Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7lOyfPFdNQRZRzp5DbXbdv60CkM.cer
File: 7lOyfPFdNQRZRzp5DbXbdv60CkM.cer (raw, json)
Hash identifier: a2h75T0p1KJ6ewXC0F7x/RydJGAVyCAKeU4jtgPVwa8=
Subject key identifier: EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1208635AE770BD1D6AD340C9F6DD0A6A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Oct 2026 11:57:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203138
IP: 150.237.120.0/24
IP: 2001:678:116c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:86:35:ae:77:0b:d1:d6:ad:34:0c:9f:6d:d0:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 9 11:57:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee53b27cf15d350459473a790db5db76feb40a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:c5:94:b6:50:ef:8c:47:41:a6:bd:98:ea:
c7:a8:aa:b4:69:6e:f0:02:76:05:b5:b1:1f:68:2a:
59:50:0b:a2:5e:6f:ca:59:61:3d:32:38:58:0a:cb:
22:84:ee:c1:05:74:ad:b0:b5:6e:9b:22:e9:08:55:
bb:f9:08:69:6f:88:e6:92:35:2e:fe:75:57:85:b2:
eb:ac:68:7f:91:04:74:5a:fc:18:dc:21:44:33:14:
0e:06:63:1b:45:b0:64:14:ef:b4:6c:22:8d:0a:11:
57:83:02:9e:76:8d:d5:35:9d:8d:c1:e5:c6:8f:3e:
ea:81:ca:ec:5f:c5:d7:d0:3c:08:17:16:05:05:58:
c5:f5:6f:d3:ff:83:cb:37:20:8c:80:da:23:6d:68:
e0:05:41:42:f1:c3:f5:0a:f7:94:b7:b3:c5:ac:8f:
5d:30:4a:57:d2:ac:63:be:7c:c5:53:da:c3:04:6c:
62:44:fa:d4:03:9a:42:75:4a:66:10:98:df:06:68:
31:18:d5:48:ff:74:07:8c:fc:d3:1c:69:9b:a9:f5:
96:34:e7:86:e1:91:b5:d2:14:6d:5d:83:e1:88:ef:
3a:2e:9f:f5:ce:22:13:da:ac:b1:d0:63:04:d2:50:
18:f8:aa:c9:c1:8b:68:35:7b:3d:36:94:12:84:36:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:B2:7C:F1:5D:35:04:59:47:3A:79:0D:B5:DB:76:FE:B4:0A:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/15d89d-b9d1-4034-b88c-44256f7f2ce6/1/7lOyfPFdNQRZRzp5DbXbdv60CkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.120.0/24
IPv6:
2001:678:116c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203138
Signature Algorithm: sha256WithRSAEncryption
a1:61:5a:ea:f1:c9:2b:17:39:e7:8f:1c:47:44:0c:03:0e:8b:
11:a3:04:42:5d:0c:0b:22:cf:03:8b:29:dd:a8:02:be:6f:7e:
3f:a2:28:29:77:6e:b2:61:b8:99:f7:a6:50:60:0b:15:f4:ba:
75:b5:a4:ab:8f:85:61:52:a2:79:bc:7b:1b:d8:3b:86:d0:e3:
c9:2c:09:7b:23:41:a2:d4:d8:d0:6a:18:89:c3:ec:f5:82:a4:
d5:ce:e8:ed:68:d1:3d:6e:d0:49:69:d0:c2:d6:6c:0e:41:ec:
f5:3c:0e:5a:b3:fc:76:d5:91:11:f6:08:a8:da:70:a1:86:ba:
85:14:96:35:dd:9a:e7:10:43:86:54:da:be:5b:7f:28:20:d8:
c5:96:b1:fb:fa:da:8b:92:5b:2b:d1:2d:ac:65:bf:10:c1:d0:
c7:da:42:6f:fa:8f:0b:6a:eb:96:f1:ee:85:14:f6:8b:36:58:
2f:e5:77:9b:9c:8c:73:9c:c9:b9:a9:c6:fd:79:2e:67:7e:ab:
19:2c:aa:e7:78:be:68:9f:33:59:d4:f5:42:59:3c:7b:47:da:
bd:dd:bc:9e:67:64:9e:14:81:f0:e6:38:7d:ad:4d:93:21:6e:
c9:f0:c4:bf:e1:85:4a:32:d3:f7:15:5a:f2:26:86:42:76:a7:
fc:1a:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:47:13 2026 by rpki-client