Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
File: 7SGj8xKknz6djGxEyd4TOp7Yd-o.cer (raw, json)
Hash identifier: wvbUEtGWABk3QLPlOt3vG5mguazDTGG6j1bB7nvhB6Y=
Subject key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EAC57BA8D47E8583D62DAD81768682
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203860
IP: 158.94.174.0/24
IP: 2001:67c:a0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:c5:7b:a8:d4:7e:85:83:d6:2d:ad:81:76:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:b6:92:63:37:8f:b3:03:ee:93:43:26:a1:
4e:11:3c:84:ec:41:c0:53:8d:b1:86:d6:4a:50:b6:
83:75:e3:f1:bb:95:14:73:f8:15:9a:17:f0:67:64:
ae:39:9e:4e:f2:76:19:64:cf:de:64:a4:0e:78:c1:
97:95:12:14:54:b5:b9:eb:43:c1:95:db:46:0c:ba:
87:1f:07:02:52:ae:ce:fe:7f:74:0b:59:44:80:30:
88:f8:d0:89:92:cd:0b:04:2a:96:b1:47:1d:c7:9a:
72:6f:76:94:9e:9e:97:0e:03:d8:d6:cf:a9:36:3f:
38:c2:6e:33:b4:89:0f:b3:2b:66:c8:50:2a:8a:48:
b1:d2:13:b1:7c:54:b5:30:39:f2:e8:da:5e:75:b1:
86:5d:cd:df:31:92:ce:09:17:7b:64:db:c9:c2:65:
a9:0f:94:4a:e8:21:65:be:1f:98:e2:b5:2f:ed:39:
a3:89:f6:96:34:91:13:2d:5b:8d:44:cc:c9:aa:62:
05:6b:dc:e4:fa:c0:47:af:2f:31:91:83:6f:65:74:
0d:3f:9f:37:fd:9b:9c:b7:77:3c:16:be:97:ed:e3:
b8:66:27:b2:05:c0:ae:fa:7e:87:29:4a:12:5c:97:
cf:78:21:e2:ac:95:e4:dd:a6:de:44:b4:17:7d:ac:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.174.0/24
IPv6:
2001:67c:a0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203860
Signature Algorithm: sha256WithRSAEncryption
1a:18:c3:ad:10:19:54:0a:07:7e:77:7f:0f:f1:0d:ba:4d:a1:
95:27:1c:d6:4a:38:a7:0c:e2:7e:73:b8:c1:98:52:b9:b7:1b:
93:10:9b:9a:3a:83:92:3e:0d:7c:bb:18:63:dd:48:d3:fe:d9:
ee:31:fb:1d:3b:b3:61:2d:e1:08:8b:76:61:00:2b:07:a9:93:
f2:ac:d5:cb:91:84:cd:c5:04:77:69:39:82:9e:5f:81:e5:0d:
a0:ca:a1:ef:e2:f2:a6:d0:59:21:9f:d5:56:42:44:19:fa:76:
58:97:cf:d8:8b:b2:e9:31:b1:0e:01:9d:4a:77:df:cc:62:11:
72:22:65:60:72:c1:cf:df:fe:b2:df:15:65:32:9a:d3:1d:54:
f4:07:1a:c3:92:b1:d3:15:0d:9d:cf:83:44:cd:b4:f9:54:ae:
c9:ba:56:54:b3:71:cb:b5:be:fd:bb:be:de:e7:79:7b:75:43:
1b:cc:10:b8:2f:e0:cb:c4:9f:0f:21:45:f8:5a:31:f4:d7:05:
eb:c7:c8:c6:4d:d2:93:99:bb:96:ac:82:e3:18:53:27:de:f9:
5e:01:84:2d:42:1c:ad:98:84:f7:36:cf:db:e8:3f:bd:0b:27:
34:33:44:0b:25:1b:23:82:b6:48:98:15:51:13:91:77:8a:64:
22:c2:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:14 2026 by rpki-client