Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
File: obGOy3zMmQgi1GDAcnLouA5oqtU.cer (raw, json)
Hash identifier: KYDI/DwKvIIp75oPix4FyQj9qNIVM9+Z91xBXQOFljE=
Subject key identifier: A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F225A389A7EF887EE26C33E77CF20287B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jul 2026 10:22:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219297
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:5a:38:9a:7e:f8:87:ee:26:c3:3e:77:cf:20:28:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 10:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:83:54:45:48:7a:b1:91:d3:81:8b:47:fa:
ae:f4:a7:a5:4f:f2:48:94:2e:c6:e0:88:4a:ba:85:
01:3d:d0:b2:9e:f7:1b:54:3c:80:2a:d5:af:18:f9:
94:e4:de:b5:05:41:4c:66:c8:f6:f2:59:fd:d6:8e:
d1:3b:6e:77:98:dc:a0:0c:54:e0:82:77:2d:7d:62:
1f:de:e3:af:ee:01:75:0f:e9:db:a0:5a:f7:a3:dd:
10:16:8b:fb:3c:8d:9d:a7:7f:54:87:aa:22:92:e4:
6d:48:a9:64:52:33:47:09:92:30:a8:7c:0d:e9:eb:
f3:53:28:6f:be:5d:61:c3:ee:dd:7a:fd:0b:36:dc:
7e:b2:d2:d1:a2:0d:f7:40:7f:4b:fe:e6:a1:b3:e3:
5f:3f:cd:51:2e:27:11:4b:a3:e6:11:22:fd:a1:ee:
f6:7e:9f:70:df:e1:f7:a0:f1:a4:a7:fd:15:ad:3e:
d2:96:64:dd:da:06:84:d8:28:4f:b4:83:bb:f8:16:
39:4f:bf:ad:06:9c:30:07:36:98:42:97:ba:80:62:
c5:23:57:c0:3d:74:39:06:f8:6e:f7:35:69:29:08:
7b:4a:33:84:31:ac:06:18:6d:2e:43:09:a7:1a:71:
12:ae:c4:4d:13:19:d8:44:e0:61:a3:3e:f6:83:cc:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219297
Signature Algorithm: sha256WithRSAEncryption
00:4e:52:0d:fb:a6:51:1b:78:5b:36:1b:b1:10:d1:95:52:2c:
03:58:e1:7d:a9:7e:87:d5:55:39:75:ac:de:91:02:72:ae:76:
a7:16:40:5d:4b:06:86:a7:13:25:21:35:10:22:c4:3e:86:a2:
c1:13:1d:a8:f1:34:a3:ec:b1:4e:19:3f:de:87:ba:5f:3c:7e:
2c:e7:a4:c6:25:d8:4c:15:32:9b:30:eb:a1:18:f6:8d:8e:bd:
a6:72:1c:89:2e:45:44:a7:87:e8:a1:07:db:bc:37:39:3f:8f:
50:b4:6c:d9:11:1a:d3:a1:b2:18:12:82:3d:11:41:5a:d5:e5:
ad:2f:d0:c3:ee:91:13:ab:57:28:ea:b5:d9:cc:46:b4:c8:c0:
35:b5:72:b3:72:bd:a7:b9:4e:b6:ac:99:37:13:58:89:7a:05:
b8:65:05:b1:14:81:a6:31:0d:65:1d:2f:ee:90:10:cb:18:44:
3f:41:9a:44:4c:d0:56:bf:8c:26:c6:d4:f1:34:76:e0:56:c2:
ba:1f:c3:9c:9a:db:60:e1:2b:d5:2c:e7:5b:80:d6:38:b8:6f:
75:d1:d3:1b:35:bb:4c:95:3d:12:9a:e3:26:05:cb:fd:6c:a1:
76:e6:1d:a0:71:36:66:db:c3:11:d4:77:57:e6:9c:f1:ef:76:
96:0c:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:01 2026 by rpki-client