Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
File: olrSzhcYk-YHpyuunQVE_AHTCao.cer (raw, json)
Hash identifier: pNdGFCxYNXosSN+NoZQCOwfSg+VdFlebyDqMsRpaP5Y=
Subject key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A06C1F2B38866D1E568E8F3CCE0657C893
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Sep 2026 11:12:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199813
IP: 195.60.85.192/26
IP: 2001:67c:9a0::/48
IP: 2001:7f8:170::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:1f:2b:38:86:6d:1e:56:8e:8f:3c:ce:06:57:c8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 4 11:12:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:28:28:01:95:f3:57:96:7b:33:e1:ed:d0:
64:61:f7:4c:89:50:00:b2:1f:9f:5f:53:4a:bd:32:
7c:f2:72:7e:3f:d6:d2:b9:3e:78:c7:c1:b6:33:a9:
4e:11:f9:c9:92:24:ec:5f:59:29:d2:94:60:a9:11:
ef:92:46:39:46:24:b7:6a:05:06:09:69:7d:5b:31:
76:a5:a1:59:a5:7a:0f:42:ed:28:77:12:f7:5c:65:
9c:9b:da:6f:e3:ed:b1:bc:21:c0:09:b7:0f:e5:03:
02:9d:c9:16:12:ff:26:80:73:d8:fe:70:54:94:2d:
78:5d:23:4e:07:87:36:94:3b:43:50:9b:c8:4d:c3:
81:00:18:ec:e0:85:86:60:bc:55:b8:c8:e8:48:0d:
0f:8d:5a:48:41:70:67:b9:cf:6d:3e:a3:88:48:ad:
f9:90:c3:c4:35:3c:bf:b1:3e:85:e1:85:0e:0d:34:
7f:b2:f2:84:7b:af:be:e5:a1:55:7c:ac:45:ef:d0:
1c:b5:7d:bc:2a:11:c6:50:32:42:fe:85:88:3e:59:
39:f2:b8:46:ad:e6:a4:c4:b5:ca:54:6f:86:e5:0e:
c1:46:93:4c:3b:a6:b0:bf:f2:8f:3a:e6:a9:15:53:
b4:f2:2d:07:9d:a4:33:98:8f:5e:8f:6f:7e:32:c5:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.85.192/26
IPv6:
2001:67c:9a0::/48
2001:7f8:170::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199813
Signature Algorithm: sha256WithRSAEncryption
74:ce:f3:aa:ff:87:1f:fc:99:57:39:93:5c:46:60:eb:8d:22:
3e:65:a5:aa:aa:3f:be:10:87:b8:9f:25:11:b8:c7:ed:79:86:
b5:56:9a:99:1d:9c:5c:ce:dc:90:12:21:4f:7d:53:29:83:6c:
9a:bb:8a:71:be:79:6d:0b:6e:56:4c:28:9a:8c:38:09:44:c6:
39:a4:85:f0:68:d5:f2:90:71:1d:82:dc:3c:07:30:8d:ca:ff:
0a:4a:9a:54:8b:eb:a5:88:dc:fd:ec:f9:37:40:9e:c5:37:9c:
95:5a:eb:5e:8a:1f:fc:58:a5:c0:b9:d9:e8:c7:df:8c:55:06:
7f:d9:b5:c2:91:95:69:01:e2:cb:67:a4:3f:83:ab:2a:1f:46:
8f:31:e3:30:ef:81:20:48:82:14:e8:25:a3:5c:b1:80:24:1f:
41:49:0a:04:d0:76:83:25:ea:ab:e5:9b:5d:15:f4:cb:67:f4:
72:32:ca:d5:8c:65:34:f7:54:3a:6b:62:cc:a4:36:0a:d1:e1:
f5:f1:51:f8:1e:6a:93:a6:24:ec:12:65:7c:e7:f0:95:7a:e3:
cf:c0:6f:c7:5c:bc:6e:7f:42:23:ae:ce:01:20:7c:76:b0:df:
bd:18:89:a0:70:8b:ea:6a:f8:7c:58:22:52:d4:08:88:a3:ae:
36:93:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:49 2026 by rpki-client