Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
File: obkUGttOyjUXWjwq291dU5h1PUw.cer (raw, json)
Hash identifier: aFgHaBTeoEff7B695bLHdQN/tIHOKkApUtqGipfehM4=
Subject key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9844A72BFB7FF85FE81CFF70CFA60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214213
IP: 185.38.173.0/24
IP: 2001:35c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:84:4a:72:bf:b7:ff:85:fe:81:cf:f7:0c:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:2b:42:37:d0:83:90:70:88:76:ef:a8:bd:
ac:26:e9:82:04:d6:1e:15:ff:d3:88:17:40:da:13:
e2:ea:8a:9e:32:ce:2c:74:89:b0:2c:b0:be:7e:27:
66:a5:1f:82:32:e6:17:82:fb:b0:e6:01:8b:2b:55:
e6:85:ca:6a:1a:60:50:96:8f:7a:9b:e2:59:4a:dc:
f7:31:1f:d5:71:67:58:b1:ce:cc:c4:21:54:4b:0c:
b5:33:4c:f7:ae:71:a4:d7:d4:43:0b:87:d5:ec:d4:
8b:e1:a2:4f:87:b1:66:7d:c4:39:49:73:e3:41:62:
ca:26:9d:87:59:b8:9d:d8:5f:7d:40:1e:67:85:43:
4e:24:76:c9:35:33:46:ff:a5:7c:fa:52:02:7b:79:
4c:93:3f:0c:be:40:12:d7:5d:34:7e:e5:81:a1:8e:
18:aa:4a:26:2e:c9:b0:9f:15:f7:0b:91:39:33:4f:
7f:7d:a5:53:45:99:47:c3:3b:96:87:d4:58:2a:4e:
14:3b:c1:a3:41:0a:6f:9f:57:eb:82:b9:90:df:93:
ff:4e:7b:1e:7e:35:ae:00:d0:97:49:a0:7c:01:41:
3a:c0:39:7d:aa:c6:48:6f:4e:ae:6d:28:30:e7:4a:
08:38:61:5b:41:44:44:cf:c6:10:e8:bf:43:1d:36:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.173.0/24
IPv6:
2001:35c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214213
Signature Algorithm: sha256WithRSAEncryption
36:3a:27:7f:49:ad:07:03:13:28:a5:a3:3f:a7:6a:e5:ff:f7:
b1:7d:da:f9:4a:58:75:7d:1a:6f:6d:52:d2:4b:61:43:a5:33:
ba:9b:ff:1c:cd:e5:dc:86:54:ee:0b:01:7a:15:63:fc:aa:46:
0d:f6:cf:31:ca:ef:8a:4e:6e:9c:5a:ea:ed:5b:9b:9e:16:f8:
1d:81:20:c7:7b:97:52:a1:a3:e4:37:b6:0c:35:4f:b2:b3:32:
61:e1:68:eb:6a:ba:66:e5:4a:fe:37:17:3f:a7:dd:91:1b:3a:
ba:02:14:2e:cd:ac:db:aa:16:a1:9b:0a:dc:f5:db:c9:3a:5d:
45:a3:d5:49:bb:35:b1:70:3b:4b:d9:15:9e:ca:18:54:a6:3b:
0a:d4:47:51:66:78:ff:61:4a:5a:a4:05:c5:ba:49:4b:d9:94:
9e:1a:b5:49:9f:a8:d7:b4:17:29:94:58:4b:7d:21:aa:39:fd:
34:4c:b7:ff:b5:46:4b:1c:a8:88:55:25:06:7d:73:79:0a:65:
35:19:73:17:a6:e8:e2:39:93:ba:b4:0e:c8:71:98:0f:94:2b:
11:52:b2:75:d1:4c:bc:60:e0:9a:50:8d:f8:2a:25:8c:3d:e1:
c1:08:95:c2:be:67:00:fa:4e:bb:ad:65:7f:1a:19:8b:6c:86:
66:60:ab:55
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZ8Y+YRKcr+3/4X+gc/3DPpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWI5MTQxYWRiNGVjYTM1MTc1YTNjMmFkYmRkNWQ1Mzk4NzUzZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt54rQjfQg5BwiHbvqL2sJumCBNYe
Ff/TiBdA2hPi6oqeMs4sdImwLLC+fidmpR+CMuYXgvuw5gGLK1XmhcpqGmBQlo96
m+JZStz3MR/VcWdYsc7MxCFUSwy1M0z3rnGk19RDC4fV7NSL4aJPh7FmfcQ5SXPj
QWLKJp2HWbid2F99QB5nhUNOJHbJNTNG/6V8+lICe3lMkz8MvkAS1100fuWBoY4Y
qkomLsmwnxX3C5E5M09/faVTRZlHwzuWh9RYKk4UO8GjQQpvn1frgrmQ35P/Tnse
fjWuANCXSaB8AUE6wDl9qsZIb06ubSgw50oIOGFbQUREz8YQ6L9DHTZJvQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKG5FBrbTso1F1o8KtvdXVOYdT1MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzMzOTAw
Yy1lNmNlLTQ0NGUtYmM5Ni0zYjMzOWQwODFmODMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMzM5MDBj
LWU2Y2UtNDQ0ZS1iYzk2LTNiMzM5ZDA4MWY4My8xL29ia1VHdHRPeWpVWFdqd3Ey
OTFkVTVoMVBVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuSatMA0EAgACMAcDBQMgATXAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNExTANBgkqhkiG9w0BAQsFAAOCAQEANjonf0mtBwMT
KKWjP6dq5f/3sX3a+UpYdX0ab21S0kthQ6Uzupv/HM3l3IZU7gsBehVj/KpGDfbP
Mcrvik5unFrq7Vubnhb4HYEgx3uXUqGj5De2DDVPsrMyYeFo62q6ZuVK/jcXP6fd
kRs6ugIULs2s26oWoZsK3PXbyTpdRaPVSbs1sXA7S9kVnsoYVKY7CtRHUWZ4/2FK
WqQFxbpJS9mUnhq1SZ+o17QXKZRYS30hqjn9NEy3/7VGSxyoiFUlBn1zeQplNRlz
F6bo4jmTurQOyHGYD5QrEVKyddFMvGDgmlCN+ColjD3hwQiVwr5nAPpOu61lfxoZ
i2yGZmCrVQ==
-----END CERTIFICATE-----
Generated at Thu Jul 16 06:30:02 2026 by rpki-client