Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer (raw, json)
Hash identifier: FA2PWmxmKJynZ8G6ZZ/fhtcyaSpkapAZea9oLkVxe3o=
Subject key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECA4DE5995E01837EAA71C91911FE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201535
IP: 185.71.164.0/22
IP: 2a05:34c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:a4:de:59:95:e0:18:37:ea:a7:1c:91:91:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:43:fc:c1:e2:ec:75:e8:e4:3e:02:e9:20:
0f:6c:f5:82:32:f3:de:a6:94:ae:97:0c:2d:0a:64:
cb:2b:4f:39:12:dd:8c:65:92:ca:14:be:3f:c7:c1:
41:92:47:99:47:c2:33:96:68:33:22:b6:58:c5:28:
b4:5e:53:87:d5:69:9e:d7:99:00:ce:03:2e:36:91:
9b:87:37:f9:8b:b5:8e:cb:73:9e:7b:3f:7c:ad:e2:
a9:3b:82:81:64:5a:a4:cd:56:56:05:17:0e:d7:08:
ac:94:b6:bd:86:71:5a:b0:a9:cd:f9:70:5d:42:41:
79:bb:fb:0c:f0:fb:90:34:5c:70:e0:cf:e5:e4:ee:
b1:e6:05:da:a8:8d:f9:f0:87:19:97:c4:05:ad:62:
a9:f4:30:bc:f7:05:54:90:5a:96:3f:ef:66:f1:02:
db:03:15:ca:79:6b:b6:5c:fc:fe:4b:76:2a:a1:95:
a4:1b:e4:ab:7a:20:e0:a4:92:bd:42:6e:e1:93:46:
10:02:c4:02:05:7d:80:b7:d6:45:54:4f:43:cb:61:
0a:44:45:78:72:9f:fb:c4:d6:2f:d8:ab:2e:78:b7:
41:76:64:33:d0:18:55:c0:77:de:e5:9f:72:a9:f6:
9a:6b:ee:ba:e5:74:7c:54:4a:84:e5:ae:38:c8:b2:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.164.0/22
IPv6:
2a05:34c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201535
Signature Algorithm: sha256WithRSAEncryption
1f:2f:f7:1e:6e:d2:b0:21:95:32:a8:f2:36:7b:d9:4f:6e:96:
3b:11:a7:96:10:b7:99:46:93:f9:90:57:97:d0:19:70:b0:10:
ff:cb:55:eb:27:2e:a7:89:5a:f3:4e:8d:61:21:ec:1a:50:f4:
f4:48:0a:72:d5:ef:97:e1:50:c1:78:e3:af:17:cc:e5:d7:2f:
54:55:9b:dd:e1:7d:92:54:06:7f:ce:77:ef:2a:39:02:f6:fb:
db:0c:3b:66:4e:58:24:bc:55:d0:6c:89:12:6f:c9:76:a9:6e:
16:cb:fb:c8:17:f0:19:58:c9:55:66:2a:1a:a9:d0:04:53:34:
03:c6:28:16:f6:8d:71:f4:3d:ef:d2:0b:f7:3a:a3:99:f8:2a:
2d:3d:d9:4e:76:45:d3:7b:c7:11:62:6c:c8:cb:b1:28:16:c2:
4e:a1:d9:6c:d5:9c:ba:aa:9d:16:4b:23:5d:c9:c7:25:58:5a:
22:52:cc:52:42:54:4a:a5:0a:77:f1:2c:82:16:96:bf:31:a2:
c9:52:95:87:84:9e:be:c4:21:55:0c:f9:fc:ca:da:a0:a0:ff:
42:f3:8f:89:e3:60:7d:28:a0:40:1b:ed:56:2e:e2:a5:bf:6c:
0e:6e:1c:a5:cd:3b:18:13:6d:5f:a7:ba:30:bb:9d:ad:a3:0b:
d9:a7:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:40 2026 by rpki-client