Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer
File: 5olOhd5rSDFY9D2ADrLns_2IE98.cer (raw, json)
Hash identifier: i+cJPumejWvJH+ttmtTIGLzHD9g94XaKWki4ELuODoQ=
Subject key identifier: E6:89:4E:85:DE:6B:48:31:58:F4:3D:80:0E:B2:E7:B3:FD:88:13:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6ACF946C995F1A286DFA27D7CC34435
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 06:21:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.27.82.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:ac:f9:46:c9:95:f1:a2:86:df:a2:7d:7c:c3:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 06:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6894e85de6b483158f43d800eb2e7b3fd8813df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:20:20:04:75:c7:b4:62:3c:e2:db:1f:69:
b1:73:f3:57:e1:5d:03:14:32:1b:a7:55:30:4f:21:
bd:76:c8:ab:7b:71:17:3a:e0:c5:1c:5a:5b:b2:ef:
b4:7a:a7:dd:5e:7c:4c:98:20:3b:2b:71:ab:3a:fb:
d0:74:4c:1e:9e:76:67:6a:a5:d7:83:f6:1f:d9:9d:
c8:2f:57:51:60:89:18:0e:ee:af:ba:9e:7b:ba:58:
aa:49:ef:63:ba:07:ea:68:6c:80:15:72:7e:5b:20:
03:18:29:48:7c:96:67:aa:9b:33:d1:f7:74:65:52:
f0:1c:58:34:3b:1c:75:6e:02:47:9b:3d:5b:64:8e:
a3:47:23:df:ab:37:d9:2d:9b:c9:83:7e:7a:58:28:
50:a9:46:7d:c3:e4:e6:45:69:15:31:16:2d:e7:c1:
8a:ed:75:f9:f2:c5:f3:16:16:9e:99:82:41:44:68:
ec:c0:7f:7b:13:64:db:8d:65:7e:7c:16:e0:fa:05:
43:42:ae:d8:ce:31:4c:7a:5f:b1:12:8b:fb:25:d1:
c3:c4:3d:d4:df:a8:11:fa:83:7d:47:e2:83:b2:a5:
3b:11:69:59:a9:c7:e8:37:76:dc:e9:f3:e6:29:e5:
14:5a:a4:ba:cf:66:f0:63:5b:d8:ed:e3:20:43:59:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:4E:85:DE:6B:48:31:58:F4:3D:80:0E:B2:E7:B3:FD:88:13:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.82.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:32:1d:23:47:94:ac:47:86:07:62:88:77:38:48:69:97:1a:
1e:2b:ca:df:08:a6:a9:ec:60:85:3a:47:e8:8d:77:ce:14:69:
8a:c8:63:5d:95:01:4b:c3:fb:7d:79:24:21:c9:66:e4:8c:05:
f6:4d:44:0d:8f:4f:d8:79:e5:7f:15:75:78:00:68:86:c6:b4:
0d:28:48:85:29:f3:5d:6f:55:a3:65:57:24:b2:77:f5:8f:bd:
03:c1:2e:fd:30:41:b0:21:31:db:ef:11:81:0f:59:b5:ad:bb:
c7:7a:09:7f:de:d4:b7:a4:f2:3b:bd:12:a9:3d:ba:16:59:43:
cb:ab:a7:80:ac:20:cc:f5:c1:13:77:11:c3:a7:9f:52:1a:f7:
27:41:11:3b:f9:ef:b8:46:9a:61:5b:ca:77:fc:05:1a:ef:63:
a0:f2:46:43:d4:d5:58:c3:1b:3f:9e:df:8f:51:c4:64:c1:91:
8b:cd:18:b5:69:ad:e6:6b:2f:c1:3f:54:24:f5:51:6e:9d:73:
ad:2c:8e:d4:fb:ec:09:3e:f0:1a:26:c6:1c:dd:be:a6:ea:58:
63:30:a6:4a:bc:5b:70:05:90:eb:cb:85:ac:d3:b2:63:66:43:
a4:c7:9a:91:a9:02:56:e0:58:8d:4d:aa:4e:04:3e:2f:d9:01:
bd:93:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:50:44 2026 by rpki-client