Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O54AjSoXhEnxK2widbR_DP2Ug4U.cer
File: O54AjSoXhEnxK2widbR_DP2Ug4U.cer (raw, json)
Hash identifier: 3OcSxqn9sVwqDS0ENFB8zZx8sL3TAF15IpozaheiP08=
Subject key identifier: 3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA575E754C79C9C5CB3C87EC7C744A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207214
IP: 2a09:6f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:57:5e:75:4c:79:c9:c5:cb:3c:87:ec:7c:74:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b9e008d2a178449f12b6c2275b47f0cfd948385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:7a:47:39:aa:9a:b5:9b:83:f9:f9:00:9d:
f9:bb:f5:ee:a1:ec:16:ac:5c:b2:f8:62:1e:17:17:
73:2b:77:69:25:0a:07:a8:8e:d3:c0:be:da:9d:e0:
a2:84:81:ee:aa:9f:97:41:d9:d3:91:c9:cb:03:e8:
2a:5d:2f:8d:87:0c:0f:55:dc:66:c7:4a:1a:34:a3:
26:ef:0a:ba:c2:ae:18:76:37:ee:c7:ca:e6:4a:05:
7a:cc:c0:be:10:13:7b:3b:a5:c1:a0:62:6e:c9:5e:
fd:07:f9:eb:62:ed:8e:ee:ea:d3:04:5b:6f:6a:95:
ab:8f:0c:0d:7b:aa:bd:ea:4b:ef:ef:71:85:fc:2c:
43:84:86:f8:ed:3b:28:5f:da:19:31:84:24:1d:e5:
15:15:c4:ae:4a:67:d8:25:91:6e:6d:98:72:57:2a:
6c:8f:2e:e0:fc:c4:1f:c5:f5:b2:69:f7:20:af:06:
de:93:e9:e3:a9:91:2c:a5:2b:b0:76:eb:1a:23:6a:
99:19:93:e0:33:06:dd:bc:d7:5b:61:84:2c:e3:f7:
8b:3d:b1:0e:87:ea:87:b5:05:7a:74:e7:a8:ef:91:
fe:ff:54:aa:45:69:b2:af:3b:e0:5c:9a:64:ba:5b:
bf:b5:71:b3:c5:55:43:5f:3d:49:18:99:65:52:43:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:00:8D:2A:17:84:49:F1:2B:6C:22:75:B4:7F:0C:FD:94:83:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/O54AjSoXhEnxK2widbR_DP2Ug4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207214
Signature Algorithm: sha256WithRSAEncryption
8a:7b:d4:df:c9:fa:19:7b:fb:8e:0d:0e:a0:b9:43:59:64:56:
d7:b7:ec:a4:19:ac:87:10:4f:d4:0e:52:23:b4:70:b2:01:47:
4d:2e:5e:73:13:81:fa:5c:19:41:29:40:97:93:53:85:22:13:
90:92:6a:8e:bf:73:fb:88:68:e2:37:ff:ec:1a:3e:b9:6a:23:
70:3e:43:5a:e6:95:a8:0e:ac:ea:6b:69:18:32:3f:27:51:35:
6d:84:14:1f:93:9d:e6:90:bd:c7:26:ec:38:0b:76:aa:22:82:
c1:aa:03:25:ef:75:d9:77:37:19:35:e4:7e:4e:4a:9f:59:1a:
08:14:59:1b:1d:88:1b:ed:c5:5a:ae:10:f9:e4:de:8a:01:ed:
d1:1d:4e:2f:15:a2:f4:f8:85:59:f6:14:8d:cb:36:2c:8e:73:
fb:db:c4:b9:c2:ee:5d:cd:26:76:5d:b3:92:63:2d:9e:8f:55:
0d:f5:b4:44:30:e0:14:bc:27:7c:e6:67:e2:ef:3a:24:83:e4:
db:72:54:3f:0c:84:fd:71:3a:d8:dc:55:e3:11:5b:30:5a:f2:
79:f8:f5:29:39:c4:86:7c:33:48:04:73:b2:6c:a7:df:38:10:
01:e9:6a:9b:87:a0:c5:7d:29:fb:6e:b4:0e:3c:c1:75:10:f0:
a4:95:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:30 2026 by rpki-client