Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer
File: OmSsPCPuSr7jBsmdZ4CxP1y2XNo.cer (raw, json)
Hash identifier: X7VvUcF2XAoGJ4ETvQ/d7LaIZ1AibHWoMiLH32qXP18=
Subject key identifier: 3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E44EAA69BDA8AC783BBD55ADFA67B49BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 10:24:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199656
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:ea:a6:9b:da:8a:c7:83:bb:d5:5a:df:a6:7b:49:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 10:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a64ac3c23ee4abee306c99d6780b13f5cb65cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:28:72:30:14:e1:c8:1f:a9:9d:f9:43:54:
4b:9d:0d:6a:77:8d:06:2f:b2:d2:4a:ab:a8:be:97:
fc:db:3b:30:59:9f:3f:49:d4:66:a2:30:d5:1a:43:
a8:c7:41:01:cb:48:05:25:56:ca:d7:2c:ca:cb:e7:
7c:6f:58:ad:c8:1a:5a:fc:6b:45:4d:3c:72:4f:b6:
56:70:12:a1:55:c4:7a:45:6f:37:49:df:8a:e9:9e:
71:7f:a2:80:86:77:71:bf:43:62:ef:f6:65:14:5b:
2f:cf:57:e3:ad:87:96:e7:39:a5:17:1f:69:ae:cc:
67:79:94:f5:56:c6:7a:f3:40:ea:b0:a2:b8:9a:d9:
79:3c:04:ab:88:ea:e0:ab:0e:7e:e6:16:59:e6:74:
f6:a3:0a:32:c7:96:9c:ca:0a:e7:04:04:9d:78:a2:
89:1e:74:b1:09:17:58:ce:10:42:9d:38:16:fa:f5:
93:5f:5b:f7:d3:41:f9:b0:f7:f9:ae:41:96:a5:11:
b3:ef:0f:22:54:eb:77:89:94:e1:c9:70:02:90:4c:
11:c0:bc:39:c6:bb:89:ef:eb:b1:81:de:7d:fb:a4:
57:3a:f8:97:2c:4f:e1:e7:2d:2c:51:b8:e7:70:3b:
67:85:77:20:f2:d1:e8:40:97:8e:3c:c9:f3:d0:ab:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:64:AC:3C:23:EE:4A:BE:E3:06:C9:9D:67:80:B1:3F:5C:B6:5C:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ed8991-110b-42f3-a1a4-1efc6349476e/1/OmSsPCPuSr7jBsmdZ4CxP1y2XNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199656
Signature Algorithm: sha256WithRSAEncryption
2e:1d:a3:ef:6a:44:7d:0f:b5:a6:c5:9d:41:ff:bf:f3:bb:1b:
cb:88:b2:e4:64:7c:f7:05:f0:49:bd:98:3e:af:60:eb:46:b2:
8d:bc:aa:50:5a:d5:da:b9:b5:bb:fe:80:2b:41:f1:6a:be:c8:
de:b8:94:81:73:ea:b8:d9:63:f2:fa:da:b9:12:2d:76:5d:a0:
8c:1f:e2:ee:75:75:00:5a:93:37:f8:a7:86:75:07:21:8c:96:
7d:64:81:82:d2:1c:43:a1:27:6a:5f:36:69:12:83:c2:fe:54:
c5:6d:e8:75:f8:46:cb:1c:a2:2a:5a:a9:dc:36:73:b6:fe:4c:
a1:23:2d:b3:07:1a:7a:44:31:61:ac:45:f0:c7:4c:69:4d:ba:
4c:8f:bf:65:74:b7:fd:ba:27:4e:9e:b0:db:5c:42:8e:12:d8:
92:5c:6b:56:c4:e8:54:32:97:46:69:9f:66:f9:27:f3:62:37:
ad:9f:68:c4:a5:58:c1:bf:a8:4c:83:61:09:c1:2c:ff:6c:23:
0f:53:65:f2:07:96:a3:36:67:ce:42:a5:78:b2:2d:f8:1c:b6:
ba:d2:da:bf:4e:f5:19:be:46:e3:6f:bc:a2:5d:d1:25:f4:3e:
ec:54:c3:98:bd:65:c1:2d:db:19:df:02:f1:8b:76:c7:1b:9a:
14:b8:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:53 2026 by rpki-client