Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
File: oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer (raw, json)
Hash identifier: NkbJHrEjTsabAK+9zUKkyidD94kV0roFjgYgJBnAj50=
Subject key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B7E8C382492B70296D0BBE07F1CB10BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 19 Sep 2026 04:24:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a0e:e000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:e8:c3:82:49:2b:70:29:6d:0b:be:07:f1:cb:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 19 04:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:87:45:90:5e:23:e7:68:f9:59:bf:ad:df:
88:82:c7:c3:27:15:47:3a:8a:27:7c:ba:12:05:d6:
90:c2:4b:97:bd:89:b0:2d:1e:2e:c0:b4:77:b7:1c:
d4:c4:cc:27:35:df:45:91:f3:af:bf:83:a9:4d:15:
ff:c4:33:89:84:c7:94:1b:4f:a3:79:59:ce:bd:80:
65:b9:4c:b7:ff:d7:9c:c4:f1:b5:15:7d:b9:1f:58:
b1:66:af:22:ff:fe:98:0e:ca:34:5f:9d:54:f2:b8:
ad:a9:fd:9b:70:95:e8:7c:f1:24:e9:85:3c:7e:49:
5f:08:15:eb:f5:7a:d9:72:aa:10:e3:de:73:32:22:
a2:f6:b9:6b:bb:e1:c1:67:4f:24:7e:d8:48:4e:b2:
38:86:78:9d:00:ce:46:08:49:83:38:b3:ec:d3:30:
68:07:54:16:0e:1e:e1:d9:2a:03:c3:7b:c5:ae:99:
38:36:4d:d3:9a:f2:4f:de:97:72:f6:b0:d4:d3:85:
b8:b8:ae:da:47:2f:f0:02:d5:5e:58:f7:97:24:f7:
33:57:72:43:40:79:f2:9a:0d:37:bc:d9:4a:ae:dd:
75:aa:d6:22:c2:e0:da:91:f5:8d:6e:67:d9:71:96:
f9:4b:98:45:e4:5e:71:c0:b6:cc:95:9d:ee:4c:5c:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e000::/29
Signature Algorithm: sha256WithRSAEncryption
28:a4:53:2e:57:1a:2d:63:0d:fb:9e:c5:e5:e1:2b:2d:d2:28:
d1:f9:85:ec:4e:8f:0d:cf:7f:76:34:dc:66:b9:44:35:f4:b2:
09:63:24:1c:39:8a:8f:8f:de:78:c2:73:ad:cc:47:07:d5:29:
6f:00:57:66:04:dd:12:cf:e7:93:ea:ce:f6:7b:6d:8a:22:d0:
83:82:25:a0:e0:74:b8:8f:c2:65:30:8c:04:c6:7e:b8:1c:e6:
93:d7:73:7e:76:c5:e3:6f:09:f3:08:60:e7:24:e1:d3:00:c5:
29:1e:8e:5b:2b:e2:72:3f:43:cc:d4:30:ad:8e:e6:0d:01:e6:
22:8d:ce:28:e2:3d:10:a3:19:27:7b:cf:90:f7:c8:58:49:78:
35:1a:4e:d7:62:c7:6a:b4:e6:da:a8:5f:f2:6f:f8:57:c6:bd:
75:a5:3d:89:47:bb:7a:7d:ce:3c:f6:a3:50:e2:73:9f:9d:d6:
ab:42:1c:03:68:73:df:30:68:99:fb:00:0a:c4:8a:f9:b0:61:
3d:e1:60:4c:b4:29:fd:c3:c4:34:04:83:33:c4:58:24:01:91:
00:f4:78:14:c8:9e:68:26:23:b2:0b:91:3f:f0:22:6b:0b:b2:
ea:e5:5e:d1:73:23:55:a8:1b:e3:fd:1d:3f:26:c8:01:be:fb:
49:7b:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:48 2026 by rpki-client