Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
File: Or4W6uZkLTO7wPuQzeI0_QITRwk.cer (raw, json)
Hash identifier: qWEk28giY28R3j9d2CHPsiX7XOR2uubJgjyAHiZmEgI=
Subject key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8A22538EF9C44A2A88B96D6242283188
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 20:59:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216234
IP: 91.231.145.0/24
IP: 2a05:c600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:22:53:8e:f9:c4:4a:2a:88:b9:6d:62:42:28:31:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 20:59:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:be:1f:cd:a7:d7:a6:60:38:cf:44:1a:07:
fa:73:7b:60:8a:8d:76:34:6a:d3:31:62:0d:4a:c1:
86:79:0e:99:19:1e:09:82:75:d3:4b:2a:81:f4:c3:
5f:cb:57:04:77:af:1f:56:17:a7:82:cc:fd:76:dc:
97:fc:0e:c9:48:db:45:ce:0a:76:31:38:71:39:85:
0b:e2:ad:50:92:30:70:76:55:6d:c5:ce:ad:de:68:
2b:b6:11:c2:40:fc:c5:d2:b5:e7:5b:40:d6:35:59:
4b:df:3f:c8:e6:55:51:c1:9d:7a:39:e4:93:59:ac:
ee:f3:ef:90:c9:24:97:aa:e4:bd:18:3e:e5:d2:30:
ca:ff:6e:04:eb:02:25:d2:5f:08:15:6e:8f:e3:08:
19:a6:be:ba:fa:1a:34:3a:51:93:5a:ee:60:4d:7c:
a4:52:eb:e8:13:35:63:76:cd:61:3a:55:bf:84:80:
8d:4f:cd:7f:63:65:cf:c1:65:6a:10:fd:fa:de:a0:
79:92:74:7e:d0:05:78:2b:c7:30:d2:2d:93:f2:11:
64:c4:be:3d:5a:40:63:db:e6:19:66:51:50:9d:55:
ad:19:36:cd:a0:89:b6:e4:41:17:8f:93:90:62:c2:
0b:b2:e0:f9:4a:ce:43:03:ea:3f:2d:9e:4e:c4:a9:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.145.0/24
IPv6:
2a05:c600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216234
Signature Algorithm: sha256WithRSAEncryption
25:62:29:22:91:45:2b:33:0a:39:28:a2:5d:06:3b:31:bd:c2:
db:53:2d:33:b9:b1:60:51:dc:7a:f1:8a:47:cf:7c:12:a9:4c:
0d:6e:ac:7c:15:f0:b4:d6:81:22:8b:77:7e:e5:ed:2e:6d:14:
d0:83:1c:9a:15:02:28:59:f2:f3:fb:86:d9:40:2a:2b:61:23:
08:ff:fe:e3:95:00:f4:bc:96:fe:5b:5e:ae:4c:af:3e:9b:2c:
4e:5a:b3:cb:61:77:47:85:f2:a7:e0:c1:79:18:89:3e:81:1e:
48:12:09:90:ec:7d:e1:a4:41:a5:6b:69:a0:13:42:6b:32:d7:
1c:af:c1:0f:06:4c:e6:da:dc:ae:2b:37:49:1d:9a:41:a2:bf:
36:c1:a3:de:bb:75:76:70:65:a3:9b:e8:91:87:1c:db:e2:6a:
85:69:7b:e1:8e:bf:b1:c3:30:9a:5a:e8:bd:e6:7b:22:90:8e:
87:95:45:93:91:73:e8:e5:59:9f:a0:99:44:c6:03:4d:d8:eb:
1d:49:0a:a6:23:8a:bb:60:ce:7f:28:6b:49:07:d9:29:a1:35:
34:76:4b:92:3b:7c:2e:af:30:78:ec:32:95:d2:36:bd:f7:ec:
b8:86:3d:a2:06:0b:ae:b7:37:b1:82:a8:81:71:33:2d:2f:86:
c1:bf:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:04 2026 by rpki-client