Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b-ocfzjCbZ4wce2Dq2_EWEXGO2w.cer
File: b-ocfzjCbZ4wce2Dq2_EWEXGO2w.cer (raw, json)
Hash identifier: rXtrt3MuOZT19iv3QMaxrIvlVGYohSiacf46YYBnc2E=
Subject key identifier: 6F:EA:1C:7F:38:C2:6D:9E:30:71:ED:83:AB:6F:C4:58:45:C6:3B:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A163F30C67F08983745BAAB70F3EDB4C54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/05ece1-494c-4cf4-9763-cbc362860a21/1/b-ocfzjCbZ4wce2Dq2_EWEXGO2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/05ece1-494c-4cf4-9763-cbc362860a21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Oct 2026 14:10:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198979
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:f3:0c:67:f0:89:83:74:5b:aa:b7:0f:3e:db:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 14:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fea1c7f38c26d9e3071ed83ab6fc45845c63b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:cd:bc:ac:b5:3c:40:e1:c8:00:c6:70:b2:
8f:47:16:b0:ee:99:cc:02:4e:1a:64:15:ae:bf:4d:
46:63:01:88:3f:5f:be:5d:03:ac:7b:5a:c1:9d:ae:
46:9b:75:d5:e9:84:52:55:bf:5c:48:d0:69:cf:27:
3e:ca:91:6e:f5:60:0d:5d:00:42:d4:e0:df:c1:8d:
99:fb:84:68:c4:15:95:4e:38:2d:d8:86:f0:6a:97:
ef:a4:4a:d5:78:fa:8e:57:b7:07:b9:4e:f3:98:4f:
50:1f:ec:e0:84:32:fe:bd:e0:1f:84:a5:b0:08:4b:
13:1b:68:ab:19:4f:fb:aa:66:70:a1:d9:67:bd:12:
77:18:fb:e0:0e:1a:98:d0:0a:81:e6:be:c4:75:e2:
08:55:91:6d:c4:6d:66:04:2a:e0:0e:17:17:c1:5a:
25:df:e2:36:e8:a9:e7:df:2f:83:dc:c6:65:f1:10:
55:5f:ef:79:c8:b0:eb:7c:a3:98:cc:59:b0:30:06:
68:fb:d0:fc:bb:e3:ef:f4:f5:9e:35:43:7e:e1:19:
75:ec:91:81:80:09:cf:a2:bc:72:bc:c0:55:62:b8:
e2:39:a7:b9:e3:84:4d:8f:37:c2:94:38:ad:c0:e7:
7d:6d:79:d8:88:66:69:44:18:d3:0a:12:07:97:bd:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:1C:7F:38:C2:6D:9E:30:71:ED:83:AB:6F:C4:58:45:C6:3B:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/05ece1-494c-4cf4-9763-cbc362860a21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/05ece1-494c-4cf4-9763-cbc362860a21/1/b-ocfzjCbZ4wce2Dq2_EWEXGO2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198979
Signature Algorithm: sha256WithRSAEncryption
a0:c2:01:b3:bd:11:de:f6:d9:9f:89:29:13:eb:26:37:b5:ce:
c4:c6:4a:21:bb:4c:11:a9:a2:4b:71:44:37:68:83:18:ac:2a:
82:66:d4:31:94:b9:92:e4:a2:44:04:e7:36:b2:04:63:e9:00:
fa:86:26:f4:40:39:4c:f9:91:8f:32:fa:8d:40:f3:55:db:d6:
6a:3b:61:97:68:4c:72:ec:ca:75:65:41:34:39:7d:f0:70:97:
f6:46:0c:e1:1e:14:3c:cd:08:3c:dd:e1:d9:d9:99:1c:5f:3b:
04:e6:88:89:cd:02:7a:4b:bb:1d:4b:f4:dd:0e:b5:67:80:77:
75:42:41:d0:d9:72:0f:6e:74:6a:a7:9a:86:69:9b:eb:5f:3c:
36:28:01:69:c4:f7:a9:13:19:17:b7:9b:5f:94:c9:30:cf:74:
54:02:63:b5:b5:d0:5c:01:58:89:70:23:12:30:b4:62:a0:7f:
3d:e8:0f:8c:c6:ca:15:66:2f:23:ee:fe:8e:ed:f5:73:73:d9:
f6:a2:d1:98:4f:1e:d6:d5:d3:07:32:15:62:ab:aa:27:fd:8d:
53:a0:67:a3:d4:d5:46:76:30:f9:f7:f1:d0:bd:ac:60:d7:fe:
64:8d:7b:a9:c6:75:b7:13:f9:42:e6:f8:a1:9a:d2:de:56:a8:
e2:37:50:fa
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaFj8wxn8ImDdFuqtw8+20xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDIyMTQxMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmVhMWM3ZjM4YzI2ZDllMzA3MWVkODNhYjZmYzQ1ODQ1YzYzYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx3NvKy1PEDhyADGcLKPRxaw7pnM
Ak4aZBWuv01GYwGIP1++XQOse1rBna5Gm3XV6YRSVb9cSNBpzyc+ypFu9WANXQBC
1ODfwY2Z+4RoxBWVTjgt2IbwapfvpErVePqOV7cHuU7zmE9QH+zghDL+veAfhKWw
CEsTG2irGU/7qmZwodlnvRJ3GPvgDhqY0AqB5r7EdeIIVZFtxG1mBCrgDhcXwVol
3+I26Knn3y+D3MZl8RBVX+95yLDrfKOYzFmwMAZo+9D8u+Pv9PWeNUN+4Rl17JGB
gAnPorxyvMBVYrjiOae544RNjzfClDitwOd9bXnYiGZpRBjTChIHl70RBQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFG/qHH84wm2eMHHtg6tvxFhFxjtsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzA1ZWNl
MS00OTRjLTRjZjQtOTc2My1jYmMzNjI4NjBhMjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMDVlY2Ux
LTQ5NGMtNGNmNC05NzYzLWNiYzM2Mjg2MGEyMS8xL2Itb2NmempDYlo0d2NlMkRx
Ml9FV0VYR08ydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMJQzANBgkqhkiG9w0BAQsFAAOCAQEAoMIBs70R3vbZ
n4kpE+smN7XOxMZKIbtMEamiS3FEN2iDGKwqgmbUMZS5kuSiRATnNrIEY+kA+oYm
9EA5TPmRjzL6jUDzVdvWajthl2hMcuzKdWVBNDl98HCX9kYM4R4UPM0IPN3h2dmZ
HF87BOaIic0Ceku7HUv03Q61Z4B3dUJB0NlyD250aqeahmmb6188NigBacT3qRMZ
F7ebX5TJMM90VAJjtbXQXAFYiXAjEjC0YqB/PegPjMbKFWYvI+7+ju31c3PZ9qLR
mE8e1tXTBzIVYquqJ/2NU6Bno9TVRnYw+ffx0L2sYNf+ZI17qcZ1txP5Qub4oZrS
3lao4jdQ+g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:49 2026 by rpki-client