Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
File: OvCbozta5YGw0pMjJJMU92qhBRE.cer (raw, json)
Hash identifier: sdB2+AdyXrZPIjPJM1bQNDQ3HSJ6qjoMg8I/dWZXb40=
Subject key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13EE366112EC4FF82DD57606868A9CA4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 Oct 2026 09:27:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 2278 -- 2309
AS: 2340 -- 2349
AS: 2370 -- 2375
AS: 2377
AS: 2917
AS: 3215
AS: 5511
AS: 5583
AS: 8891
AS: 16028
AS: 24600
AS: 25113
AS: 25186
AS: 28708
AS: 41128
AS: 199140
IP: 1.178.224.0/19
IP: 2.3.0.0 -- 2.15.255.255
IP: 62.160.0.0/15
IP: 80.8.0.0/13
IP: 81.48.0.0/13
IP: 81.80.0.0/16
IP: 81.248.0.0/13
IP: 82.120.0.0/13
IP: 83.112.0.0/14
IP: 83.192.0.0/12
IP: 86.192.0.0 -- 86.225.255.255
IP: 86.227.0.0 -- 86.231.255.255
IP: 86.233.0.0 -- 86.255.255.255
IP: 90.0.0.0 -- 90.71.255.255
IP: 90.73.0.0 -- 90.95.255.255
IP: 90.97.128.0/17
IP: 90.99.0.0 -- 90.127.255.255
IP: 91.123.112.0/20
IP: 92.128.0.0 -- 92.181.223.255
IP: 92.182.0.0 -- 92.191.255.255
IP: 109.208.0.0/12
IP: 161.105.0.0 -- 161.106.255.255
IP: 192.44.60.0/24
IP: 192.144.74.0/24
IP: 192.144.76.0/23
IP: 192.190.131.0 -- 192.190.132.255
IP: 192.190.233.0 -- 192.190.236.255
IP: 193.105.90.0/24
IP: 193.248.0.0 -- 193.253.255.255
IP: 194.2.0.0 -- 194.2.73.255
IP: 194.2.76.0/24
IP: 194.2.78.0 -- 194.2.87.255
IP: 194.2.96.0 -- 194.2.154.255
IP: 194.2.156.0 -- 194.3.135.255
IP: 194.3.137.0 -- 194.3.255.255
IP: 194.51.0.0/16
IP: 194.206.0.0/16
IP: 194.250.0.0/16
IP: 195.6.0.0/16
IP: 195.25.0.0/16
IP: 195.101.0.0/16
IP: 212.234.0.0/16
IP: 213.56.0.0/16
IP: 217.108.0.0/15
IP: 217.128.0.0/16
IP: 217.167.0.0/16
IP: 2001:67c:128c::/48
IP: 2001:688::/32
IP: 2001:7f8:2d::/48
IP: 2a01:c000:: -- 2a01:dffe:ffff:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:e3:66:11:2e:c4:ff:82:dd:57:60:68:68:a9:ca:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 09:27:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:71:23:aa:17:de:a6:6b:6c:ea:17:05:ae:
e3:55:0b:65:58:f5:2e:0a:15:17:f0:96:f4:04:28:
1b:9f:87:08:af:31:79:a1:bb:27:fd:d6:4b:87:e1:
86:91:d4:e2:27:e7:5c:ff:37:fc:27:01:f1:af:a6:
41:f1:a9:a5:31:e5:01:cf:ca:3a:d9:d7:ad:ef:11:
b7:17:24:18:93:1b:82:62:45:b0:56:9a:32:fe:9e:
1c:43:4a:98:2e:20:0e:ab:e9:7d:86:0c:e0:35:94:
e3:5d:d7:23:53:85:13:d5:f9:98:a4:ca:67:b7:1d:
ad:7f:25:3b:0f:44:a0:1c:68:83:12:10:07:cc:d1:
0e:81:ed:c5:b2:9e:ee:3a:d3:05:f6:6c:b2:d9:45:
fc:46:71:bf:c2:b1:9d:4b:9d:60:d9:f3:c6:17:40:
ca:22:6c:8f:ba:5e:10:ac:ed:34:76:08:cf:fb:47:
89:02:b2:80:99:ae:cf:34:e7:ed:28:5c:41:86:d0:
e2:61:40:27:01:39:52:6a:ce:13:28:02:74:d1:85:
d2:b1:1a:a4:ba:02:5a:5e:d2:ff:2a:05:1f:38:69:
f1:b5:5b:1f:90:72:e2:20:6e:60:99:19:59:e1:76:
f7:2e:32:c3:ca:97:a9:70:91:eb:cd:bf:f1:65:3b:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.224.0/19
2.3.0.0-2.15.255.255
62.160.0.0/15
80.8.0.0/13
81.48.0.0/13
81.80.0.0/16
81.248.0.0/13
82.120.0.0/13
83.112.0.0/14
83.192.0.0/12
86.192.0.0-86.225.255.255
86.227.0.0-86.231.255.255
86.233.0.0-86.255.255.255
90.0.0.0-90.71.255.255
90.73.0.0-90.95.255.255
90.97.128.0/17
90.99.0.0-90.127.255.255
91.123.112.0/20
92.128.0.0-92.181.223.255
92.182.0.0-92.191.255.255
109.208.0.0/12
161.105.0.0-161.106.255.255
192.44.60.0/24
192.144.74.0/24
192.144.76.0/23
192.190.131.0-192.190.132.255
192.190.233.0-192.190.236.255
193.105.90.0/24
193.248.0.0-193.253.255.255
194.2.0.0-194.2.73.255
194.2.76.0/24
194.2.78.0-194.2.87.255
194.2.96.0-194.2.154.255
194.2.156.0-194.3.135.255
194.3.137.0-194.3.255.255
194.51.0.0/16
194.206.0.0/16
194.250.0.0/16
195.6.0.0/16
195.25.0.0/16
195.101.0.0/16
212.234.0.0/16
213.56.0.0/16
217.108.0.0/15
217.128.0.0/16
217.167.0.0/16
IPv6:
2001:67c:128c::/48
2001:688::/32
2001:7f8:2d::/48
2a01:c000::-2a01:dffe:ffff:ffff:ffff:ffff:ffff:ffff
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2278-2309
2340-2349
2370-2375
2377
2917
3215
5511
5583
8891
16028
24600
25113
25186
28708
41128
199140
Signature Algorithm: sha256WithRSAEncryption
2b:a0:82:74:5c:54:e0:f2:58:df:7b:ad:8f:eb:ce:86:f9:64:
80:5b:59:88:59:bc:a2:3b:61:99:ab:0c:4a:6c:13:36:f1:0e:
f3:c4:22:48:37:ed:9f:60:bb:25:76:98:62:ee:fd:40:4e:4e:
93:34:47:45:f1:76:9d:ad:4b:ac:de:7f:8c:45:d9:8f:54:72:
7e:c7:39:6a:8a:0f:5d:2d:6d:14:2f:b8:6b:7e:d5:c4:e9:49:
eb:56:f2:07:8d:6d:24:af:32:d0:0f:08:01:80:5f:95:6e:c9:
7e:7f:2d:c2:40:69:a2:e9:48:2d:d3:2b:fb:0b:68:61:04:f3:
4f:05:c6:76:d8:66:d7:91:65:ea:d4:84:ac:b7:72:09:92:85:
99:cc:55:f1:76:e0:e2:58:b5:d2:7f:ba:1b:3c:11:06:bc:46:
f7:d2:2e:50:f6:9d:62:5d:11:5b:91:ac:34:79:41:1d:c5:ad:
98:a3:04:c6:7e:5e:29:5d:90:05:da:44:19:96:02:a3:83:3a:
9e:7e:09:8e:56:42:f1:3a:35:a1:47:fc:50:95:dc:61:ac:eb:
76:d1:04:bf:5a:76:a3:ad:c8:1c:a6:09:0c:1e:f0:71:ac:09:
29:2c:10:34:08:1a:a2:bd:c8:bf:47:db:16:7c:d1:90:1b:b4:
c5:6b:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:51:55 2026 by rpki-client