Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
File: OvT97X4Qu-r0tDALBAPwzsJSyV4.cer (raw, json)
Hash identifier: JmBNMxdGtExRBKjLOZyrQcPd0nhk/+9+w3c6/A/vf44=
Subject key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FC81C76A5E53DEBF24B6FC078037D2EFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Aug 2026 14:52:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200126
AS: 207845
AS: 207870
IP: 2a0a:7a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:1c:76:a5:e5:3d:eb:f2:4b:6f:c0:78:03:7d:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 3 14:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:a4:f0:f4:6a:81:07:1e:56:5e:1f:52:13:
49:30:12:0f:2f:b8:2d:0a:2a:e5:17:5b:15:d6:1e:
99:4d:b9:43:72:ff:9c:27:f4:fb:a3:d6:c0:62:be:
fe:6d:f0:b5:eb:99:51:e0:47:2a:5f:6f:f7:1a:e2:
13:36:e8:89:3d:9a:74:ee:e6:29:1b:24:79:a1:e9:
aa:f9:78:2e:a3:98:ec:40:49:70:04:03:fa:f6:f3:
c8:f1:da:61:3a:05:f8:f6:6e:97:6e:7a:af:e1:9f:
b8:c2:2e:ab:b9:42:c5:82:69:5b:63:4f:36:75:92:
d8:b9:ed:09:79:c5:18:0c:f3:33:a8:a2:38:7e:5d:
5b:25:ee:56:37:12:bc:3c:7f:fe:0c:49:9f:01:07:
b2:11:88:28:87:eb:f7:75:f8:f7:6b:d1:e0:0a:03:
a5:c5:c0:8d:b7:dc:8e:c1:51:a4:a5:3c:a2:59:e6:
b1:5a:d3:ae:a2:be:1b:50:9e:27:0f:9b:8f:b0:2f:
45:17:df:3c:c2:94:56:25:66:1e:41:0d:eb:83:85:
20:47:0b:0d:1e:fd:66:da:c9:3d:1c:3a:38:8e:97:
44:99:63:99:85:42:37:15:a4:0b:b0:82:ca:21:3b:
f6:f0:9a:0f:62:b0:6d:83:b7:c5:9d:d5:e6:86:01:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200126
207845
207870
Signature Algorithm: sha256WithRSAEncryption
65:bd:62:76:d0:5b:35:d0:f0:b7:87:90:01:02:19:91:8d:05:
79:64:aa:d7:27:42:55:58:01:e2:d8:2f:8b:02:90:6a:b8:41:
5b:ed:82:8c:44:f2:b8:e4:ca:44:55:2e:d9:27:32:a5:37:3d:
bd:f4:fc:6d:36:33:6f:b9:c3:4b:ef:85:44:67:55:ee:92:49:
d8:c1:aa:1d:47:a5:d2:b7:ef:a1:8b:60:8c:48:a1:50:a0:e8:
48:c9:f5:df:bd:0f:1e:2f:55:f2:b0:07:03:19:2f:59:c0:3f:
17:22:fc:cd:e5:35:d3:ec:72:5d:d0:1f:57:1d:9a:96:c9:01:
60:ca:8e:74:e2:7b:14:9a:93:f3:ec:1a:f9:1f:c2:3e:ae:95:
08:a4:c3:97:f7:dc:2e:60:34:33:94:04:73:45:f8:04:52:2f:
0e:19:b2:a2:94:82:97:4e:b5:29:99:fe:7b:a2:76:42:04:dc:
1c:cf:15:52:93:0f:cd:8a:34:ef:90:7a:f6:c6:c3:63:e1:6f:
8d:4f:94:57:ae:dd:ff:78:f2:bc:45:95:9d:80:71:5b:d7:c7:
b0:70:ce:05:63:ea:b1:de:05:16:f1:5d:cb:18:18:87:d4:53:
e1:62:3e:27:ba:9d:cf:8a:31:52:85:15:ad:c1:63:ec:b9:c5:
f1:4d:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:30:41 2026 by rpki-client