Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
File: olrSzhcYk-YHpyuunQVE_AHTCao.cer (raw, json)
Hash identifier: 7UJL1ibDz1jJbNOZKfOrzU/s74c3zAX62iXfYQE4s4k=
Subject key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0F6DB86C5CBD3E1ED353AC2B511A1D9A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Oct 2026 09:46:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199813
IP: 164.37.62.0/24
IP: 195.60.85.192/26
IP: 2001:67c:9a0::/48
IP: 2001:7f8:170::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:db:86:c5:cb:d3:e1:ed:35:3a:c2:b5:11:a1:d9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 1 09:46:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:28:28:01:95:f3:57:96:7b:33:e1:ed:d0:
64:61:f7:4c:89:50:00:b2:1f:9f:5f:53:4a:bd:32:
7c:f2:72:7e:3f:d6:d2:b9:3e:78:c7:c1:b6:33:a9:
4e:11:f9:c9:92:24:ec:5f:59:29:d2:94:60:a9:11:
ef:92:46:39:46:24:b7:6a:05:06:09:69:7d:5b:31:
76:a5:a1:59:a5:7a:0f:42:ed:28:77:12:f7:5c:65:
9c:9b:da:6f:e3:ed:b1:bc:21:c0:09:b7:0f:e5:03:
02:9d:c9:16:12:ff:26:80:73:d8:fe:70:54:94:2d:
78:5d:23:4e:07:87:36:94:3b:43:50:9b:c8:4d:c3:
81:00:18:ec:e0:85:86:60:bc:55:b8:c8:e8:48:0d:
0f:8d:5a:48:41:70:67:b9:cf:6d:3e:a3:88:48:ad:
f9:90:c3:c4:35:3c:bf:b1:3e:85:e1:85:0e:0d:34:
7f:b2:f2:84:7b:af:be:e5:a1:55:7c:ac:45:ef:d0:
1c:b5:7d:bc:2a:11:c6:50:32:42:fe:85:88:3e:59:
39:f2:b8:46:ad:e6:a4:c4:b5:ca:54:6f:86:e5:0e:
c1:46:93:4c:3b:a6:b0:bf:f2:8f:3a:e6:a9:15:53:
b4:f2:2d:07:9d:a4:33:98:8f:5e:8f:6f:7e:32:c5:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.62.0/24
195.60.85.192/26
IPv6:
2001:67c:9a0::/48
2001:7f8:170::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199813
Signature Algorithm: sha256WithRSAEncryption
a5:3a:fa:c9:13:dd:b3:60:e3:17:bb:fa:82:c5:72:43:96:6d:
27:b4:c6:9e:19:38:85:b1:7c:66:62:b1:4a:94:fb:86:cc:04:
39:40:16:c1:9d:4f:5c:e6:8a:e5:84:1a:45:66:11:74:79:15:
6a:7d:c2:30:3a:8b:fb:af:c3:d2:cb:7b:95:f3:18:51:a2:82:
25:94:33:d0:d7:70:43:38:79:74:99:17:86:ba:88:54:c9:46:
68:df:ea:77:a3:4f:22:e2:12:a4:9e:8f:8d:f7:8b:fe:86:44:
ad:9d:6b:22:42:37:24:9b:b9:d9:87:d4:30:7b:df:6e:41:14:
99:48:5b:56:3f:6a:f3:5e:00:0c:a2:dc:93:e1:69:4a:63:f7:
e9:38:8f:3c:e4:c7:56:4c:b8:9e:23:27:6b:e6:c3:9e:ce:91:
33:c1:95:a5:c9:66:27:7c:b3:b6:cc:08:da:e4:06:48:29:54:
04:fa:bf:65:89:80:36:1a:03:a8:1a:8f:61:23:89:82:3d:dc:
b6:54:67:50:29:bb:c6:91:c6:3a:ef:a2:fc:ab:28:7f:8e:da:
e5:f1:cd:a1:82:db:c3:71:a5:2f:7b:3f:7f:0d:be:18:9d:25:
ff:46:87:4a:e0:2e:bc:e2:34:84:6e:a5:d1:14:e0:55:3e:76:
65:8a:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:53:45 2026 by rpki-client