Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2OAupPOGx89uaQGRtZ4OGm97v1Y.cer
File: 2OAupPOGx89uaQGRtZ4OGm97v1Y.cer (raw, json)
Hash identifier: oGOVBebGVKrj/zmpbLD5wj/eUxHUnOJpV7P1X0JiKKU=
Subject key identifier: D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FEADCCEB57EFBDEC9B8D3EF86C0150E0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Aug 2026 08:49:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212470
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:dc:ce:b5:7e:fb:de:c9:b8:d3:ef:86:c0:15:0e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 10 08:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8e02ea4f386c7cf6e690191b59e0e1a6f7bbf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:bc:eb:8f:4d:0b:cd:45:70:4e:41:a7:96:
b8:be:48:a1:be:a3:e1:03:e4:59:af:62:55:2e:bc:
db:ba:96:f1:d2:fd:ef:b7:03:bc:60:30:ad:8c:e6:
b9:9b:cc:36:d5:c5:b5:b1:2e:f4:74:1e:80:c6:5a:
51:37:39:81:73:b3:a8:d9:5a:7e:14:4c:cc:6a:2b:
f6:65:f1:17:8c:ec:60:b7:bc:fc:da:b3:8d:f8:73:
c3:aa:0e:da:14:6a:27:ee:00:23:98:f9:4f:44:32:
c2:c5:0a:54:9a:cd:7a:8c:1b:48:7c:94:ff:4d:ce:
af:ad:0f:b4:cf:53:ac:f8:40:b7:e8:6e:ec:5b:79:
5f:9b:68:4a:98:cf:5f:aa:d0:0c:46:9a:47:c2:38:
eb:dc:be:70:7e:99:42:14:82:c7:8c:80:35:c1:18:
dd:a0:79:9b:89:2a:99:02:25:88:ea:1f:9d:e7:8d:
9b:e2:f8:e3:db:02:2f:84:73:2e:25:53:44:5e:de:
45:b9:ca:12:f3:ac:b8:f4:91:48:b3:59:e7:f9:c9:
b6:24:a1:7b:53:a8:04:b7:64:31:73:29:6d:d3:16:
83:d2:4d:38:2d:46:3c:f4:18:8b:00:38:7e:d1:a4:
2e:98:83:d7:b4:d9:33:75:49:60:e5:3a:f8:dd:2c:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E0:2E:A4:F3:86:C7:CF:6E:69:01:91:B5:9E:0E:1A:6F:7B:BF:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8e09ab-6108-4421-b38c-4d071c7b5187/1/2OAupPOGx89uaQGRtZ4OGm97v1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212470
Signature Algorithm: sha256WithRSAEncryption
af:0f:f7:83:a6:7f:dd:0b:9b:c5:00:1c:ab:bf:2a:39:03:ca:
f8:62:16:42:82:42:7a:14:42:b7:6d:e6:c9:a4:86:b2:4a:f3:
13:1c:ec:37:6a:57:7b:d8:67:b7:d8:b4:42:61:55:06:5d:41:
f5:35:ad:b9:19:36:50:4c:57:72:c1:be:e1:b8:36:4c:29:e7:
af:7d:b3:62:0c:0d:3b:90:bd:ca:20:01:00:bf:5c:87:4b:a8:
56:b6:49:55:e6:bd:92:fd:8e:4c:80:a0:a8:e4:37:a9:ec:d9:
66:98:35:e6:bd:01:f4:1f:91:5d:a7:23:43:1e:bb:f5:00:f3:
40:3e:f2:0b:35:ed:41:36:92:79:b3:77:04:9e:1f:dd:5c:b1:
99:2c:47:10:d1:d2:bd:4b:c3:0a:d0:74:a4:5f:75:08:da:e5:
a9:8d:52:c8:4f:d4:67:77:b7:2d:fe:c1:c5:94:39:69:e2:12:
a3:b6:3c:5b:a7:ea:4e:51:88:48:dc:27:96:01:a9:fd:55:cd:
46:fd:f7:9a:93:0c:e6:5b:5d:2d:ca:d8:65:8e:24:fa:61:2f:
31:5e:b7:45:62:d2:f7:22:6a:96:1b:58:a8:11:ef:3e:1d:1d:
da:a2:dc:3c:e8:97:37:d2:a5:54:1f:29:7a:07:6a:e8:d0:29:
41:ba:6f:25
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ/q3M61fvveybjT74bAFQ4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODEwMDg0OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGUwMmVhNGYzODZjN2NmNmU2OTAxOTFiNTllMGUxYTZmN2JiZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDC8649NC81FcE5Bp5a4vkihvqPh
A+RZr2JVLrzbupbx0v3vtwO8YDCtjOa5m8w21cW1sS70dB6AxlpRNzmBc7Oo2Vp+
FEzMaiv2ZfEXjOxgt7z82rON+HPDqg7aFGon7gAjmPlPRDLCxQpUms16jBtIfJT/
Tc6vrQ+0z1Os+EC36G7sW3lfm2hKmM9fqtAMRppHwjjr3L5wfplCFILHjIA1wRjd
oHmbiSqZAiWI6h+d542b4vjj2wIvhHMuJVNEXt5FucoS86y49JFIs1nn+cm2JKF7
U6gEt2Qxcylt0xaD0k04LUY89BiLADh+0aQumIPXtNkzdUlg5Tr43SxLYwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNjgLqTzhsfPbmkBkbWeDhpve79WMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzhlMDlh
Yi02MTA4LTQ0MjEtYjM4Yy00ZDA3MWM3YjUxODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvOGUwOWFi
LTYxMDgtNDQyMS1iMzhjLTRkMDcxYzdiNTE4Ny8xLzJPQXVwUE9HeDg5dWFRR1J0
WjRPR205N3YxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM99jANBgkqhkiG9w0BAQsFAAOCAQEArw/3g6Z/3Qub
xQAcq78qOQPK+GIWQoJCehRCt23myaSGskrzExzsN2pXe9hnt9i0QmFVBl1B9TWt
uRk2UExXcsG+4bg2TCnnr32zYgwNO5C9yiABAL9ch0uoVrZJVea9kv2OTICgqOQ3
qezZZpg15r0B9B+RXacjQx679QDzQD7yCzXtQTaSebN3BJ4f3VyxmSxHENHSvUvD
CtB0pF91CNrlqY1SyE/UZ3e3Lf7BxZQ5aeISo7Y8W6fqTlGISNwnlgGp/VXNRv33
mpMM5ltdLcrYZY4k+mEvMV63RWLS9yJqlhtYqBHvPh0d2qLcPOiXN9KlVB8pegdq
6NApQbpvJQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 04:24:49 2026 by rpki-client