Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
File: OOdr5zhCITzgy8kz0aN0g1fyKD8.cer (raw, json)
Hash identifier: 7hQTWykJQYzpGuMUuB6XDxEcmwC9bwl8i2fFj1eeZsQ=
Subject key identifier: 38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019815394664941D7F61A2F235BA7BDC2FE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Jul 2025 21:52:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216456
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:15:39:46:64:94:1d:7f:61:a2:f2:35:ba:7b:dc:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 21:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e76be73842213ce0cbc933d1a3748357f2283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:36:d4:9d:0d:8b:f3:bf:47:9d:3c:db:f4:
b0:b5:be:f6:01:99:c9:61:59:da:dc:b0:b0:06:8f:
0a:0a:7d:8d:1c:dc:11:b9:48:05:ce:e8:91:b4:9b:
34:e6:31:84:a3:30:bf:c6:f9:ab:f9:1c:85:c8:6e:
99:4e:7f:58:ff:3e:07:6b:be:4b:14:ec:eb:68:52:
a8:05:6f:40:5b:83:02:cf:42:4c:0e:39:9c:fc:e9:
ba:9b:2d:0d:d6:b3:7d:db:41:13:be:4a:fd:64:39:
ec:76:fe:8d:cd:7a:f2:28:71:a0:8c:07:06:a5:b8:
f5:04:0d:ab:10:4b:05:e9:15:17:d3:ff:ce:b1:33:
89:4b:88:f9:21:45:48:32:5e:e1:3a:84:2a:af:b4:
19:ed:e3:b7:33:0c:58:94:75:84:b5:a8:33:b7:d0:
7a:ac:6f:27:53:b7:0a:36:bc:54:7b:04:c4:14:60:
2b:2e:86:e6:f1:ae:8b:8e:4f:5d:74:11:b9:c1:65:
ee:69:f2:0f:3a:e8:58:9c:91:f3:dd:34:b1:77:18:
20:22:c0:19:ad:fd:9f:db:b7:c1:0c:0d:31:ad:55:
7f:26:8a:dc:9c:e0:49:e8:d3:58:90:ee:b1:ed:46:
a6:b5:c4:3e:de:2c:df:94:72:d4:32:b3:64:53:4c:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216456
Signature Algorithm: sha256WithRSAEncryption
17:13:ca:90:15:66:14:97:78:80:de:b7:9d:a3:21:dc:92:72:
0e:d2:f4:3c:0f:5a:2d:1c:96:a8:cf:ce:52:f7:fd:f5:62:e8:
27:9b:99:c8:28:c2:06:72:17:f8:09:f3:40:6d:8b:ba:94:06:
5f:dd:18:a3:91:8b:ee:50:3f:31:ad:14:05:f6:03:5a:05:96:
63:93:88:ae:32:3e:00:1e:e6:02:bf:0e:6e:f6:b3:32:b6:00:
e4:82:2e:71:0d:c8:97:19:29:39:aa:ef:c4:34:cf:48:5e:80:
aa:d7:47:ec:e5:8e:da:e8:4c:07:f3:c0:fb:c1:08:3a:be:8a:
fc:b2:c3:c0:c2:4f:7a:88:e6:59:e0:79:cc:36:a5:64:06:f5:
32:81:a2:dc:e7:98:1e:e9:0c:f8:c1:31:fb:de:66:be:01:10:
8d:6c:3a:7d:4e:50:5c:1c:51:a7:0e:8e:00:e9:e8:43:5d:79:
c1:12:cc:c2:13:66:a0:95:ae:e2:2d:63:13:7b:8b:6d:4a:3c:
a5:3f:43:89:7f:0a:ef:ea:24:ef:b0:e8:b4:ff:e7:2a:0d:d8:
a8:80:69:e7:bb:07:aa:50:35:30:f1:54:29:28:b9:ed:f9:dc:
e7:a6:b2:80:44:89:dc:2d:83:09:bf:e1:70:60:54:1d:30:16:
24:ba:f5:f3
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZgVOUZklB1/YaLyNbp73C/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzE2MjE1MjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGU3NmJlNzM4NDIyMTNjZTBjYmM5MzNkMWEzNzQ4MzU3ZjIyODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WA21J0Ni/O/R5082/Swtb72AZnJ
YVna3LCwBo8KCn2NHNwRuUgFzuiRtJs05jGEozC/xvmr+RyFyG6ZTn9Y/z4Ha75L
FOzraFKoBW9AW4MCz0JMDjmc/Om6my0N1rN920ETvkr9ZDnsdv6NzXryKHGgjAcG
pbj1BA2rEEsF6RUX0//OsTOJS4j5IUVIMl7hOoQqr7QZ7eO3MwxYlHWEtagzt9B6
rG8nU7cKNrxUewTEFGArLobm8a6Ljk9ddBG5wWXuafIPOuhYnJHz3TSxdxggIsAZ
rf2f27fBDA0xrVV/JorcnOBJ6NNYkO6x7UamtcQ+3izflHLUMrNkU0w2EwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDjna+c4QiE84MvJM9GjdINX8ig/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzI3Yzg2
Yy1hNWFkLTQyNTMtODFkYy0xNTUyNmJmN2Y0ZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMjdjODZj
LWE1YWQtNDI1My04MWRjLTE1NTI2YmY3ZjRlYi8xL09PZHI1emhDSVR6Z3k4a3ow
YU4wZzFmeUtEOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNNiDANBgkqhkiG9w0BAQsFAAOCAQEAFxPKkBVmFJd4
gN63naMh3JJyDtL0PA9aLRyWqM/OUvf99WLoJ5uZyCjCBnIX+AnzQG2LupQGX90Y
o5GL7lA/Ma0UBfYDWgWWY5OIrjI+AB7mAr8ObvazMrYA5IIucQ3IlxkpOarvxDTP
SF6AqtdH7OWO2uhMB/PA+8EIOr6K/LLDwMJPeojmWeB5zDalZAb1MoGi3OeYHukM
+MEx+95mvgEQjWw6fU5QXBxRpw6OAOnoQ115wRLMwhNmoJWu4i1jE3uLbUo8pT9D
iX8K7+ok77DotP/nKg3YqIBp57sHqlA1MPFUKSi57fnc56aygESJ3C2DCb/hcGBU
HTAWJLr18w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:05 2025 by rpki-client