Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
File: opu5R2dQ7A4mIqUF5RUS729aW7Q.cer (raw, json)
Hash identifier: 1gFuWdeRPSvhc8NJkybbE9jRhY8TX3K/9hMF+YpA00s=
Subject key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C46E58BFE025AFCA0B20B21712AB61493
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Feb 2026 09:32:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201671
IP: 195.222.105.0/24
IP: 2001:67c:4f8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:e5:8b:fe:02:5a:fc:a0:b2:0b:21:71:2a:b6:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 09:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:95:94:43:ce:5a:b9:e6:20:e5:38:ec:96:
fc:fe:65:7c:ac:fa:9f:a6:6f:ff:ed:7b:5f:94:16:
89:67:e6:62:26:ff:3c:31:94:eb:e9:92:27:1d:54:
e3:44:14:bd:b6:d4:38:5b:04:9f:da:ce:85:36:55:
da:8c:d8:61:fd:8e:2d:de:1a:78:5a:66:61:23:ce:
91:c1:ae:80:a6:a5:a5:2f:58:d8:11:c1:82:4d:2c:
ee:57:a9:12:c8:37:8f:25:d6:eb:10:cf:b4:08:df:
90:1a:3e:55:23:c1:0a:79:3e:b3:8a:8f:bc:f6:5a:
5a:6d:a6:ad:7f:b8:a5:e5:d4:da:a1:3e:2a:9b:be:
ee:6e:f1:a7:15:78:3e:58:1c:5b:8c:22:85:84:46:
6d:86:21:67:fa:92:85:08:21:00:3b:df:b5:0b:8f:
27:a0:76:63:79:1e:35:9d:6d:ec:36:d6:6f:08:ff:
3d:52:d1:3e:56:06:02:13:a9:3f:41:ed:1d:5c:c8:
bd:d7:ed:75:c4:8e:bc:85:e0:d4:80:df:2b:93:66:
3f:d7:bc:e8:9c:e3:32:7e:81:6c:c4:9b:65:0c:ef:
19:7d:81:e8:0f:62:c7:20:d6:1b:2b:67:4a:ff:31:
05:6e:51:4b:d9:46:fe:6f:c7:3d:f8:36:74:56:c0:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.105.0/24
IPv6:
2001:67c:4f8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201671
Signature Algorithm: sha256WithRSAEncryption
12:dc:09:54:65:92:13:9d:17:f7:da:5f:81:48:5d:bd:fa:0e:
ea:3b:c7:93:0c:37:e7:62:43:d8:ca:3e:f5:c9:50:e1:dd:f7:
27:6f:54:c5:23:26:fd:a6:27:18:30:bd:ab:62:e3:ff:c1:f9:
2e:97:ac:6c:06:08:c6:73:e7:50:6f:c4:c7:af:86:4f:f7:f6:
95:d2:1c:28:60:d7:4c:67:02:b9:fb:50:65:ef:e6:07:b9:a4:
06:26:b4:9c:ab:8a:9d:83:6f:4b:35:ed:c7:17:a7:46:4b:2d:
13:33:61:4f:7d:bf:99:95:4c:81:16:0d:85:66:9d:a8:1f:5c:
64:b2:95:aa:50:76:16:5c:67:16:99:b0:8d:d8:dc:63:15:d5:
ec:53:56:3c:bb:d4:0c:3e:6a:bb:85:58:2c:a1:ed:57:59:a3:
bf:e3:2d:d8:75:bc:a7:23:a6:8f:d3:da:ed:40:4f:8f:21:1d:
27:84:4c:f0:0a:76:0b:1e:be:0f:b7:94:43:df:a5:6a:a9:3d:
49:72:ff:93:0d:a8:be:05:18:76:92:65:41:bc:c4:0c:bb:a8:
0e:4d:0e:15:ad:4b:d8:8c:6a:c0:ef:6b:6c:4f:b6:32:a3:58:
c1:f4:11:27:4a:7f:7c:ac:33:60:6c:1c:a4:79:e6:9e:a2:32:
2c:84:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:51 2026 by rpki-client