Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
File: OZp78rkKuMv9JMxPi63qeHf45JU.cer (raw, json)
Hash identifier: 3s0aVWrn/i34FaqNKTEfL8lf1UZK9MF0nNNm0Tu9Sq0=
Subject key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0AA54A421FDB84CA5E510C381A90A8BA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 16 Sep 2026 13:07:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 177.28.0.0/15
IP: 177.111.0.0/16
IP: 177.122.0.0/16
IP: 177.166.0.0/16
IP: 179.77.0.0/16
IP: 187.96.0.0 -- 187.98.255.255
IP: 191.133.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:54:a4:21:fd:b8:4c:a5:e5:10:c3:81:a9:0a:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 13:07:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:61:6d:61:0b:6f:22:73:5d:13:56:71:39:
07:6e:39:ee:b2:f8:b9:e8:cd:77:17:95:a4:10:28:
a3:c2:31:c9:05:7a:e5:96:94:df:fd:47:d1:7f:d1:
3c:67:a8:f8:9a:4e:42:e1:2f:ff:7f:ec:6f:a1:8f:
b0:e6:9d:c2:17:cb:54:de:19:bf:6d:79:7f:39:8d:
0f:51:4b:ca:f1:70:4a:53:f4:2b:b8:44:d1:15:9a:
87:54:32:1a:72:59:2f:85:08:56:e6:ec:20:12:73:
62:d3:e3:2b:ca:63:a9:c7:71:34:39:31:62:f5:b9:
52:d5:1b:17:08:39:10:35:56:c9:27:29:1a:1a:1e:
69:ce:91:a9:aa:9b:42:a2:b5:4e:8a:9f:5a:59:11:
6e:b0:e7:18:13:93:71:92:c0:47:c9:4c:cc:4f:76:
96:c0:69:6a:e7:3e:89:9b:6c:ec:52:41:d9:d4:08:
80:ca:0b:50:e5:d4:9f:4f:4b:bf:4d:c2:d7:e2:dd:
a7:92:8a:e3:01:89:31:73:6a:ae:78:6b:f5:65:57:
b9:29:17:26:1f:07:d3:66:16:5a:b6:4e:b5:e8:0d:
0f:0c:0a:4d:0b:a6:14:34:52:38:68:91:e6:41:b8:
a4:bb:77:cc:2b:77:e7:bf:26:59:ad:c5:65:e8:de:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.0.0/15
177.111.0.0/16
177.122.0.0/16
177.166.0.0/16
179.77.0.0/16
187.96.0.0-187.98.255.255
191.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:89:59:97:b1:59:6e:1d:86:c9:c5:af:2c:e4:3a:4f:26:62:
f1:b4:da:75:ee:e9:0e:9d:4e:4d:85:ee:af:a0:c6:a7:76:8c:
96:82:21:04:8b:ff:ff:79:eb:45:bc:e5:32:b0:ce:75:d1:ff:
43:f1:90:57:42:73:4b:9a:84:da:55:88:e2:3a:0a:f4:81:10:
e0:4a:30:d1:2f:e8:d0:7d:f7:e6:62:38:77:bc:7b:9e:bc:58:
b6:ee:a8:ed:f5:77:d2:01:71:e5:16:c9:09:9d:5b:64:c1:27:
02:1c:1a:a6:e5:2d:c0:d0:95:21:6d:7d:2a:3a:86:cd:f0:bb:
2d:6a:2c:ca:62:c2:f8:2b:fd:25:d1:fd:51:30:33:31:1b:2e:
ea:06:f7:c8:d3:5c:54:48:74:36:33:6a:d8:7a:17:d9:9a:f1:
7d:60:28:42:96:d8:e9:5e:10:59:84:e5:ff:c1:b0:82:86:cb:
22:0a:5e:63:90:f5:74:49:41:63:44:4d:4a:74:05:58:a7:a8:
55:19:3a:ef:db:8a:89:6b:c8:e9:b4:be:ec:04:5f:21:dd:bb:
e2:51:b4:1e:10:ff:6a:41:c8:fd:18:64:6c:35:ea:04:1b:dd:
79:de:62:07:a6:1d:4c:d1:ad:b8:74:43:12:16:8a:9c:7f:3b:
1b:22:ca:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:05 2026 by rpki-client