Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer
File: OmJ0aWeQCyTFnSFPQFMtdv7_geQ.cer (raw, json)
Hash identifier: 5EvE0CbeOVtFDQ/AxPiK9UkZ1bbwQJdd7c2ECg66WDY=
Subject key identifier: 3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DA1BEF2463AAFB0DEFB29596AEDE2644D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 18 Apr 2026 17:58:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213487
IP: 147.236.163.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:be:f2:46:3a:af:b0:de:fb:29:59:6a:ed:e2:64:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 18 17:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a62746967900b24c59d214f40532d76feff81e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:79:17:ad:48:23:17:c4:90:f3:63:76:62:
84:3c:09:d0:bd:7b:4d:d7:f4:02:0b:6f:33:b8:12:
eb:8c:48:9d:90:48:db:5c:83:a5:7c:9c:ba:44:7b:
ce:44:73:66:8f:80:5c:0a:12:c1:9f:0a:df:84:5b:
1d:ca:bf:b1:09:96:9a:47:5b:c4:94:08:de:5f:92:
12:dc:eb:25:2a:87:dd:0a:67:7e:03:ae:67:40:32:
bd:6f:63:82:be:6d:b4:3e:bd:96:95:e3:38:89:34:
88:46:6f:59:83:b9:35:55:86:dd:43:50:aa:e8:0f:
48:7b:a0:fe:6a:a0:18:6a:30:4a:6d:75:c4:7c:61:
f6:00:ec:f7:a9:68:7f:cc:7e:fd:67:38:6c:8b:41:
49:06:70:fc:02:1e:56:39:4c:39:a9:d0:80:8c:47:
ac:53:fa:58:43:35:e5:0d:34:3a:ba:4f:c2:2c:55:
f5:da:1a:15:aa:a6:f2:51:15:6a:1f:8e:ff:df:7e:
89:ec:20:bd:54:86:d4:36:5f:5f:81:43:c0:ff:bf:
f3:d8:80:e4:0f:e5:8d:d5:e5:78:07:36:b4:9b:e9:
80:9c:91:2c:37:37:8a:c5:0a:ae:9c:4e:e5:f2:4c:
dd:53:7b:70:6a:db:6e:c6:8b:d1:ef:a2:83:b9:92:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:74:69:67:90:0B:24:C5:9D:21:4F:40:53:2D:76:FE:FF:81:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6292cd-d10b-4e48-83cc-25d85cf6e85a/1/OmJ0aWeQCyTFnSFPQFMtdv7_geQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.236.163.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213487
Signature Algorithm: sha256WithRSAEncryption
88:5d:8c:d1:e1:41:c8:e1:39:26:5f:26:60:94:5b:17:58:3f:
8e:59:ff:fd:c1:1e:52:bf:58:8d:59:c5:1b:5e:8c:e6:f2:7a:
03:e9:8b:3d:72:8a:04:ee:c0:62:d6:be:a2:31:78:f5:fd:e2:
1a:1a:9d:dc:24:c2:9c:55:a3:81:8b:ce:c8:7f:91:e5:76:60:
4b:46:0a:8d:49:30:d4:38:a8:e0:db:5b:47:32:c4:8e:6e:b0:
f0:6f:a7:2f:82:09:47:a3:f6:ef:7a:d4:09:4a:d6:5e:01:65:
8a:1e:77:13:ea:e9:ae:65:8a:83:5a:fb:ca:3b:2c:8a:87:c6:
74:0d:34:d9:0b:dd:ae:8f:35:3b:7b:14:7e:87:9a:11:81:0d:
80:86:3f:26:db:0c:7a:eb:af:75:95:c0:31:a6:38:a9:2c:01:
24:3e:1b:4b:f9:ac:10:e4:21:27:e3:fc:d6:8a:5d:4d:11:d7:
65:cc:72:37:d8:fb:af:ca:3e:00:8b:e4:bd:59:52:0d:9b:40:
f8:9b:e2:a4:52:cd:fc:21:c6:cb:41:c1:0e:fa:b3:06:ba:19:
5f:3a:1b:8f:14:95:14:41:46:bd:17:2e:75:63:de:0d:70:44:
72:6f:3f:06:47:d6:43:26:6a:32:78:d1:aa:8a:47:ec:61:20:
5d:76:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:02:13 2026 by rpki-client