Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
File: oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer (raw, json)
Hash identifier: 1N/HBf9pDg8DLEyWoO5XD6traJsDWK6EgST/9P86FxQ=
Subject key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DDDABC5D8BE85518677CBB4499AE1A343
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 30 Apr 2026 09:15:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213279
IP: 194.62.114.0/24
IP: 2a14:b400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:ab:c5:d8:be:85:51:86:77:cb:b4:49:9a:e1:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 09:15:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:f6:bb:0e:75:2d:60:35:50:9c:75:98:61:
09:c2:74:c4:8a:ad:7c:d2:e6:36:6b:3e:4d:af:57:
d4:dc:95:2a:bf:da:27:92:e6:5b:54:df:2b:20:7c:
38:bb:04:9d:c8:06:75:ed:28:34:3f:44:a4:7e:94:
14:37:19:25:99:14:65:43:e3:15:13:97:dd:16:fe:
4f:eb:3b:a0:a9:c4:03:fc:d9:42:c9:b0:5f:e6:d3:
44:d5:73:64:51:60:da:e8:e4:38:a0:72:42:66:5a:
26:81:f0:cd:ac:ec:7f:5f:60:8c:4c:91:69:99:56:
2c:d9:a4:4a:73:d8:3a:8e:5a:63:e8:83:4f:cc:be:
01:32:3f:db:13:1a:1e:97:b8:df:42:e2:f8:c7:9a:
67:ab:21:39:2a:9f:e6:ec:a1:a9:58:6b:cc:62:29:
5b:bc:28:f4:46:ab:5b:4e:2a:39:67:4b:e4:25:56:
a3:e9:9d:c3:f5:54:d9:19:a4:c8:73:4e:12:c8:0f:
02:9a:f9:dc:23:53:6b:e4:99:17:be:a0:58:8a:8a:
b7:25:88:38:18:ae:80:f4:56:a2:20:5a:00:a9:5a:
a3:e8:fe:b4:55:43:91:a9:64:08:30:c8:09:0f:c0:
83:9b:f2:60:b7:22:69:b0:d8:ce:af:36:de:26:cc:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.114.0/24
IPv6:
2a14:b400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213279
Signature Algorithm: sha256WithRSAEncryption
1d:5a:ed:96:84:37:e9:78:ab:b3:82:6e:ad:e8:e3:52:da:f3:
79:17:7a:42:1d:96:b8:40:ee:37:cd:06:b3:a2:9b:c8:37:a2:
1d:11:68:fc:33:21:37:e6:3b:12:f4:af:60:72:d1:28:af:fd:
c3:f9:4f:54:d4:05:b2:bf:6e:bc:e8:d3:f7:18:ec:9d:8d:0b:
58:37:8a:f3:14:6c:c0:27:7c:d5:e2:92:5e:5a:09:c5:04:f9:
41:70:cd:52:8c:87:79:eb:73:05:14:9c:53:f7:d7:f2:38:d7:
de:3e:40:7a:aa:38:da:15:ec:04:dd:4a:12:b0:64:28:c2:8d:
cb:8d:a0:9d:17:d5:88:06:e6:a0:45:47:a6:06:e7:b7:1b:ca:
17:48:b9:6f:6e:ba:eb:82:43:7a:fb:21:4e:d6:91:b7:90:8b:
81:73:0a:a3:5b:b3:b5:ce:6a:d0:f2:d1:ac:6b:be:7f:20:b3:
67:91:b4:45:ae:e1:3b:88:a4:a1:c2:b5:3c:5e:bc:c2:cc:0a:
d2:e4:fb:f9:23:50:ef:ec:3a:13:d3:43:c5:dd:67:f0:b6:98:
2d:95:de:92:a8:e8:ee:aa:2e:18:7e:25:05:74:1d:7b:9d:da:
8d:e6:cd:11:a6:19:f6:e4:cc:90:43:f8:3b:4b:b1:25:76:af:
4a:1d:5f:40
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAZ3dq8XYvoVRhnfLtEma4aNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDMwMDkxNTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWU0ZGU2OTVkODQ2YzBlNTg2NGU0Yzg2NWQ5YmQ1ZTgwZTVmNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshj2uw51LWA1UJx1mGEJwnTEiq18
0uY2az5Nr1fU3JUqv9onkuZbVN8rIHw4uwSdyAZ17Sg0P0SkfpQUNxklmRRlQ+MV
E5fdFv5P6zugqcQD/NlCybBf5tNE1XNkUWDa6OQ4oHJCZlomgfDNrOx/X2CMTJFp
mVYs2aRKc9g6jlpj6INPzL4BMj/bExoel7jfQuL4x5pnqyE5Kp/m7KGpWGvMYilb
vCj0RqtbTio5Z0vkJVaj6Z3D9VTZGaTIc04SyA8CmvncI1Nr5JkXvqBYioq3JYg4
GK6A9FaiIFoAqVqj6P60VUORqWQIMMgJD8CDm/JgtyJpsNjOrzbeJsyW/QIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFKHk3mldhGwOWGTkyGXZvV6A5faUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M1ZGY3
YmJhLTZkOGMtNDllOS1iYmUzLWM1MjVmNTNkNDIwNi8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVk
ZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0MjA2LzEvQTFFNERFNjk1RDg0
NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME
AMI+cjANBAIAAjAHAwUDKhS0ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDQR8w
DQYJKoZIhvcNAQELBQADggEBAB1a7ZaEN+l4q7OCbq3o41La83kXekIdlrhA7jfN
BrOim8g3oh0RaPwzITfmOxL0r2By0Siv/cP5T1TUBbK/brzo0/cY7J2NC1g3ivMU
bMAnfNXikl5aCcUE+UFwzVKMh3nrcwUUnFP31/I4194+QHqqONoV7ATdShKwZCjC
jcuNoJ0X1YgG5qBFR6YG57cbyhdIuW9uuuuCQ3r7IU7WkbeQi4FzCqNbs7XOatDy
0axrvn8gs2eRtEWu4TuIpKHCtTxevMLMCtLk+/kjUO/sOhPTQ8XdZ/C2mC2V3pKo
6O6qLhh+JQV0HXud2o3mzRGmGfbkzJBD+DtLsSV2r0odX0A=
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:39:29 2026 by rpki-client