Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
File: oKzKnE_pv57fO8blyrxSg42TyxM.cer (raw, json)
Hash identifier: 5BzFKkjCstSr7oh2galpJ0OalI9ppQHNCaRhWI1SQG4=
Subject key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199BE6F7BC7F3C598B1A6C743CE85C68575
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Oct 2025 11:30:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196851
IP: 185.174.144.0/22
IP: 194.247.178.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:6f:7b:c7:f3:c5:98:b1:a6:c7:43:ce:85:c6:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 11:30:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:1f:f5:f8:96:c1:3a:27:c0:b3:a7:1c:3d:
91:86:cd:75:fe:41:cd:66:de:81:3e:b8:5f:e3:11:
59:bb:eb:c4:40:17:5c:04:68:57:6f:52:54:06:3a:
7a:3b:7e:75:b1:f2:73:f8:bc:b2:24:58:64:61:b3:
bc:e8:e5:9e:e3:e0:ee:28:08:0c:db:da:7f:07:24:
8f:61:fc:e6:a1:e2:79:05:1a:dc:3c:b9:d5:3c:27:
da:29:f5:e3:4f:ca:26:be:e0:0d:7b:c2:f5:9e:cc:
f3:7d:7c:0a:7a:e0:cd:7e:e0:ad:ed:52:8f:ba:e9:
6c:72:2f:ec:be:cd:ea:1d:2b:21:2e:f2:3e:07:14:
6d:d3:d4:e9:98:bf:cb:4b:b3:55:88:91:37:55:50:
96:45:da:26:6a:a7:61:22:db:4f:80:b1:c1:7f:01:
99:88:00:c4:5b:25:cc:58:39:31:0c:04:97:79:cc:
a4:30:bb:4b:d7:94:6b:53:79:1e:d0:d4:fb:9b:45:
81:a5:5f:ec:ed:bf:f5:71:25:73:52:50:b1:a2:c8:
93:8b:0c:ec:a0:b7:37:a3:5c:38:98:10:c0:4a:28:
20:15:9a:e1:9a:85:51:e0:a9:9a:40:ab:94:8b:99:
e5:de:70:7c:d8:86:dd:58:16:dd:7a:2d:12:16:55:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.144.0/22
194.247.178.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196851
Signature Algorithm: sha256WithRSAEncryption
a0:c8:18:17:00:66:c5:62:46:51:8d:f3:c2:d2:6e:b7:b8:86:
20:05:e0:8b:2a:6f:02:8b:11:79:4a:10:de:2f:ba:38:0f:a1:
62:72:41:fb:3e:d2:25:aa:f4:a4:9b:8c:79:d8:ed:f3:ce:22:
b6:65:00:25:30:19:62:23:ee:11:d5:85:3c:dc:1b:25:34:e8:
8f:0f:9d:4e:14:a7:05:95:d5:53:73:be:02:be:da:d2:d5:a5:
10:7c:26:bf:6c:36:0e:be:64:67:40:30:ef:62:07:67:3f:0a:
34:ed:cb:cf:3f:fb:53:a0:db:d8:c6:5b:24:11:c5:9d:39:d7:
8b:1c:a5:44:19:10:37:57:7c:e7:56:24:ad:ff:6b:e6:f6:eb:
c4:ca:0e:0e:2f:b7:b6:08:c8:3c:1a:2a:2c:37:a7:53:67:13:
35:72:5f:6b:3e:3d:26:db:30:51:1a:84:50:84:8a:b3:36:8d:
a9:56:84:4e:71:3d:38:43:f5:49:c6:c2:bc:4e:2d:b5:0a:ed:
68:60:00:f9:f0:e0:15:05:be:6c:c8:04:57:c8:41:59:63:43:
2a:20:7c:b1:ae:28:18:6d:9a:08:ee:b5:15:f5:cd:a7:ea:57:
5d:8d:10:36:a1:38:4b:24:7d:b3:78:4d:1d:5a:ec:cc:86:cb:
3c:9f:31:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 8 13:33:31 2025 by rpki-client