Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
File: oiw84jcbnyHFfgw6V4fZWnNctQA.cer (raw, json)
Hash identifier: 2Vek+I8oLpLZhJHMoIjf4hP1GVvWIH7VBGFsgQToIi8=
Subject key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A59B4CBCC0930145AA0C85EB0174201
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197635
IP: 91.223.197.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:59:b4:cb:cc:09:30:14:5a:a0:c8:5e:b0:17:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:dc:c9:0f:90:a7:02:2b:0a:f9:72:80:63:
9f:fa:e7:c8:3b:23:14:8f:e9:2c:fa:1e:fb:ce:7c:
2a:dc:61:99:ff:1f:d0:ce:e5:ec:8c:e7:c3:98:fc:
9f:48:1e:c0:8d:82:64:5b:1d:9a:94:df:5a:b5:7d:
51:aa:5a:31:1a:e3:a7:54:90:40:57:25:d3:c3:15:
8a:25:b4:f9:88:8c:76:ab:e3:a4:d0:3f:2a:ea:13:
8d:b4:06:36:31:31:14:9c:37:86:49:b0:7f:84:96:
ce:f9:ef:a8:e7:84:59:70:6c:a8:19:52:00:59:5e:
35:e9:0d:e2:1c:03:05:4e:0e:6c:c9:f5:2f:b2:94:
27:39:c7:a2:35:7b:02:23:be:a5:64:bb:bb:54:cd:
78:3b:ee:d6:ab:64:56:0a:5e:27:4b:f6:6b:96:0f:
88:13:38:c8:e1:d9:67:44:26:33:6f:63:e4:56:42:
b2:59:cd:e7:16:a6:92:27:9e:82:55:8c:e5:0a:f2:
24:ce:0a:dc:4f:54:6e:fb:4d:e4:5a:7a:b6:e6:e3:
15:0f:98:3e:7d:92:ba:c4:c1:d2:76:d6:ec:43:bf:
1a:be:a8:35:76:bf:95:50:ed:7e:dd:eb:9a:3b:cd:
f5:e9:50:07:81:5a:37:fb:57:94:1f:9a:39:c9:5d:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.197.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197635
Signature Algorithm: sha256WithRSAEncryption
57:41:2c:cc:36:a9:34:e2:a6:21:69:bf:98:1c:13:e6:3e:8d:
af:a8:82:bd:a4:08:5b:13:b4:a8:9b:9f:32:cb:17:b3:ce:f3:
cc:0b:15:a4:fd:33:76:b6:9b:28:b2:5a:17:c0:42:7b:70:84:
73:5a:07:07:cf:09:6d:f6:35:e4:62:89:73:33:f7:a8:b6:70:
0b:cf:25:0c:64:7d:a6:b8:c0:19:4e:bb:68:2e:1f:9b:35:76:
ef:19:5e:c4:53:c8:37:28:be:da:7c:6c:d2:17:27:23:f3:44:
f4:68:6c:bc:58:46:69:b2:3e:44:11:22:1f:e8:ad:b0:54:5c:
4e:a1:2d:96:69:ab:5a:43:e1:74:01:ce:90:6e:51:4c:be:cb:
f5:23:8d:71:9a:c1:97:42:dc:c0:70:3a:14:65:d6:f3:e8:4b:
8e:56:8f:97:2a:f8:53:02:c9:23:d3:47:31:25:fc:c1:d4:e0:
98:1f:87:bd:aa:3e:af:a2:c5:4e:72:e0:9e:e2:af:e4:f8:6b:
47:fe:f9:a9:9e:e6:95:a4:63:ac:c1:75:57:44:2c:01:12:f4:
6c:dc:b9:f2:e0:27:c9:e4:f3:e6:48:00:ed:5d:7a:25:82:62:
43:be:72:d7:d4:8e:bb:69:b5:d6:10:21:e0:07:ba:f6:df:3c:
fa:40:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:32 2026 by rpki-client