Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/OJLjXtbZqTquuqBvc20uzGoAibg.cer
File: OJLjXtbZqTquuqBvc20uzGoAibg.cer (raw, json)
Hash identifier: MT7VR/JFSvjJdnG/6prpQQDYSSRPsLU0t5A2ks16OF0=
Subject key identifier: 38:92:E3:5E:D6:D9:A9:3A:AE:BA:A0:6F:73:6D:2E:CC:6A:00:89:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBD756224DF1DA2D4809811B66A118
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47549
AS: 198332
IP: 93.159.200.0/21
IP: 2a0d:7880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:d7:56:22:4d:f1:da:2d:48:09:81:1b:66:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3892e35ed6d9a93aaebaa06f736d2ecc6a0089b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:5e:4e:16:91:e6:13:94:b5:ff:a2:cd:f1:
9a:0c:bc:0e:92:a0:f5:14:ad:9d:df:fa:e1:0e:b5:
6e:df:ce:3a:73:60:ee:00:1a:d2:03:58:70:21:25:
4e:35:e1:89:b9:7c:61:b1:6b:11:6c:b6:ab:f9:2a:
91:a4:dc:f4:54:31:21:72:ac:42:29:c4:80:48:10:
71:3a:5d:31:e5:71:9f:4b:1e:65:2d:1c:0f:1c:3e:
af:2d:0e:90:76:ec:f2:df:cd:70:b2:e1:0a:4f:ea:
0c:bf:c8:d5:e8:f9:96:cc:a2:6c:9b:de:ac:c7:34:
8d:b6:0e:37:8e:c8:6d:8c:b9:d9:31:01:c0:26:d8:
bb:eb:f1:79:83:98:52:98:81:e7:3c:b5:60:dc:24:
9d:9d:63:13:17:67:a1:ca:42:7a:fb:73:8b:fc:75:
0e:0f:65:8f:85:b2:9f:86:71:f2:28:d6:d1:5b:f7:
08:c3:e6:43:85:41:47:9b:a7:9b:5c:e0:1c:07:cd:
b6:d9:c4:60:d9:54:7c:15:71:f9:78:68:3e:98:ad:
c8:81:4a:e9:e5:56:a7:17:cc:23:12:f0:6f:ce:31:
53:cb:48:72:bd:46:c9:ef:7b:a6:2b:0e:cc:31:9a:
8e:60:41:46:e9:fe:07:81:98:f6:f9:34:2a:b0:74:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:E3:5E:D6:D9:A9:3A:AE:BA:A0:6F:73:6D:2E:CC:6A:00:89:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/OJLjXtbZqTquuqBvc20uzGoAibg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.200.0/21
IPv6:
2a0d:7880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47549
198332
Signature Algorithm: sha256WithRSAEncryption
7e:38:10:b4:e6:ac:64:95:11:53:ac:03:32:37:ad:92:bd:a3:
05:cd:76:ea:fa:73:ec:e8:04:a9:c0:07:14:70:76:24:87:a4:
2d:dc:f1:a7:60:87:45:8a:57:6f:62:3d:fb:d7:d2:21:d8:68:
51:96:72:4c:3d:c4:72:a6:9b:60:44:fb:c2:89:88:b1:d1:67:
28:f1:72:e1:f7:f6:8f:63:db:1d:78:8a:b0:53:2e:81:3a:9c:
cf:e5:50:88:9c:87:d0:f4:0b:8e:fe:2b:a6:59:d9:5f:39:46:
49:1a:51:6c:f5:76:af:90:28:1f:bf:dc:e4:b8:8b:21:3b:2b:
7f:5b:62:99:7f:b1:96:f8:a1:5e:8e:08:d3:f9:56:e6:35:d9:
f1:1c:11:5b:66:b5:b9:3e:7b:eb:59:92:af:a7:ec:b9:f6:42:
fc:2a:ac:3e:8d:dc:ae:4c:34:10:70:8c:c4:96:82:8d:1d:a2:
0d:54:28:40:47:0e:8f:73:4d:43:71:da:a0:2b:37:a9:b2:c2:
df:6d:39:65:67:33:ac:9e:c6:64:69:09:d7:ae:7f:27:68:2c:
a0:43:d8:0e:48:47:da:67:49:c6:ed:21:a8:66:57:2b:e9:95:
48:c2:65:0b:06:1a:13:ed:c2:53:62:03:14:bc:81:a9:df:58:
fe:44:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:20:41 2026 by rpki-client