Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OheL_-MM22DhSQ0up-cS9ASb-eU.cer
File: OheL_-MM22DhSQ0up-cS9ASb-eU.cer (raw, json)
Hash identifier: ueuCTd1NLyLAaEvdsPIr0cPz9YsP3vd4omzEKugNGek=
Subject key identifier: 3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D6CF514F338D60CABD3C542DB88E93C26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Apr 2026 11:58:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.55.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:f5:14:f3:38:d6:0c:ab:d3:c5:42:db:88:e9:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 11:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a178bffe30cdb60e1490d2ea7e712f4049bf9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:cf:5d:75:0a:4f:49:9c:d6:c3:6c:23:fd:
38:a3:dd:0a:e7:e7:a8:2a:35:0d:02:94:1d:26:c8:
f5:85:db:cc:2d:b8:4b:21:1d:3a:03:b9:24:01:86:
2b:f7:1b:49:e2:cb:29:e3:6e:97:f1:ad:39:1a:43:
56:a7:42:6a:1e:e2:b5:f7:a2:4f:de:b3:fe:22:5f:
55:35:6f:70:31:68:69:0e:0f:55:c8:fb:cf:23:f0:
7d:9f:e2:c7:2f:3b:9a:04:92:84:ee:97:70:94:24:
d2:37:13:aa:19:11:b3:e0:14:dd:b4:72:ad:07:67:
7e:94:39:a2:b1:b6:34:38:ab:b2:5a:6b:11:ac:34:
37:72:be:c5:6b:67:c7:3c:15:2b:fe:4f:a7:d3:e8:
cc:40:9b:ee:bd:56:d7:16:98:3d:65:93:ac:98:6a:
62:6c:8d:a6:f9:42:b8:c6:ad:f8:d9:0d:34:60:c0:
49:fd:91:f2:cf:72:c3:ae:1d:a9:85:23:20:96:71:
fe:85:d7:d3:7a:7d:bf:36:65:98:d7:64:30:37:e8:
83:58:01:a2:fc:ea:e9:66:71:30:18:9c:2e:c4:9b:
62:2c:fb:b6:b9:3c:6f:2e:df:7e:09:c0:24:ab:b8:
25:82:98:83:c4:6e:26:93:21:59:c8:aa:39:66:43:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:8B:FF:E3:0C:DB:60:E1:49:0D:2E:A7:E7:12:F4:04:9B:F9:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ce70e-fc58-4158-9852-cae1b1871a16/1/OheL_-MM22DhSQ0up-cS9ASb-eU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.236.0/22
Signature Algorithm: sha256WithRSAEncryption
35:6a:63:0a:23:cd:12:b7:13:46:a8:ff:6c:1d:95:3d:9f:01:
d6:66:1d:30:3e:82:73:d9:ea:e3:31:73:02:40:af:fd:52:85:
8c:18:4a:fa:16:20:23:fe:06:3a:60:8c:e2:43:25:3c:f9:16:
18:1e:3b:50:39:03:48:85:9b:1f:fa:d2:b5:c8:c5:4c:39:d9:
37:a4:9d:57:88:39:b1:bb:c9:b2:5c:91:98:83:5c:5a:f1:80:
71:55:1a:72:a2:82:24:ff:56:1f:9c:e8:ee:63:93:22:9d:5f:
f9:2f:66:b9:17:46:bb:25:72:de:25:31:af:8c:5e:15:3b:67:
e3:eb:45:c8:c3:74:63:6f:f5:cc:56:71:00:39:1a:e4:56:3e:
f6:44:03:73:e8:69:d8:d0:f5:5e:74:a6:7a:6a:8c:d5:c3:53:
6a:8b:2f:55:33:61:18:f9:24:f2:ba:db:e3:de:6a:37:a4:97:
b0:42:4d:4a:74:85:28:e6:8e:c6:37:66:b1:82:94:7a:25:b4:
7c:ab:15:79:dd:99:98:ca:54:e0:12:6f:68:51:92:b8:ba:fe:
1b:79:ec:14:bb:35:5b:53:b1:93:94:36:73:e5:47:75:81:7c:
8b:aa:f3:af:08:ba:31:a6:fc:13:7b:65:04:65:f8:98:30:b7:
50:62:1d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:30 2026 by rpki-client