Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
File: OucTLOaCVLix_l3L-9IyLrkqctY.cer (raw, json)
Hash identifier: 4Ag0qFps/G6vtxZulsRplExkWd4mNIG+diq97NrvVXg=
Subject key identifier: 3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB9C76BDCAD533E36836AAB0A7DE6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199849
IP: 185.44.112.0/22
IP: 2a04:9c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:9c:76:bd:ca:d5:33:e3:68:36:aa:b0:a7:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:3a:e5:09:d8:4e:83:86:f0:ca:ae:44:5a:
e3:56:32:94:3e:5e:93:5e:3d:ce:94:57:8a:7c:d5:
c4:8c:b5:47:f4:ac:d9:f9:68:c4:9c:8f:5f:54:d1:
37:cf:99:8b:1e:7f:6e:80:24:09:63:78:88:42:86:
b1:c0:76:64:5b:7a:eb:1d:6b:97:ee:31:16:80:cd:
30:96:3d:ca:29:d9:8c:b3:9c:72:86:6e:c8:c6:a7:
ce:48:b8:f8:06:7e:87:bd:df:cd:2d:b6:95:f1:a9:
49:38:f4:f9:21:01:21:d5:29:3a:b9:97:a1:5c:7a:
ac:db:dc:c1:08:f6:85:58:78:86:7f:c3:72:96:51:
32:19:43:09:90:11:fb:9f:38:9b:50:a6:60:82:e8:
64:30:c0:18:b9:fa:b6:2c:26:03:a3:6c:8c:bc:ba:
27:8e:f4:d8:c6:f4:39:1e:f4:e0:9d:e3:4b:11:17:
c4:05:b2:72:c6:2e:56:00:61:15:0d:de:ea:68:04:
ab:8e:70:55:56:90:83:d3:a1:cf:39:e0:c9:28:47:
74:1b:71:2b:48:6a:7f:7d:f1:76:bb:15:81:dc:49:
3e:69:94:08:a6:d1:8c:db:ff:7e:10:e4:63:3d:d3:
bd:e8:03:39:08:9b:c9:8f:e9:b0:1d:5d:f8:6e:4e:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.112.0/22
IPv6:
2a04:9c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199849
Signature Algorithm: sha256WithRSAEncryption
35:81:72:15:d0:2c:9a:b1:07:eb:89:82:c2:3c:e2:5d:99:24:
37:7c:1e:cb:c1:2f:3a:cc:72:f4:5a:89:4a:79:db:87:57:84:
af:c8:62:63:1c:60:25:0e:94:01:2f:51:0f:78:6e:26:74:a4:
d5:30:01:b1:76:bc:eb:79:44:e5:a4:d7:2b:1f:2b:c9:aa:a7:
7f:29:66:93:b6:11:c2:7e:64:75:7d:02:d2:44:1f:75:0e:14:
d6:dd:44:8f:82:63:69:cb:dc:e0:07:24:82:1a:82:4b:46:62:
fe:f2:8a:01:53:71:63:ea:e7:8f:f2:a2:cd:01:a0:b7:c3:24:
ab:8c:67:8c:ff:83:f0:68:25:6a:7e:bc:9b:5f:ae:ec:65:5c:
e6:2b:0d:e4:c2:8f:fb:80:d7:8b:57:a0:1c:f5:28:84:3f:62:
67:09:9d:0c:47:86:96:2c:45:b0:ef:7c:23:ac:b0:db:e4:05:
e2:37:b5:0f:69:2c:ee:eb:ae:d6:cd:17:f6:95:bb:b6:ff:9a:
fa:93:74:67:25:31:36:66:74:56:14:c1:18:54:9d:1d:ab:2f:
85:03:8e:20:19:75:25:66:db:bf:fd:9b:96:ad:75:02:cf:0e:
88:65:cb:61:63:bb:21:9d:1c:76:0a:c1:f3:76:5c:f7:10:b1:
7c:9d:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:42 2026 by rpki-client