Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
File: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer (raw, json)
Hash identifier: F9XMfdjFhf6pNeOGiS24h69MAXe7WKd4QBoBigYreio=
Subject key identifier: EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DBAB80F4EE270EBA6C60C3662F55ECF7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Apr 2026 14:21:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29130
IP: 195.47.248.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:b8:0f:4e:e2:70:eb:a6:c6:0c:36:62:f5:5e:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 14:21:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:97:e5:ed:14:43:7d:de:fd:f0:e9:00:91:46:
3d:20:01:e1:05:07:08:de:55:28:3b:9f:df:71:7b:
74:db:12:2f:2b:c0:28:9b:b6:2a:10:ce:ac:bf:85:
0d:03:28:97:1e:b7:65:a0:8f:89:d1:a2:36:82:e7:
3d:b3:54:36:ed:4b:e7:cd:c3:00:fe:e7:46:ee:3e:
b1:ff:e5:05:45:6b:b2:0d:0a:ef:c7:d6:08:44:51:
18:c8:63:dd:ec:5d:5a:63:80:fd:a1:1c:c3:1f:0e:
7f:42:07:a7:9e:98:60:36:29:db:da:05:eb:4b:87:
df:6f:6e:26:07:a2:e8:2c:59:40:7c:ab:53:6c:58:
d4:40:72:93:26:ed:b6:2f:72:49:ba:2e:89:0e:12:
0e:96:24:f5:d5:ef:b5:07:ed:3f:61:79:70:7c:5b:
86:3b:43:05:2b:59:08:bb:0d:40:37:3f:bb:11:f8:
4c:c7:ba:21:77:63:0f:27:8c:43:1d:70:6e:50:95:
21:8a:95:f3:3a:e3:71:fe:f1:a2:e0:68:18:a5:70:
4b:87:9a:99:6d:67:ad:09:60:92:ea:54:49:94:74:
9f:ac:57:b9:aa:9f:a2:24:1e:80:9b:80:a9:14:25:
a9:fa:c7:a5:93:29:34:b1:e5:88:6c:0a:a9:26:f1:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.248.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29130
Signature Algorithm: sha256WithRSAEncryption
0c:de:63:7f:09:10:17:07:52:04:15:23:8d:85:ac:78:53:de:
eb:f1:92:b7:ef:06:00:40:a2:3c:59:ea:cf:5a:86:ef:b1:c9:
0a:92:d4:4e:f0:a2:13:23:e5:c6:f3:36:14:7c:53:8b:fc:d1:
ed:bf:c7:9a:0d:e2:ae:2f:a3:e3:d3:74:d8:2c:48:6a:d8:f5:
73:64:83:a6:f6:6f:aa:65:b6:12:87:ed:ce:61:b4:f2:a9:51:
d0:cf:b6:18:73:64:13:b0:69:de:d6:4f:8b:47:b2:68:85:7f:
4a:e1:05:06:12:e4:d0:86:3a:4d:3b:f5:58:8b:95:ec:51:97:
94:cf:e2:ca:97:45:94:be:c8:e2:b5:f7:ee:da:80:3d:28:c8:
d2:51:26:2a:18:4f:62:02:5c:43:e0:1a:b9:65:1b:b5:50:cc:
d9:44:4e:0d:1b:8d:a3:fc:62:73:61:b8:a2:1e:d6:1a:40:73:
71:06:69:6d:7c:cf:be:f9:71:51:ab:66:dd:7f:fc:21:38:14:
4b:35:02:a2:b0:02:32:2b:36:69:cc:40:68:03:0b:b4:61:f7:
78:9e:0e:fa:15:f9:be:0c:a8:03:e3:d6:5c:74:3e:3e:8f:6a:
02:c0:72:b7:a7:5e:26:be:4f:d5:06:35:17:ba:3b:0f:e9:47:
14:cb:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:58 2026 by rpki-client