Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
File: oktI7cejJdfxrg8lfA4oNRcbya4.cer (raw, json)
Hash identifier: /QUOIZBqObEQnMzlRyOZI+GGZ8QeJcon/eOLtWC6D9w=
Subject key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FF4BAFFEE974A2F7A26B99AC4E12C9045
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Aug 2026 06:48:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39704
AS: 218980
IP: 5.22.248.0/21
IP: 46.182.216.0/21
IP: 91.192.36.0/22
IP: 94.124.88.0/21
IP: 185.1.190.0/24
IP: 185.94.168.0/22
IP: 185.103.16.0/22
IP: 194.50.163.0/24
IP: 195.216.246.0/24
IP: 213.132.192.0/19
IP: 2001:7f8:104::/48
IP: 2a00:1bd0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:ba:ff:ee:97:4a:2f:7a:26:b9:9a:c4:e1:2c:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 06:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:68:e9:f4:01:3f:d0:fd:91:48:ea:44:cf:
26:c5:bd:95:5b:ba:e5:82:e0:14:39:9f:5c:e2:f1:
a6:ba:42:c0:bd:4e:9d:c4:af:b4:b7:9a:ae:e4:4f:
03:59:b8:64:83:b6:79:43:09:fc:1c:85:4b:3a:9b:
4a:61:d0:ce:14:ad:52:6d:1e:6d:a2:6e:65:79:38:
0f:5d:db:98:d7:1a:19:1f:3a:23:29:72:a5:25:36:
75:60:42:ff:6d:71:ce:26:fe:eb:6f:c5:45:49:91:
48:b8:76:e9:cb:df:c7:f1:25:df:68:fa:3f:17:61:
74:1a:a9:b9:d1:19:46:93:90:97:c2:db:63:c2:5f:
8c:b0:1d:19:0c:bb:b9:37:7b:89:c4:ae:4f:3f:30:
d5:13:40:bc:25:e9:a8:26:89:17:e0:e5:d1:7a:b7:
b8:55:e3:a2:6b:b3:e6:bc:ef:cf:c9:eb:83:f1:2f:
2b:fe:65:8c:cc:a0:2c:48:ce:18:13:e9:52:af:8a:
ad:29:6c:73:18:90:45:29:41:e7:67:f6:74:1f:fb:
27:f1:cf:ab:7f:3f:06:71:4a:a5:31:97:a9:b6:05:
29:67:98:8b:2b:5b:e4:0e:96:54:f7:f7:8e:fb:7a:
4c:7b:68:87:fc:0e:ed:cf:46:86:57:b9:8e:da:c0:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.1.190.0/24
185.94.168.0/22
185.103.16.0/22
194.50.163.0/24
195.216.246.0/24
213.132.192.0/19
IPv6:
2001:7f8:104::/48
2a00:1bd0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39704
218980
Signature Algorithm: sha256WithRSAEncryption
92:83:28:c3:89:97:e4:bb:d5:ba:db:b6:39:eb:8a:ac:47:9c:
15:af:14:67:ac:d9:73:79:aa:d6:7c:16:7d:47:ed:f0:96:63:
86:89:55:2a:e2:26:1f:e2:15:65:f4:07:17:0a:dd:b7:76:8d:
05:5d:71:fe:14:70:5f:7b:b4:7c:f9:53:d5:10:da:8e:38:ad:
69:3f:28:b5:06:ee:bb:8f:f6:01:0b:47:64:0a:c4:3d:2c:77:
a6:7f:42:eb:0a:a5:59:22:a9:fe:e5:8a:8b:c3:9d:1d:68:29:
7b:0a:00:02:04:69:9f:30:b9:b8:19:76:1a:30:9b:bc:32:eb:
24:ed:01:3c:58:c7:84:e3:c2:7f:cb:45:f4:38:87:b0:b3:78:
a8:0b:d4:3e:6b:e8:a6:20:38:0c:46:5b:2f:36:b2:fc:6d:1e:
26:03:96:41:7b:dc:19:c5:56:5b:d8:ab:3d:a7:17:65:a2:4f:
7d:98:4b:37:09:f2:3a:33:ab:ec:53:90:48:73:4d:7d:1b:de:
97:f6:72:0c:5d:6c:df:a0:f9:b5:35:19:e1:47:45:0c:49:c9:
00:50:ae:a8:41:4b:63:e5:e9:36:10:7a:c4:00:de:7a:7c:42:
53:39:48:31:51:92:43:47:c9:82:5c:3c:22:b9:63:bf:ea:a0:
f1:81:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:54:26 2026 by rpki-client