Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
File: oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer (raw, json)
Hash identifier: 8qu7QdaVbo9fSZA7tAtYjP9r5z/1O9fQUu/gRaFrUw4=
Subject key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D4E0527FB1A6C31F456DF8E791AA8E251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 02 Apr 2026 11:47:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 86.106.77.0/24
IP: 185.190.92.0/22
IP: 2a14:a000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:05:27:fb:1a:6c:31:f4:56:df:8e:79:1a:a8:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 11:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:02:58:1c:81:49:f0:2c:e9:a0:16:fe:08:
b5:52:d7:3b:90:4e:a4:aa:b4:ee:1b:52:4c:e7:78:
9c:31:21:2b:ac:69:d6:bc:c4:73:44:63:52:76:36:
85:a3:2f:d9:9d:da:07:e6:c9:c7:03:2e:2e:c7:e4:
71:6c:50:48:19:38:f6:e9:00:26:61:f9:21:45:0b:
5c:23:63:26:1d:25:3d:7f:e4:41:72:6c:8b:2c:fc:
2c:43:90:44:1c:4a:76:c3:cd:fb:3c:87:e4:a6:92:
5f:c1:95:fd:d7:0e:56:42:02:a0:5a:fd:29:a8:bd:
5d:df:5a:df:1d:d1:d0:78:75:54:45:87:10:0b:1d:
ac:93:c7:cf:67:ef:81:0d:a0:b7:a8:f9:34:0f:cb:
5d:11:8b:62:3f:8f:4a:cb:ff:53:68:60:c9:cb:a2:
ec:7e:33:30:5f:d4:50:91:c4:e1:83:77:31:bb:a3:
1d:9f:0d:5e:57:9c:4e:ce:08:2d:cc:48:2f:9b:0a:
1e:36:dc:99:8e:0d:60:0c:1a:1f:0a:62:ef:65:cd:
ee:d1:a1:da:ec:bc:43:57:20:ed:08:d0:f3:00:3c:
de:ac:e9:74:cd:19:e0:87:40:de:b2:d9:f5:c5:6e:
f9:4a:f4:8d:d6:3a:12:fb:c6:04:ea:f4:c6:35:1a:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.77.0/24
185.190.92.0/22
IPv6:
2a14:a000::/29
Signature Algorithm: sha256WithRSAEncryption
2d:12:d9:9b:cf:b8:26:c7:69:82:d1:9f:2e:ef:5d:96:2f:68:
52:1e:69:75:c5:f2:6a:65:5d:4b:55:15:84:90:09:06:69:02:
c6:a8:f0:25:07:92:74:90:ec:89:bc:98:2e:bc:65:4f:5f:f7:
1c:9d:f2:ef:28:55:3f:f9:7e:e2:f3:5b:42:a2:3f:b7:fb:88:
98:61:9e:d2:f5:a3:cc:8f:7e:4e:d0:e8:54:10:cf:63:f0:af:
34:7f:76:ae:5c:a7:22:ad:82:a5:75:c8:ef:b9:f7:00:98:d5:
a3:94:21:58:7b:14:8e:0f:7d:1b:71:c7:2f:7c:81:6a:18:87:
35:31:7d:dd:b6:f2:8d:0d:c0:1e:40:88:c4:7c:86:60:6c:fe:
de:48:db:20:ea:d8:63:4c:81:8c:42:bb:0f:56:99:16:3b:7d:
9c:6b:a3:54:87:51:23:fd:f5:ea:e0:28:01:43:4b:17:80:3c:
3a:a1:40:3b:8a:08:8e:7f:6d:28:a3:6f:34:21:82:91:be:16:
6c:23:2d:d8:8d:79:eb:21:9d:05:20:80:66:34:2f:4e:b2:d8:
a1:00:ba:d8:24:a0:c6:db:7d:ba:ca:62:ae:b2:78:6a:2d:d9:
75:a1:6a:33:da:b2:0a:26:35:f6:63:05:fd:c6:13:07:40:ee:
90:a0:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:27 2026 by rpki-client