Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
File: OZp78rkKuMv9JMxPi63qeHf45JU.cer (raw, json)
Hash identifier: c2vTS8c5NZhOALsdJ22nl9pFMs+ulogBT9bzcxKxGOY=
Subject key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED0D6C4B3DFCFF5677BA856B3C5F1DC73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 16 Jun 2026 14:29:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 177.28.0.0/15
IP: 177.111.0.0/16
IP: 177.122.0.0/16
IP: 177.166.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:d6:c4:b3:df:cf:f5:67:7b:a8:56:b3:c5:f1:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 16 14:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:61:6d:61:0b:6f:22:73:5d:13:56:71:39:
07:6e:39:ee:b2:f8:b9:e8:cd:77:17:95:a4:10:28:
a3:c2:31:c9:05:7a:e5:96:94:df:fd:47:d1:7f:d1:
3c:67:a8:f8:9a:4e:42:e1:2f:ff:7f:ec:6f:a1:8f:
b0:e6:9d:c2:17:cb:54:de:19:bf:6d:79:7f:39:8d:
0f:51:4b:ca:f1:70:4a:53:f4:2b:b8:44:d1:15:9a:
87:54:32:1a:72:59:2f:85:08:56:e6:ec:20:12:73:
62:d3:e3:2b:ca:63:a9:c7:71:34:39:31:62:f5:b9:
52:d5:1b:17:08:39:10:35:56:c9:27:29:1a:1a:1e:
69:ce:91:a9:aa:9b:42:a2:b5:4e:8a:9f:5a:59:11:
6e:b0:e7:18:13:93:71:92:c0:47:c9:4c:cc:4f:76:
96:c0:69:6a:e7:3e:89:9b:6c:ec:52:41:d9:d4:08:
80:ca:0b:50:e5:d4:9f:4f:4b:bf:4d:c2:d7:e2:dd:
a7:92:8a:e3:01:89:31:73:6a:ae:78:6b:f5:65:57:
b9:29:17:26:1f:07:d3:66:16:5a:b6:4e:b5:e8:0d:
0f:0c:0a:4d:0b:a6:14:34:52:38:68:91:e6:41:b8:
a4:bb:77:cc:2b:77:e7:bf:26:59:ad:c5:65:e8:de:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.0.0/15
177.111.0.0/16
177.122.0.0/16
177.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:1b:59:94:ba:ef:c9:e2:b4:10:e8:24:72:a1:84:3f:d2:6e:
2d:70:bb:43:df:39:f0:87:50:b8:c2:a2:75:cd:81:50:91:f8:
3d:46:40:fd:dd:f8:47:ec:b4:c8:fe:53:7f:e0:de:02:5b:35:
74:a9:53:89:ab:d2:66:fb:4b:5c:1e:43:4f:ae:bf:5b:63:08:
4d:3e:fb:a1:0c:88:b0:ca:85:36:8b:67:20:d5:ed:44:e7:1a:
44:9b:61:1c:5d:07:ce:77:b2:5d:69:9b:47:c6:e7:43:c9:2f:
a6:70:98:08:cd:b6:96:eb:03:c1:fd:ea:d4:75:3f:7e:f2:9f:
32:d1:fb:65:ad:1f:0a:f7:42:1f:6b:08:1f:ec:5f:c0:0c:a8:
55:08:a7:8d:b2:2e:c1:75:bd:f9:a7:61:99:d1:98:6b:3c:d5:
cf:1d:2c:96:53:29:7c:71:c2:30:64:9c:22:0b:f8:5a:23:58:
e9:8b:86:66:72:d5:97:54:bb:e4:56:21:cf:3c:5b:5a:30:ef:
6a:88:7a:24:a3:80:5c:28:ed:41:7b:9e:98:01:fe:ef:8a:0e:
09:18:b9:51:fa:e0:3b:67:3f:47:a6:21:e5:3c:a8:0d:a6:86:
8a:b0:37:54:32:0a:67:2e:1f:ca:5c:77:50:80:03:fa:d7:54:
9e:4d:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:17 2026 by rpki-client