:bf:15:24:22:9b:e5:06:86:fc:39:f6:f7:
be:e5:f8:63:fb:c2:1b:6b:44:11:92:6f:91:5f:8c:
1f:81:bf:cf:2a:80:c7:3c:b8:52:d6:be:20:d1:c8:
85:c2:ff:34:bd:01:c9:7e:84:ed:75:97:ce:86:64:
7a:9b:10:14:0f:98:91:b5:f6:2e:4e:36:69:1d:93:
05:51:12:1d:6a:e3:ce:c0:21:56:6f:67:2d:d5:9a:
7a:aa:f5:62:c5:37:63:b4:60:72:f4:13:66:a3:a1:
58:b6:48:50:e6:da:e0:ea:b8:c6:79:41:75:03:d2:
20:9a:24:59:fb:76:b2:24:cd:ba:59:ad:af:ba:73:
25:59:93:a7:65:52:c7:7f:9c:aa:55:8c:75:10:ea:
95:05:82:f0:11:63:e3:4e:c4:a1:69:e1:6e:e9:0f:
f0:9c:87:38:2a:87:ef:19:5f:8b:17:00:e5:0e:61:
2b:b9:e1:14:09:e8:b0:4e:fd:58:9e:7f:81:63:af:
89:bd:e7:f6:2f:df:1f:17:7f:32:23:61:33:b1:4b:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.188.0/22
188.208.132.0/23
193.163.75.0/24
IPv6:
2a0d:7000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212644
Signature Algorithm: sha256WithRSAEncryption
3c:55:79:1e:42:47:e0:86:d6:87:c8:3c:03:e3:f9:e5:55:a4:
0f:ff:e0:27:38:b1:07:b4:ba:f5:73:a1:8b:32:c3:36:a7:8a:
dc:26:3e:0a:20:ff:96:cb:11:9f:f2:d3:ed:ae:16:1d:a4:79:
78:93:b0:c8:e7:f2:d9:75:b0:6b:89:bc:d1:d5:fc:64:c3:31:
cc:a6:f7:5e:47:a8:74:76:63:a3:03:1d:2c:06:2a:f1:a5:e3:
52:2b:01:77:a1:eb:35:11:39:1d:42:24:61:b0:7f:da:d6:15:
14:14:df:6d:4f:1c:b9:a1:b1:6e:73:f9:cc:15:dc:06:79:6a:
12:29:66:b6:d8:13:0a:4a:4a:71:ee:a7:46:18:2d:1e:1a:f3:
b2:de:a3:77:ff:7f:b3:23:b9:62:f2:bc:60:83:7e:94:3c:53:
5e:bd:85:7c:43:c4:3e:79:9a:9c:57:4d:d4:cd:d6:95:d7:af:
74:83:e1:2f:6b:80:43:bf:41:af:41:fa:0f:bd:a8:4c:7c:2d:
9e:53:96:66:61:18:ca:0b:a7:16:2d:5d:6d:12:1c:d5:b4:62:
c9:fb:8c:9d:fe:7b:62:37:e5:50:45:37:7d:d2:5e:5c:51:c5:
fc:ed:29:11:c5:11:b1:64:38:21:20:60:9f:de:e3:a2:3b:56:
fc:4d:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:10 2025 by rpki-client