Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7BiG0dnPAH1kC02Z_be-jdHeXFo.cer
File: 7BiG0dnPAH1kC02Z_be-jdHeXFo.cer (raw, json)
Hash identifier: VA+TzaIb7B2rzdc1SOETB4rtppRLTrvY76vVrZGxd14=
Subject key identifier: EC:18:86:D1:D9:CF:00:7D:64:0B:4D:99:FD:B7:BE:8D:D1:DE:5C:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E7DE81948B6ED8FC83BADF80984AB048
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/65288b-25b3-445f-bdf8-c48b629c0b1e/1/7BiG0dnPAH1kC02Z_be-jdHeXFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/65288b-25b3-445f-bdf8-c48b629c0b1e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 11:55:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214185
IP: 185.44.204.0/24
IP: 185.66.215.0/24
IP: 2a13:9900::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:de:81:94:8b:6e:d8:fc:83:ba:df:80:98:4a:b0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 11:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec1886d1d9cf007d640b4d99fdb7be8dd1de5c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:6b:d5:cd:fc:98:2a:d8:f9:81:4f:36:32:
5a:3a:61:29:fd:77:a2:fb:f7:41:c5:af:52:45:41:
5e:1f:ed:14:61:27:8d:68:25:a4:6c:03:3a:44:1a:
b4:e9:3b:24:16:e9:c9:ce:27:80:9b:b3:00:7b:2d:
28:b1:47:57:f7:29:61:01:8f:b5:dd:a8:04:f8:2c:
1a:b2:52:ec:54:52:89:dc:ba:c4:87:a1:a4:7d:91:
bd:03:fb:fe:9c:56:db:03:6b:f0:7e:9c:03:aa:df:
34:11:56:2f:66:85:7e:7e:07:b1:c8:34:1c:28:6a:
cf:e5:70:13:a2:0d:60:cb:f4:27:f4:41:78:b4:2b:
55:8d:f5:ef:55:02:77:ee:c8:78:f9:84:3e:df:98:
c0:43:a8:e8:96:76:29:b9:55:67:8b:06:b0:21:ac:
25:ac:34:77:89:4b:98:5a:ad:b7:85:87:95:97:77:
92:44:bb:bd:9b:db:19:f0:12:b9:23:02:de:a5:41:
1d:6c:f4:ba:e8:4d:bb:68:1d:1b:a9:a3:8b:5a:ab:
52:aa:95:50:a1:af:91:30:b0:a0:62:91:7b:3c:17:
81:10:8b:7f:cf:88:65:1e:c6:82:25:e7:7d:75:d3:
8e:4f:5d:2f:2f:42:e9:44:6d:74:80:96:cf:83:91:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:18:86:D1:D9:CF:00:7D:64:0B:4D:99:FD:B7:BE:8D:D1:DE:5C:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/65288b-25b3-445f-bdf8-c48b629c0b1e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/65288b-25b3-445f-bdf8-c48b629c0b1e/1/7BiG0dnPAH1kC02Z_be-jdHeXFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.204.0/24
185.66.215.0/24
IPv6:
2a13:9900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214185
Signature Algorithm: sha256WithRSAEncryption
9f:b7:d9:64:1f:ec:cc:21:41:c6:e9:89:23:40:17:eb:87:92:
d8:46:6b:ab:03:ab:cf:58:9b:1c:f3:9b:04:61:02:91:93:b2:
e7:8f:de:41:ef:db:6e:8d:ee:c3:7f:c2:3c:de:b1:bc:4f:86:
c6:2d:59:12:ad:b1:80:96:ee:64:37:a1:46:13:af:9e:77:43:
9f:0c:21:7b:ae:e9:6d:9e:c0:15:dc:a8:10:95:42:bd:e8:64:
dd:09:6f:ca:b8:19:d9:03:08:5d:05:20:5b:19:61:b5:1e:3d:
9f:6c:5e:0a:b7:91:1d:3f:75:85:c8:97:34:19:74:9e:d9:12:
56:be:16:ca:a7:72:42:fd:df:0b:de:ac:97:fb:29:55:1d:82:
cd:6b:7b:96:95:13:f9:ab:ae:51:94:b8:85:5f:da:e3:2c:89:
08:2f:60:43:15:52:22:af:75:41:e8:02:b4:f5:b7:eb:38:39:
79:46:0a:54:12:be:86:bd:de:83:c0:fc:e0:71:dc:f5:9a:8d:
d5:25:5f:aa:b7:ae:32:6e:99:fd:fb:ed:09:de:8e:c7:73:b7:
2e:d5:b8:ea:ea:e6:60:b0:29:40:99:db:7c:90:b8:9d:ce:7b:
8c:5b:b5:0c:d4:3e:84:37:5e:cf:51:9d:80:78:89:9e:69:17:
4e:05:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 16:53:43 2026 by rpki-client