Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
File: OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer (raw, json)
Hash identifier: BJvIwH9KvDVp5GKC9OpVd5VTooywK2cNrcRdFAb46fA=
Subject key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C4710459588706E35164BBC4994B4D8FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 10:19:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.26.1.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:10:45:95:88:70:6e:35:16:4b:bc:49:94:b4:d8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 10:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:d8:e3:81:c8:32:48:ac:f6:f2:ae:6a:dc:
51:76:23:b9:1b:ae:e4:78:40:e9:c0:4f:87:50:86:
c6:cb:d4:a6:81:46:53:24:2c:81:5e:e8:24:fc:a1:
47:6c:c6:e9:20:bf:08:ba:1c:b3:84:e7:f2:d5:03:
fe:19:e8:94:26:ea:e3:0b:4c:67:60:da:16:dd:67:
85:ff:e3:15:22:bc:48:0c:c6:6b:f9:2f:16:f9:f3:
61:9f:fc:47:35:d8:3f:c5:5e:bf:86:ea:4c:fd:bd:
51:b1:15:15:c7:f8:a0:b4:85:31:a4:f3:1b:07:05:
73:bc:fa:1c:87:87:b9:78:d1:c8:4b:33:ba:4b:5f:
24:61:f5:fa:a8:46:0e:8e:44:27:16:6f:9d:58:c9:
33:c3:69:1a:bc:6f:6a:5f:27:3b:9a:e8:54:e8:a9:
4c:8c:e6:8c:d4:9c:30:04:2e:06:9b:6e:a4:fc:fd:
35:b4:7d:0d:18:e4:a7:f9:21:8d:19:a2:6c:4b:48:
c6:2c:eb:66:d2:84:0a:eb:e7:e2:4a:99:c8:7b:47:
4b:2e:87:f0:63:a4:1c:31:6a:0c:44:44:e5:85:63:
49:09:d3:c6:aa:9c:8b:3f:bb:96:fa:00:ba:11:0e:
43:90:56:c2:b3:3f:61:26:06:1b:b7:ab:aa:fc:2a:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.1.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ca:bf:27:0e:49:45:2b:6d:45:5e:44:d4:65:d0:8c:e1:c5:
af:c6:25:2a:79:6d:b5:ff:f4:f2:8f:b2:74:f5:c0:82:c3:db:
f6:ff:39:34:a2:3b:fc:09:36:fb:99:a6:23:d7:50:00:bf:11:
97:fc:be:40:ba:96:c8:0d:de:70:3f:cf:76:cb:58:9a:42:d3:
72:3e:32:f5:a3:0b:c3:48:cf:d4:36:81:18:0e:fb:ca:90:f3:
77:8e:01:e9:24:6a:c8:bb:e9:11:e9:82:b0:e2:6e:e4:d1:6e:
a2:74:8d:5e:b4:c6:4a:17:58:77:83:e5:d2:15:73:c0:9e:63:
92:55:a4:87:30:8c:61:f0:d5:c6:32:84:a5:76:16:fe:04:81:
9d:fe:a8:5d:63:38:27:80:5a:dc:d4:b1:52:d0:c3:3b:d2:2f:
48:67:61:e9:5c:ba:0b:df:ef:d1:78:9c:79:8c:47:e3:f0:f4:
ea:63:c9:a2:87:c7:8e:39:b8:cf:e9:08:9f:b1:41:ed:12:92:
bf:6b:0e:86:d1:66:6f:26:83:cb:f6:26:8d:66:2b:3d:7e:fd:
0b:f7:33:e2:86:1a:ba:2b:b7:58:92:30:15:b7:1a:09:82:aa:
fc:a2:36:a0:03:7f:e8:d7:f6:d9:52:e6:90:e8:ae:db:3f:5a:
f1:aa:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:52 2026 by rpki-client