Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
File: 7edmLVl_r8lt12VXdQjD7QKdZWc.cer (raw, json)
Hash identifier: BokJAhsOdiudImv0NOJ0KDq2qCx0E/l5zedyjD7C1xw=
Subject key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5C818D1824CFC96EE0696BE72B26F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:19:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44205
IP: 45.8.120.0/22
IP: 45.144.180.0/22
IP: 185.115.120.0/22
IP: 2a06:7600::/29
IP: 2a0e:8900::/29
IP: 2a0e:f340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:81:8d:18:24:cf:c9:6e:e0:69:6b:e7:2b:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ede7662d597fafc96dd765577508c3ed029d6567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:d2:51:9c:23:60:30:47:47:97:9d:d7:4c:
da:9c:15:cd:3b:99:24:7c:bf:1a:ef:41:7c:f6:7e:
35:f1:86:1c:2d:59:ad:16:bb:7c:f2:35:e1:a9:5e:
5d:ce:2e:8b:6b:ce:d9:a6:38:ea:44:3e:df:48:83:
78:40:06:33:a9:58:55:d0:63:03:b1:7f:36:51:eb:
35:6a:53:bb:06:bc:8f:ec:3f:94:d1:61:a5:33:e2:
aa:c7:03:12:d3:8c:93:06:c8:27:2a:6e:6b:11:da:
88:5b:6f:3c:30:65:dd:72:f7:62:95:2f:e6:67:67:
de:e8:84:3e:f9:81:f4:80:a7:90:d3:23:70:d8:7b:
11:13:66:a1:a0:07:fe:5e:a8:85:a5:ae:a5:a3:4f:
4a:60:f9:14:13:2a:f4:bf:26:f0:ba:76:4e:97:a2:
b3:85:82:03:31:38:e4:7b:38:e3:6c:51:be:58:0c:
21:4a:b0:96:d6:49:bc:36:fe:3a:12:c9:1a:0b:23:
0f:dc:d4:5d:84:7b:e8:06:95:e2:cb:87:27:9e:b7:
c3:9e:2f:2e:5e:89:3b:d1:2c:4b:f1:28:ad:49:3e:
2e:61:54:aa:e6:1c:10:20:aa:8b:2c:5d:47:ae:30:
82:0b:87:78:86:2b:52:1d:c1:b9:3e:20:bd:1f:af:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.120.0/22
45.144.180.0/22
185.115.120.0/22
IPv6:
2a06:7600::/29
2a0e:8900::/29
2a0e:f340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44205
Signature Algorithm: sha256WithRSAEncryption
5e:87:4b:bd:93:18:73:b8:d4:d4:25:1f:2d:e3:46:01:42:4d:
41:81:cb:c9:dd:8e:f6:53:85:ab:69:ec:73:40:6e:74:d1:d4:
7f:b8:8e:dd:ff:5d:83:c2:75:b6:ef:3b:f9:2e:76:07:89:6d:
6d:01:ba:3d:8b:3a:2c:7b:c7:51:0d:78:3c:e1:12:d3:30:9e:
37:05:39:90:d5:82:40:08:94:a8:71:c3:72:10:6e:6c:55:53:
01:01:84:92:7f:02:11:3f:b1:52:02:79:25:c6:05:ae:19:2d:
66:14:c7:69:cb:e7:21:43:cc:5d:8e:38:da:25:9a:16:27:97:
06:3c:83:d7:98:77:20:26:95:41:30:85:56:6d:e4:11:62:02:
70:b8:1f:b1:7f:53:9e:95:20:95:9c:d4:48:7f:38:67:b8:03:
bc:64:96:74:36:21:e2:ae:10:8b:a1:63:f5:e9:52:d0:56:8f:
4d:cd:44:de:a7:ad:ec:6d:c5:1d:61:09:a3:4c:57:ab:33:62:
a6:be:8b:d7:23:90:aa:b0:ab:64:60:eb:fe:e1:1e:e4:0d:fa:
82:e4:95:cd:da:2e:24:ff:ca:c9:43:92:ef:b9:bf:d2:94:1d:
e8:bf:89:2a:bf:6a:67:23:11:15:f6:e6:94:88:b5:8c:13:c5:
29:2c:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:49:57 2026 by rpki-client