Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a9t6QTN6PpLM_ajYxcueaPOjK4.cer
File: 7a9t6QTN6PpLM_ajYxcueaPOjK4.cer (raw, json)
Hash identifier: vUfpA45K/VJHmHAX+QoEZFzjcFs4AekdER8XU6FVOfk=
Subject key identifier: ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D10FB4CF2F293C531CC507F11E1DB19EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 21 Mar 2026 15:19:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197919
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:fb:4c:f2:f2:93:c5:31:cc:50:7f:11:e1:db:19:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 21 15:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edaf6de904cde8fa4b33f6a363172e79a3ce8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:df:52:75:a6:a0:17:c4:55:f3:f5:c6:87:
42:81:81:b9:59:ea:f5:dd:7b:af:be:5e:0a:f8:ce:
85:9d:29:08:80:b7:4a:98:49:c6:1b:e3:ef:6a:8e:
b5:54:60:77:42:1d:1d:5a:6b:7d:a9:a8:32:9e:e2:
df:14:52:4f:7a:50:65:6d:26:7d:25:5d:73:9c:f1:
a4:cb:03:63:d5:79:05:7c:f5:da:10:69:af:e8:63:
c3:38:b8:6e:09:bf:a9:f5:37:22:24:c0:a4:89:2a:
63:98:cc:39:b1:ee:f8:6e:8d:60:54:0e:63:87:3e:
31:22:5b:10:6a:26:9e:8c:50:a2:4b:80:ea:da:57:
ad:a2:09:ee:2e:71:3a:0a:85:22:35:44:b1:b0:86:
a8:84:28:33:e8:07:c0:5e:02:81:84:7c:6c:5e:c1:
36:d8:ab:37:d4:1e:7e:f3:29:1a:f1:07:c0:74:76:
57:5a:6f:55:04:2f:81:17:1e:5b:d6:c2:5d:62:04:
82:f2:32:5a:d9:33:aa:3e:6a:3e:99:6a:59:3b:44:
e9:65:4e:c4:27:ec:02:5b:4c:00:ff:82:13:cd:1f:
da:a7:bf:b9:8d:f2:fa:27:db:f7:c9:df:4a:61:22:
47:5d:66:d8:ae:b9:79:48:19:ff:6f:16:cc:e3:ef:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:6D:E9:04:CD:E8:FA:4B:33:F6:A3:63:17:2E:79:A3:CE:8C:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/93cba9-d0c5-452b-9226-5d7844dd45b4/1/7a9t6QTN6PpLM_ajYxcueaPOjK4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197919
Signature Algorithm: sha256WithRSAEncryption
7e:b7:6d:b3:ad:18:65:1d:0f:0e:d3:a4:ef:e8:ef:3f:f1:1e:
38:79:f5:34:2d:9b:c1:a0:2b:7d:2f:af:36:21:34:e3:4b:5f:
3c:5c:78:5b:75:4e:b2:a9:ee:1d:7d:30:72:e9:5b:42:be:9f:
d4:f3:a9:06:08:67:08:62:b3:ad:b8:90:96:70:4b:1d:07:42:
89:d5:1f:f1:d4:ef:cf:af:00:23:12:88:eb:31:1e:8b:9d:6f:
17:d6:5f:50:ab:d0:ef:1f:e4:19:17:45:9e:5a:15:a3:45:3e:
81:05:36:fb:f5:1c:a9:95:c3:84:31:20:77:d6:88:d7:32:8c:
a8:0c:a9:a5:01:95:1a:fc:02:aa:8a:35:39:6c:76:e9:dd:b4:
92:8e:e9:da:27:7c:d8:3d:5f:7d:db:41:1b:d5:59:b6:a0:05:
6d:bd:b1:63:f1:a5:1d:53:91:8f:f9:3a:3d:4b:c2:d1:4f:02:
b2:9d:06:ca:77:d6:e7:27:bb:28:c5:8c:30:70:43:d0:3d:d5:
ab:72:69:c2:d7:4f:98:6c:d3:31:12:f8:d0:4c:9c:dc:0f:9a:
a0:ff:56:a0:98:97:a3:eb:7f:10:5c:50:cd:81:89:29:00:9f:
27:01:70:ee:17:b7:b7:30:6d:42:fd:77:5f:48:f4:5e:0f:28:
6e:22:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:36 2026 by rpki-client