Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer (raw, json)
Hash identifier: 0NQ6cpRx2eu7zZjjAIQ+zAz4SN49hMxFq1GGqgQkLAg=
Subject key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEE19A844D612C1DA4A80F609E62B69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199354
IP: 185.19.228.0/22
IP: 2a03:ffc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:19:a8:44:d6:12:c1:da:4a:80:f6:09:e6:2b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:e3:04:93:15:cd:d1:4e:29:5b:f4:b1:03:
b7:e6:5e:ed:80:85:7a:76:a3:53:98:0c:45:31:58:
5a:c0:e2:b5:70:06:bb:fa:63:16:3b:09:73:4a:e8:
50:d8:46:99:09:c3:0e:b1:3e:67:4f:1b:0f:fb:38:
a8:ec:1d:04:bc:c8:f8:7d:b9:0b:0e:d5:d1:95:fb:
94:f6:bc:57:2f:8e:82:bc:ea:53:a9:a6:6e:63:7d:
34:7f:2f:7c:02:2e:b6:a6:fc:83:83:c9:98:6c:e8:
0c:80:28:65:20:1e:6d:cd:e0:01:94:c9:c3:03:b4:
0a:ab:43:15:d6:6e:ae:c3:00:82:5b:ca:fe:00:7b:
a1:7a:3b:31:6c:45:30:3d:6f:1b:3e:7f:37:61:bf:
63:48:c4:a3:f5:fd:a4:32:65:ab:85:0a:ef:93:b0:
fc:f3:58:83:0d:6d:d5:15:f9:b4:ff:f3:c8:e1:d0:
54:53:ff:cf:9c:04:71:06:dc:a0:82:27:34:d6:e2:
2e:a9:89:84:2d:18:09:ab:b5:51:92:86:3e:7e:a7:
a4:df:e5:d4:70:8a:45:49:e3:fe:7c:32:89:8a:88:
12:4a:e2:58:41:87:97:ef:89:62:59:4c:a2:71:fe:
f5:11:7b:fd:ca:82:4f:3a:79:5f:ce:e4:c2:81:73:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.228.0/22
IPv6:
2a03:ffc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199354
Signature Algorithm: sha256WithRSAEncryption
9f:ea:2c:8f:1d:c2:f6:90:8e:f4:a6:4c:2b:03:76:2d:5d:07:
47:ca:01:e2:f8:7d:36:f7:2c:0b:f4:35:51:11:ef:8d:5d:c8:
d4:83:43:e8:cd:3c:b2:6a:27:eb:90:93:bf:45:34:04:2c:64:
11:b2:78:a0:a2:01:15:73:0b:06:bb:15:16:e8:e0:59:46:67:
b3:6c:a5:9a:67:d8:b4:be:8a:5c:9c:98:31:6d:33:c3:bb:e6:
d8:7c:e0:b2:af:58:cc:1e:5f:ff:51:63:2f:7f:51:5e:2a:2b:
7b:87:ff:10:67:31:e3:0f:59:df:b1:e4:0d:25:b2:7b:24:54:
32:49:3f:58:94:5e:be:bb:dc:75:1b:f6:23:1a:58:47:5b:9f:
57:82:df:83:e4:23:b7:97:18:b6:60:64:38:35:fe:af:97:ff:
52:56:1b:2f:7d:eb:9a:1b:25:04:eb:bd:31:39:58:97:3b:7f:
82:c6:7e:fe:94:cc:78:4a:93:1b:2f:d8:01:4d:a7:f2:29:52:
35:6a:73:0f:4b:b0:c6:59:12:9e:b9:89:dc:c7:4b:f7:c8:65:
52:23:85:e9:e2:dd:31:5b:ee:17:8a:51:30:79:97:f3:91:04:
97:4f:13:62:23:df:6d:6d:73:ae:7a:54:36:9e:df:23:64:6d:
ac:c5:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:20 2026 by rpki-client