Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Johw61I5fWl6kt5GjL4OjWmKKs.cer
File: 7Johw61I5fWl6kt5GjL4OjWmKKs.cer (raw, json)
Hash identifier: G03Hsh5z6mcPDlGxipCsWJMMzTaYoB99yQPjvrH9z+Q=
Subject key identifier: EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F8EAA02DFBF309F19B4C4C4408F510E06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Jul 2026 11:08:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.142.139.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:aa:02:df:bf:30:9f:19:b4:c4:c4:40:8f:51:0e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 11:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec9a21c3ad48e5f5a5ea4b791a32f83a35a628ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:80:7b:4c:84:f1:9d:2c:bf:a4:74:df:6c:
90:1d:65:c0:d7:d0:25:be:5a:be:26:13:d1:d0:84:
f4:43:8f:1f:96:4e:93:34:85:6b:8e:0e:bf:be:5b:
7b:72:43:04:42:7a:91:44:7b:38:1b:97:38:96:08:
a2:bc:10:1a:69:90:56:45:b7:88:d0:a6:fd:93:7e:
19:d8:fa:57:0f:48:e3:66:07:a3:47:ea:1e:e4:a3:
54:b6:0c:34:8f:f4:7f:5f:62:31:2c:21:b9:10:7b:
5c:77:d3:de:b4:f2:7e:94:47:23:3d:9e:ce:97:f2:
08:96:df:db:d3:68:ef:48:bb:2a:6c:60:5f:35:0e:
4b:13:b5:26:d3:d7:d6:39:ec:d0:7c:33:80:c4:26:
db:86:cf:10:75:67:cd:c6:fc:0e:0e:62:4f:1b:99:
35:4d:6a:2b:11:15:03:2b:3b:2f:44:42:d3:04:28:
83:a6:b2:bf:b1:23:c0:c8:0f:22:b7:08:e6:29:7a:
8b:ba:24:48:d1:cd:b1:01:36:ec:b1:96:00:52:ff:
7c:4c:82:e8:15:eb:bd:ef:dc:6b:3e:d8:c4:9a:3d:
31:82:ab:03:50:a1:ad:23:5f:bb:62:3e:4a:9f:a2:
74:42:bc:b3:66:60:67:84:d1:df:12:6a:54:ae:83:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:21:C3:AD:48:E5:F5:A5:EA:4B:79:1A:32:F8:3A:35:A6:28:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/334b12-b17c-4bf7-8199-a4563a21a378/1/7Johw61I5fWl6kt5GjL4OjWmKKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:00:19:2f:b2:ed:eb:1f:d7:3c:96:30:c3:a6:34:5b:41:d6:
c5:c1:ce:10:b1:0e:d6:35:68:c8:0c:c6:ab:a2:91:36:15:c7:
77:0e:5e:da:14:88:ef:27:00:1c:35:cd:b5:81:7a:84:92:9d:
19:ed:c0:22:60:fd:bf:10:a6:c8:cb:f6:02:d9:00:a0:12:d6:
18:0e:b4:a6:3f:84:51:a2:de:4d:6f:aa:42:89:7d:25:63:15:
50:8e:22:45:67:f6:fe:60:19:43:36:b9:5c:24:af:c6:ce:72:
bc:c6:71:86:4b:b9:65:45:b3:e7:3c:21:d3:e1:92:77:45:38:
3a:32:8c:7d:79:5b:33:de:e6:eb:53:f1:0c:88:4a:a6:0d:b2:
d1:50:06:2f:8e:ec:e1:80:ff:d8:47:d3:71:ac:df:02:64:4a:
4c:dd:ae:ff:f7:14:92:04:31:a7:d8:9b:a9:47:7d:da:17:92:
0b:c0:88:0e:bf:8d:71:9b:33:dd:cb:51:52:29:df:17:f7:3c:
7f:0f:0b:05:88:45:6c:79:f1:0c:70:79:c9:40:62:df:57:20:
34:f7:70:5a:c8:a9:77:25:d4:1a:29:71:1b:02:ee:c6:3a:42:
ac:a7:1f:01:82:8f:18:8f:ca:d6:0d:cc:c8:40:44:97:fb:6c:
48:c4:e3:82
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ+OqgLfvzCfGbTExECPUQ4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNzIzMTEwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzlhMjFjM2FkNDhlNWY1YTVlYTRiNzkxYTMyZjgzYTM1YTYyOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xCAe0yE8Z0sv6R032yQHWXA19Al
vlq+JhPR0IT0Q48flk6TNIVrjg6/vlt7ckMEQnqRRHs4G5c4lgiivBAaaZBWRbeI
0Kb9k34Z2PpXD0jjZgejR+oe5KNUtgw0j/R/X2IxLCG5EHtcd9PetPJ+lEcjPZ7O
l/IIlt/b02jvSLsqbGBfNQ5LE7Um09fWOezQfDOAxCbbhs8QdWfNxvwODmJPG5k1
TWorERUDKzsvRELTBCiDprK/sSPAyA8itwjmKXqLuiRI0c2xATbssZYAUv98TILo
Feu979xrPtjEmj0xgqsDUKGtI1+7Yj5Kn6J0QryzZmBnhNHfEmpUroOJywIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOyaIcOtSOX1pepLeRoy+Do1piirMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzMzNGIx
Mi1iMTdjLTRiZjctODE5OS1hNDU2M2EyMWEzNzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMzM0YjEy
LWIxN2MtNGJmNy04MTk5LWE0NTYzYTIxYTM3OC8xLzdKb2h3NjFJNWZXbDZrdDVH
akw0T2pXbUtLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW46LMA0GCSqGSIb3DQEBCwUAA4IBAQBPABkv
su3rH9c8ljDDpjRbQdbFwc4QsQ7WNWjIDMaropE2Fcd3Dl7aFIjvJwAcNc21gXqE
kp0Z7cAiYP2/EKbIy/YC2QCgEtYYDrSmP4RRot5Nb6pCiX0lYxVQjiJFZ/b+YBlD
NrlcJK/GznK8xnGGS7llRbPnPCHT4ZJ3RTg6Mox9eVsz3ubrU/EMiEqmDbLRUAYv
juzhgP/YR9NxrN8CZEpM3a7/9xSSBDGn2JupR33aF5ILwIgOv41xmzPdy1FSKd8X
9zx/DwsFiEVsefEMcHnJQGLfVyA093BayKl3JdQaKXEbAu7GOkKspx8Bgo8Yj8rW
DczIQESX+2xIxOOC
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:03 2026 by rpki-client