Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
File: OCeQLuylKp8IFACI9VjkUuDslV8.cer (raw, json)
Hash identifier: HjeDPE4ZtjJel3lY9DYtSAzamAGKvDhpc7lD05VN0PE=
Subject key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196CEBD9B338123CFD726B5D0B3B95F8A2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 May 2025 12:20:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203079
IP: 213.134.7.0/24
IP: 2a13:4580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:bd:9b:33:81:23:cf:d7:26:b5:d0:b3:b9:5f:8a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 14 12:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3827902eeca52a9f08140088f558e452e0ec955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:57:f4:f8:af:13:e7:0c:24:c2:4c:03:6b:
34:9f:0c:f1:f6:5e:a7:54:e6:27:38:4a:91:b5:7c:
9a:df:0c:f7:57:3e:90:95:94:57:b3:7e:92:e1:89:
9b:95:91:9e:0d:0c:16:66:23:2e:32:68:62:17:d8:
b3:f7:a0:46:48:3f:83:07:fa:0d:50:08:56:65:d9:
ce:a3:92:1e:41:bc:8a:cf:33:39:93:10:04:32:ed:
28:bf:cc:34:a3:45:28:cc:c7:c7:b2:d0:09:25:df:
be:db:17:77:33:0d:a0:37:37:6a:00:86:d7:dc:95:
8d:f4:15:51:37:17:75:96:90:1b:de:9e:28:87:8a:
68:aa:25:55:26:7c:e8:42:06:73:b2:f5:42:b9:33:
3f:53:c6:69:4a:55:87:49:06:b7:1b:82:ad:d5:c7:
48:67:4c:33:67:df:1c:99:cd:86:2b:6b:40:c0:e2:
4f:ab:a3:14:b9:0e:a3:0f:c8:d8:c6:4f:20:72:f4:
03:48:41:63:b7:b1:f8:29:2e:b2:66:d6:85:10:1a:
1e:42:7a:55:3f:60:ef:d3:0e:2d:26:97:9f:b4:7f:
8d:fb:ff:92:d2:cd:e4:bd:1d:22:6c:80:e8:45:ea:
30:1f:51:5a:9e:64:aa:61:f4:4a:ba:a5:57:00:6f:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.7.0/24
IPv6:
2a13:4580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203079
Signature Algorithm: sha256WithRSAEncryption
49:4d:dd:ee:a8:e7:fa:90:8c:8e:6d:22:37:6b:c4:f4:be:38:
56:b6:57:f8:83:7e:66:9c:ea:1c:17:9f:17:23:0a:7f:09:31:
59:2f:7b:8f:0f:68:2c:51:b1:aa:ee:30:21:26:0c:d1:88:00:
17:58:d3:05:59:6c:3e:e2:e2:97:1a:ed:a9:90:51:ca:89:4d:
06:ef:02:ee:73:e7:7e:bf:78:ff:11:25:93:7c:ed:74:11:f5:
89:5d:32:88:f2:55:5a:64:dd:bd:0c:7f:3d:8b:0b:46:ab:30:
42:f0:01:fc:aa:c1:51:d6:4c:4e:46:ae:56:ed:43:50:c3:9e:
94:7c:c6:41:4e:0c:65:36:0d:a8:24:01:55:86:61:43:33:79:
1d:3f:50:e4:0b:81:ff:65:00:21:4e:08:ea:f7:4f:31:5d:78:
45:8f:f9:c7:9a:6f:a3:4b:ac:56:26:47:03:3c:35:0e:33:e7:
02:98:07:c3:19:07:9d:12:d6:2e:43:1a:b6:52:3f:93:b9:1a:
b5:65:15:a1:51:ca:c1:0f:05:33:0e:e6:bc:c7:2e:18:6f:c0:
36:5f:e3:7d:d5:c2:65:06:16:64:b6:e0:30:ae:03:84:fd:29:
24:34:80:85:cf:cc:c6:b2:a7:17:87:81:4d:a3:7d:db:69:51:
f5:61:ad:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:34:54 2025 by rpki-client