Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
File: oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer (raw, json)
Hash identifier: KSP1/pawKXyqcJc6i7hUSjqK05o+o15ms/9zip6KsCE=
Subject key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0F170796B5788D583BA22B7ACDEC6967E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Sep 2026 08:31:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2.152.86.0/23
IP: 2a0e:e000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:70:79:6b:57:88:d5:83:ba:22:b7:ac:de:c6:96:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 30 08:31:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:87:45:90:5e:23:e7:68:f9:59:bf:ad:df:
88:82:c7:c3:27:15:47:3a:8a:27:7c:ba:12:05:d6:
90:c2:4b:97:bd:89:b0:2d:1e:2e:c0:b4:77:b7:1c:
d4:c4:cc:27:35:df:45:91:f3:af:bf:83:a9:4d:15:
ff:c4:33:89:84:c7:94:1b:4f:a3:79:59:ce:bd:80:
65:b9:4c:b7:ff:d7:9c:c4:f1:b5:15:7d:b9:1f:58:
b1:66:af:22:ff:fe:98:0e:ca:34:5f:9d:54:f2:b8:
ad:a9:fd:9b:70:95:e8:7c:f1:24:e9:85:3c:7e:49:
5f:08:15:eb:f5:7a:d9:72:aa:10:e3:de:73:32:22:
a2:f6:b9:6b:bb:e1:c1:67:4f:24:7e:d8:48:4e:b2:
38:86:78:9d:00:ce:46:08:49:83:38:b3:ec:d3:30:
68:07:54:16:0e:1e:e1:d9:2a:03:c3:7b:c5:ae:99:
38:36:4d:d3:9a:f2:4f:de:97:72:f6:b0:d4:d3:85:
b8:b8:ae:da:47:2f:f0:02:d5:5e:58:f7:97:24:f7:
33:57:72:43:40:79:f2:9a:0d:37:bc:d9:4a:ae:dd:
75:aa:d6:22:c2:e0:da:91:f5:8d:6e:67:d9:71:96:
f9:4b:98:45:e4:5e:71:c0:b6:cc:95:9d:ee:4c:5c:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.86.0/23
IPv6:
2a0e:e000::/29
Signature Algorithm: sha256WithRSAEncryption
6f:df:4e:cf:f6:58:03:1a:3b:17:be:ec:e4:75:e7:71:32:12:
c0:8a:73:98:89:10:7d:b7:65:66:33:91:ec:25:53:a2:b9:7a:
b2:25:7a:52:4c:ea:db:4d:96:63:b6:79:b4:e6:a6:47:d3:d3:
ab:ac:88:18:08:c0:dd:51:ea:d7:4b:11:8e:5d:d7:d9:0c:72:
d8:06:7f:fd:fe:7a:f6:1b:6a:77:f4:7d:45:18:0b:e5:94:f9:
4c:55:69:82:8f:c4:7f:35:da:5c:46:d6:51:cb:1e:a0:62:3e:
50:b9:65:d0:ff:8d:2f:9d:dc:f4:db:9a:2f:64:67:80:c3:5c:
81:f9:46:d8:b2:07:1c:64:83:28:83:bd:2e:a1:df:ad:db:c3:
49:17:c8:c2:b7:c5:77:29:dd:04:b7:08:12:70:0d:3c:c6:b5:
40:31:61:f1:fc:a7:1e:bb:12:d7:e9:2e:5f:b4:88:a8:94:f2:
10:c0:a2:8f:41:87:0e:c0:3d:ee:a5:03:b5:90:1c:14:8b:cc:
21:5d:88:ef:05:4d:7c:89:0c:fa:86:3b:99:88:1a:b6:e3:47:
cf:6c:b9:ca:28:85:03:27:e3:0c:63:be:93:d6:cc:ad:6e:74:
fc:1d:d4:7c:48:66:00:c7:0a:ca:60:d9:25:46:9e:14:01:0e:
c4:33:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:39:47 2026 by rpki-client