Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7V3cjbVxIL8YxKhF9l_C7WDmrbo.cer
File: 7V3cjbVxIL8YxKhF9l_C7WDmrbo.cer (raw, json)
Hash identifier: qYoZE9F4FLtP7BUTrBhMD+0WAZ+KPcYVKfBI+5u4VbE=
Subject key identifier: ED:5D:DC:8D:B5:71:20:BF:18:C4:A8:45:F6:5F:C2:ED:60:E6:AD:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FADF22DF11D52B451CB78BD263D675
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/7V3cjbVxIL8YxKhF9l_C7WDmrbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48930
IP: 195.88.98.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:df:22:df:11:d5:2b:45:1c:b7:8b:d2:63:d6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed5ddc8db57120bf18c4a845f65fc2ed60e6adba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:8c:df:ac:26:03:38:e9:f1:01:86:d4:74:
06:60:2b:d1:34:97:c8:b5:a6:05:a6:75:59:63:90:
30:96:a4:05:38:d1:53:ec:ec:84:f6:8e:28:ec:bc:
69:5d:c1:30:09:84:63:de:51:54:5c:b9:1b:54:d4:
56:3f:dc:24:e2:a8:63:aa:b4:fc:68:b7:8b:7a:5f:
d9:f3:0b:ca:24:f5:f4:f8:76:b4:62:67:e4:7b:6b:
c1:58:4a:4d:03:a9:55:2d:ff:f9:10:c8:d2:13:ec:
b6:87:23:92:45:06:39:66:0a:d2:10:31:69:4e:66:
a5:26:f6:da:24:a9:cb:a5:bb:f9:6a:c5:b2:1d:2a:
3a:23:a8:2a:0d:01:da:65:40:e1:16:8a:ce:4d:62:
47:c2:4d:1b:ff:53:9a:8c:70:26:35:ec:32:2b:ff:
f9:4a:42:a4:9a:8f:19:b2:e9:de:b4:a9:99:b5:17:
c2:1c:f2:29:af:ca:c8:ab:11:73:2a:6f:9c:90:21:
a5:2e:0a:bb:fb:81:3c:d9:5e:ae:43:52:a6:56:3f:
ef:c4:8b:0b:0e:5b:3a:0c:ce:cb:4e:84:f3:12:61:
bb:de:c0:18:a2:54:bc:5e:be:df:ae:c3:bf:94:c2:
1f:43:e9:d3:4c:d2:bb:0d:31:2a:69:23:fc:b2:7a:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:DC:8D:B5:71:20:BF:18:C4:A8:45:F6:5F:C2:ED:60:E6:AD:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/7V3cjbVxIL8YxKhF9l_C7WDmrbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.98.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48930
Signature Algorithm: sha256WithRSAEncryption
3b:dd:5a:63:20:87:85:4c:f1:cc:3d:51:6c:ab:e1:80:b6:78:
31:a0:fb:ce:1a:e4:f8:04:42:74:e1:50:b3:38:70:91:17:50:
19:38:94:90:fd:dc:f8:be:60:67:7f:a1:16:1a:39:0f:2d:fb:
3b:36:13:c1:82:bb:7a:31:f4:64:a6:e2:f5:0b:7e:cc:f5:1f:
f9:40:ed:7f:ab:5c:f2:b6:da:f7:4f:84:46:ab:31:88:cc:1d:
04:99:ac:e0:cf:eb:7d:93:d7:81:69:e3:1b:58:5f:15:d5:94:
dc:12:cd:c0:04:c0:1b:17:a0:a5:a5:6f:81:43:35:4a:6a:62:
e5:39:87:ef:f5:29:f3:0e:18:a0:76:41:63:b8:8e:58:c8:2a:
24:d2:02:d8:d1:c6:3e:ca:8c:0c:49:b0:67:2a:56:63:68:94:
66:c6:3b:d9:a5:b0:49:aa:b5:8f:4a:f7:b6:c3:d4:fe:95:79:
ef:d4:f7:57:31:cb:4b:5a:c0:52:0c:99:b2:9f:7b:16:a9:16:
99:83:aa:6d:a2:0c:08:be:cc:a4:f5:26:84:d1:35:d0:71:f5:
72:4a:d3:76:75:23:e6:d6:d8:d3:fb:29:3b:2e:3e:2b:4d:75:
09:c3:24:ce:06:c4:d4:e6:4d:36:99:9e:6f:e5:9b:f5:8c:30:
8b:db:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:22 2026 by rpki-client