Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
File: 7gItaN8GanYaO-hkGnG7acFeJy0.cer (raw, json)
Hash identifier: mzVu+veXJ1gpEUfkGHDyJT4jKEY/6XupYoFKcMPvvi8=
Subject key identifier: EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DB3F9760B92A7705E458BB61B1DF37B96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Apr 2026 06:56:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198872
IP: 109.104.104.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:f9:76:0b:92:a7:70:5e:45:8b:b6:1b:1d:f3:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 06:56:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee022d68df066a761a3be8641a71bb69c15e272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:ec:2c:0b:ff:ae:51:4c:e0:e6:88:72:69:
e8:66:6d:c1:20:76:cc:62:0d:56:af:ca:be:09:ba:
11:88:1b:15:3c:47:56:c5:a7:0c:c3:9e:06:1a:bf:
70:d6:e8:20:6c:47:b8:e7:b8:27:b5:27:c3:14:9a:
b9:2b:ef:06:89:ad:18:c5:71:4d:05:d0:9c:d5:32:
98:61:41:3f:fd:5f:79:98:f7:50:e9:3b:75:51:b6:
8e:cd:18:a3:28:d9:8e:49:74:d2:aa:3c:f0:c6:08:
3e:4a:f2:24:fc:78:68:b1:cd:b6:0a:f2:b7:96:c6:
9f:7c:bd:1a:70:4e:38:09:e3:0d:30:7c:57:ff:1e:
3b:07:9f:eb:7d:50:5f:73:22:b8:e8:ee:5c:94:fe:
c7:c8:3c:fe:88:63:ed:6f:c3:b5:2d:bd:87:1a:16:
72:7f:0b:b6:2b:4e:4e:29:2b:f0:23:0f:ed:c9:f1:
1f:96:33:f8:b0:f5:af:55:78:ab:a0:c6:90:f5:ee:
f0:9a:00:cf:f9:91:80:0f:54:cd:b5:f6:76:2b:ed:
a1:c3:03:6a:fb:b8:1e:ed:9c:02:9a:22:c2:1f:6d:
ba:ee:a8:28:e8:47:d2:3a:18:bf:03:e9:41:9a:f5:
60:42:98:f9:c8:0b:eb:14:28:44:bc:5c:97:4a:58:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.104.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198872
Signature Algorithm: sha256WithRSAEncryption
a4:d9:5f:a8:83:2c:e6:9c:14:0d:37:cd:03:3a:aa:9a:82:6c:
04:3e:c6:20:74:4b:5f:a1:85:79:40:bd:73:03:5c:db:c0:6e:
40:25:84:26:78:24:03:fc:7e:b0:4b:2c:ae:ab:22:23:85:53:
e4:4d:a3:4e:ba:ed:e9:61:bf:95:25:1e:45:29:d6:62:8e:55:
43:9d:06:94:0d:6f:2c:e2:d8:1f:7f:35:84:be:f2:21:b0:e4:
e0:d1:f4:1f:bb:5b:ea:d7:47:a9:aa:f2:87:aa:0c:97:c5:f7:
01:57:94:e3:36:a0:26:e0:b5:12:f5:5f:41:34:a0:2a:6f:a8:
72:fe:e2:29:dc:14:c1:81:85:10:ba:27:c2:2a:11:19:7e:39:
9f:d3:22:2d:ad:1d:9f:7b:b7:18:d0:92:cb:1c:0c:8d:2f:d7:
e7:7f:76:fa:35:56:2c:2f:92:fe:f0:70:88:d0:e0:89:84:eb:
1f:2f:42:ab:8e:9f:1b:e0:06:4d:5d:06:e7:d3:c9:6e:3a:86:
5f:e4:c3:b4:35:83:a4:d8:2a:01:c3:37:9a:66:61:3d:95:f0:
a5:21:47:2a:2e:be:e7:cd:6e:69:f8:6d:d0:08:d7:47:93:1d:
5d:d4:37:fd:86:cd:f8:f1:bf:bc:f9:62:bc:67:11:23:7c:87:
97:aa:eb:10
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ2z+XYLkqdwXkWLthsd83uWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNDIyMDY1NjAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTAyMmQ2OGRmMDY2YTc2MWEzYmU4NjQxYTcxYmI2OWMxNWUyNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7sLAv/rlFM4OaIcmnoZm3BIHbM
Yg1Wr8q+CboRiBsVPEdWxacMw54GGr9w1uggbEe457gntSfDFJq5K+8Gia0YxXFN
BdCc1TKYYUE//V95mPdQ6Tt1UbaOzRijKNmOSXTSqjzwxgg+SvIk/Hhosc22CvK3
lsaffL0acE44CeMNMHxX/x47B5/rfVBfcyK46O5clP7HyDz+iGPtb8O1Lb2HGhZy
fwu2K05OKSvwIw/tyfEfljP4sPWvVXiroMaQ9e7wmgDP+ZGAD1TNtfZ2K+2hwwNq
+7ge7ZwCmiLCH2267qgo6EfSOhi/A+lBmvVgQpj5yAvrFChEvFyXSlg1twIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFO4CLWjfBmp2GjvoZBpxu2nBXictMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2VhZTZi
NC01Njg3LTRlNGEtODQ1ZS03NDJmN2M4Njg1ZWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvZWFlNmI0
LTU2ODctNGU0YS04NDVlLTc0MmY3Yzg2ODVlZC8xLzdnSXRhTjhHYW5ZYU8taGtH
bkc3YWNGZUp5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAbWhoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMI2DANBgkqhkiG9w0BAQsFAAOCAQEApNlfqIMs5pwUDTfNAzqqmoJsBD7GIHRL
X6GFeUC9cwNc28BuQCWEJngkA/x+sEssrqsiI4VT5E2jTrrt6WG/lSUeRSnWYo5V
Q50GlA1vLOLYH381hL7yIbDk4NH0H7tb6tdHqaryh6oMl8X3AVeU4zagJuC1EvVf
QTSgKm+ocv7iKdwUwYGFELonwioRGX45n9MiLa0dn3u3GNCSyxwMjS/X5392+jVW
LC+S/vBwiNDgiYTrHy9Cq46fG+AGTV0G59PJbjqGX+TDtDWDpNgqAcM3mmZhPZXw
pSFHKi6+581uafht0AjXR5MdXdQ3/YbN+PG/vPlivGcRI3yHl6rrEA==
-----END CERTIFICATE-----
Generated at Tue May 12 20:59:33 2026 by rpki-client