Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oPMwHuU4Tk093ptGqxya37wyOlY.cer
File: oPMwHuU4Tk093ptGqxya37wyOlY.cer (raw, json)
Hash identifier: aBUgotmVvEY35a8f6cP9K8c1mazVra2zdiQg1Cq9suU=
Subject key identifier: A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E7DB9564E1678D1B48461D822711EE6F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 31 May 2026 11:09:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197179
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:b9:56:4e:16:78:d1:b4:84:61:d8:22:71:1e:e6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 31 11:09:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f3301ee5384e4d3dde9b46ab1c9adfbc323a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:b7:67:e6:a5:43:db:3e:87:ed:0e:7a:af:
85:b9:0f:90:14:fb:4d:af:27:47:e5:eb:d0:ba:ad:
b7:a1:eb:9d:f7:97:3a:6e:1b:98:b4:db:ff:2a:d2:
5d:76:6b:f5:93:aa:cc:79:20:0a:eb:9b:6c:a7:d1:
ea:52:64:35:38:32:99:77:29:9c:cd:dc:21:ce:54:
50:cc:60:50:bc:34:84:24:7f:41:a5:2d:04:79:f2:
74:b7:da:8c:02:57:bc:89:24:e5:01:3c:f8:01:3a:
0f:dd:ed:68:f0:32:a1:26:66:31:44:8a:3d:8b:aa:
78:4b:43:ab:ba:45:45:59:c2:83:d8:75:17:6f:56:
60:40:04:8c:0f:5e:09:54:74:b5:8a:61:25:ae:29:
00:da:ff:f3:f6:c7:62:19:79:dd:d5:94:a7:ab:90:
3f:ed:bc:23:36:01:ae:76:88:31:c7:5a:93:ba:c8:
ce:ff:80:9c:3a:b4:95:3a:07:89:7c:8e:67:98:c5:
8c:9d:15:a2:36:9c:b5:2c:fa:c5:7f:d5:9e:a8:31:
59:66:4e:a7:ed:5d:50:27:ff:19:40:c1:37:d9:d2:
d5:af:52:d2:74:89:46:39:28:ce:80:81:12:2f:2e:
0a:7f:4c:7d:41:36:0c:73:4b:27:a7:2f:9f:54:4a:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:30:1E:E5:38:4E:4D:3D:DE:9B:46:AB:1C:9A:DF:BC:32:3A:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b11164-cff1-4a44-873d-f26359fbaf57/1/oPMwHuU4Tk093ptGqxya37wyOlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197179
Signature Algorithm: sha256WithRSAEncryption
9c:34:a7:0b:0a:97:9a:75:b5:22:71:d5:05:18:81:72:80:36:
99:8e:a6:bf:98:90:24:8e:ad:5a:7b:fe:0e:e6:ab:ab:93:32:
9f:34:1d:9b:58:11:78:32:d1:8e:92:5b:30:db:60:28:4e:ab:
24:bd:11:9e:6e:9b:34:99:64:64:87:55:fd:6e:f7:3d:e1:e5:
88:40:21:a0:04:3e:a2:6e:d8:4b:3d:eb:3a:77:a7:b7:5b:29:
d8:56:47:db:ed:e4:11:f0:a4:22:cc:e0:42:e2:52:0a:de:60:
ef:37:b3:ff:47:ed:22:b6:a9:2f:2d:5a:f9:66:3a:0d:05:a2:
7d:40:51:3e:4e:80:5a:33:d5:fe:c8:b1:e5:b2:f9:62:5a:a6:
63:dc:0a:58:15:a9:2d:08:93:f0:aa:4b:27:1d:aa:6a:f8:05:
eb:89:29:58:e5:40:4b:82:d7:48:a7:2a:fe:1f:5e:1a:4a:0a:
0e:43:61:6d:69:0d:54:bc:f8:ea:e2:db:fe:2b:90:a6:7f:be:
72:16:78:1d:9f:0a:be:1b:a5:73:06:a5:a0:ed:77:fb:d2:da:
17:02:a4:8a:5f:9e:64:15:35:9a:6a:72:65:ab:74:1c:71:94:
10:b9:50:41:05:05:89:4c:79:f3:84:b9:fc:b4:b7:3c:fb:5a:
28:57:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:58 2026 by rpki-client