Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obUnWAWCwH8MZ29bQj57p9A0mvM.cer
File: obUnWAWCwH8MZ29bQj57p9A0mvM.cer (raw, json)
Hash identifier: HH/92jWRq5yc1ZmHl0ehj8qF0DzyABtDl0DnlMn5cKM=
Subject key identifier: A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CD716A0AEB8F9AF651EE08ADAA97ED146
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 09:31:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 134.94.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:16:a0:ae:b8:f9:af:65:1e:e0:8a:da:a9:7e:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 10 09:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1b527580582c07f0c676f5b423e7ba7d0349af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b4:b1:d0:cc:25:5a:50:e3:ac:48:39:af:74:
96:ae:4b:29:94:a3:44:bf:fc:e4:8f:b4:00:8d:0f:
d7:2c:58:4f:bb:a1:be:35:ad:3e:da:66:23:f1:33:
57:85:d6:ff:f6:98:14:66:53:25:f9:d0:f4:39:fd:
54:c9:e2:a8:b2:6e:05:18:dd:23:50:ec:d4:00:fb:
ab:a6:c3:f3:bb:1f:a3:10:da:a4:6a:f1:5e:d3:e2:
11:57:ec:6a:cd:1e:4f:46:1f:04:ce:fd:df:b0:6c:
5e:a6:27:6a:44:b4:6f:c9:07:3a:ea:31:fb:4c:33:
a8:bc:7a:7e:ef:5b:3d:a7:73:cb:70:cb:79:35:bc:
88:77:fc:d4:33:c5:42:cc:47:66:55:22:d8:e4:df:
4a:3f:9c:92:cd:05:7b:c9:b1:40:79:3f:2e:f5:fa:
a6:48:fa:dc:1d:ba:fa:57:a6:6c:db:c2:d1:cf:ca:
26:8b:b5:d4:2f:65:ed:39:7a:af:c0:e6:57:1a:2c:
df:59:60:a0:2f:91:7b:98:89:4b:71:e1:e6:99:96:
61:2b:f8:00:fa:04:10:cd:c2:29:27:a0:95:99:7a:
6b:ac:c9:f7:3a:99:76:c3:8b:cc:44:82:42:a1:63:
ab:3d:8e:a9:87:36:ee:8a:d3:69:fb:8d:6a:70:47:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:27:58:05:82:C0:7F:0C:67:6F:5B:42:3E:7B:A7:D0:34:9A:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/obUnWAWCwH8MZ29bQj57p9A0mvM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:82:ae:27:83:31:00:13:04:0e:00:90:d7:3a:d9:34:81:f9:
74:af:44:18:e9:11:5b:f2:49:10:28:3e:c2:62:3d:3a:25:8b:
59:8c:31:a3:5b:3a:d6:ec:9c:74:18:24:76:22:eb:f6:7d:87:
78:16:70:71:3b:8a:07:5c:72:94:ed:47:34:86:d6:d2:f5:7a:
0c:ed:37:60:92:46:ff:89:40:ea:4c:58:3b:8a:db:45:4c:67:
a9:d6:c3:db:f3:c8:36:a0:f4:a9:18:79:d8:d0:23:96:19:6e:
7b:23:b5:cb:14:c2:ba:49:e8:3e:76:aa:ea:ad:73:2e:97:e1:
0d:fd:e6:76:19:ea:cb:70:e7:df:47:51:33:96:cd:29:cd:d1:
e8:87:f6:d8:04:f8:0f:da:56:51:fd:2c:13:f3:c2:2a:b8:a3:
84:1e:18:ed:cd:8b:d7:71:ee:34:48:bb:11:95:90:2d:65:dd:
9c:ff:8b:07:08:55:4f:a2:0a:65:98:36:26:9a:fd:a0:82:77:
34:d7:85:33:07:1b:f3:39:bc:05:91:03:d9:f7:7d:cc:58:09:
38:9b:ff:19:38:2e:1b:a4:4b:26:dd:4e:cc:35:3b:a0:82:ce:
10:89:8d:64:36:c2:31:b7:6a:6c:53:7f:20:84:ef:7f:ee:9c:
3d:1d:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:59:15 2026 by rpki-client