Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer (raw, json)
Hash identifier: gxRqH4U7Eiz0vjm62iWjVdgPk27SVRo+cqQpi7lU3O8=
Subject key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C86F5FA1CEF43BEBC520F1667C14DE9E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 22 Feb 2026 20:06:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.189.141.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:86:f5:fa:1c:ef:43:be:bc:52:0f:16:67:c1:4d:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 20:06:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:2a:93:65:66:f9:22:ed:e7:4d:1e:d1:c8:
eb:69:83:55:30:17:f8:92:14:d7:d4:8b:61:94:90:
ca:30:36:83:ed:6f:0e:45:a1:c9:b9:fc:74:e6:12:
a2:39:96:8e:32:b1:f9:c7:3e:0a:09:6f:b9:87:23:
eb:e1:99:cb:93:e8:7b:e7:f3:6e:9c:ae:8f:7b:f2:
ee:8f:ef:8c:37:80:6c:e2:d0:32:38:ab:b2:6c:44:
68:a1:69:1f:c4:65:25:fb:90:b9:4e:6e:13:6c:2d:
9e:12:43:6f:d3:62:75:95:ed:ce:2a:63:b1:61:84:
cb:84:4e:55:57:c3:54:be:6a:b6:89:40:31:a8:c7:
15:7c:25:16:f9:39:73:41:a3:32:9a:78:e9:d7:20:
3a:53:6e:a6:25:46:79:13:09:ca:d1:cc:70:fb:34:
2d:c4:f1:17:81:6b:1a:0e:d0:46:4b:52:4d:92:87:
d2:5b:3f:eb:f6:cc:3e:ed:0c:71:6e:68:6f:56:0f:
0e:c5:30:f0:71:2f:16:77:35:06:91:6c:af:29:a1:
91:9e:ae:61:cd:83:1a:09:b2:3e:48:d0:9d:65:3b:
de:9e:3c:bd:1d:79:44:30:11:12:09:86:d8:c0:77:
37:4b:7a:ef:83:e7:75:55:a1:b3:f6:05:89:ba:81:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:de:b7:3d:ad:45:34:cf:bb:d7:4b:01:eb:84:34:9c:69:21:
bd:32:74:61:db:96:c1:c2:2b:ba:79:34:bc:41:75:00:47:1d:
50:24:fb:18:16:24:26:77:61:f8:02:a9:9e:7b:79:52:ce:e6:
39:a8:99:27:2b:cc:37:07:54:ff:9f:1e:67:ab:ac:72:05:6f:
33:80:97:2c:76:03:02:21:36:e2:bc:bb:58:68:d4:52:c7:3f:
dc:1c:ed:2e:ba:7c:4d:7b:c6:de:54:9e:a5:28:4d:2e:f6:80:
ac:4d:fb:15:1b:d4:f9:ff:b1:35:a5:8d:0f:32:24:78:60:57:
64:e2:24:40:98:70:ad:8b:98:b4:07:87:3e:86:48:6b:8c:e8:
1f:34:a7:15:8b:06:01:86:1e:51:fe:7b:43:d2:ad:30:1d:3e:
b3:f8:2f:59:d9:32:a2:a4:72:28:0d:49:2a:ed:bd:d6:0d:43:
70:e7:0f:aa:d3:e1:15:a1:82:48:8f:b9:42:1a:12:00:79:a4:
5e:b7:1b:47:2d:ec:db:ee:5e:d5:53:ca:c0:9a:9c:82:39:27:
ee:5f:fa:0c:1f:d8:1c:31:7e:70:94:84:a8:71:6a:4a:d7:2e:
fa:c7:45:55:83:42:52:6f:13:d9:31:3f:12:5e:11:5c:46:3c:
34:68:6a:10
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZyG9foc70O+vFIPFmfBTenkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjIyMjAwNjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTJlMjQxNDNjY2FjNmZlNzU5MzVjYzExNzQyMjU5ZTdmZjg1OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXwqk2Vm+SLt500e0cjraYNVMBf4
khTX1IthlJDKMDaD7W8ORaHJufx05hKiOZaOMrH5xz4KCW+5hyPr4ZnLk+h75/Nu
nK6Pe/Luj++MN4Bs4tAyOKuybERooWkfxGUl+5C5Tm4TbC2eEkNv02J1le3OKmOx
YYTLhE5VV8NUvmq2iUAxqMcVfCUW+TlzQaMymnjp1yA6U26mJUZ5EwnK0cxw+zQt
xPEXgWsaDtBGS1JNkofSWz/r9sw+7QxxbmhvVg8OxTDwcS8WdzUGkWyvKaGRnq5h
zYMaCbI+SNCdZTvenjy9HXlEMBESCYbYwHc3S3rvg+d1VaGz9gWJuoGwzQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKEuJBQ8ysb+dZNcwRdCJZ5/+FmLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2E3ZDk4
MS1jNjJkLTQxZjktODk4Ni1mNDZkMjQzNjQzZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYTdkOTgx
LWM2MmQtNDFmOS04OTg2LWY0NmQyNDM2NDNmNC8xL29TNGtGRHpLeHY1MWsxekJG
MElsbm5fNFdZcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwb2NMA0GCSqGSIb3DQEBCwUAA4IBAQCt3rc9
rUU0z7vXSwHrhDScaSG9MnRh25bBwiu6eTS8QXUARx1QJPsYFiQmd2H4Aqmee3lS
zuY5qJknK8w3B1T/nx5nq6xyBW8zgJcsdgMCITbivLtYaNRSxz/cHO0uunxNe8be
VJ6lKE0u9oCsTfsVG9T5/7E1pY0PMiR4YFdk4iRAmHCti5i0B4c+hkhrjOgfNKcV
iwYBhh5R/ntD0q0wHT6z+C9Z2TKipHIoDUkq7b3WDUNw5w+q0+EVoYJIj7lCGhIA
eaRetxtHLezb7l7VU8rAmpyCOSfuX/oMH9gcMX5wlISocWpK1y76x0VVg0JSbxPZ
MT8SXhFcRjw0aGoQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:30 2026 by rpki-client