Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
File: 7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer (raw, json)
Hash identifier: 5E1sxP4J8rtSoQdAXDNVVEG/BZSTA8BaCxwZwTuESjs=
Subject key identifier: EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F96FAB0DC70AF5987E708049154951
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48904
IP: 185.204.8.0/22
IP: 217.72.16.0/20
IP: 2a13:ed00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:6f:ab:0d:c7:0a:f5:98:7e:70:80:49:15:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:00:5d:08:ef:c2:c7:ab:fc:26:bd:9b:76:
d1:dd:ab:8c:de:8a:4d:b6:0f:a4:36:21:47:e0:07:
3a:12:64:0f:8d:7a:fd:c8:60:8c:58:3f:01:48:e8:
7f:b8:81:91:6f:40:ec:61:00:a9:b7:2c:85:e7:0e:
4b:03:a3:d6:b6:9f:c4:51:05:36:79:d7:c5:18:39:
0e:a0:aa:9c:05:c2:9b:62:b3:b6:4b:4b:3d:0b:d8:
2d:0f:7d:7c:2f:64:76:bd:90:86:40:01:40:37:13:
e0:b7:94:3e:61:ab:59:5f:f9:36:4f:9d:3a:3b:8f:
15:1f:a1:5e:72:ec:10:e8:09:3b:59:b8:e7:7f:e8:
5a:68:a0:3d:73:99:0c:89:75:79:d0:46:0a:5e:d1:
fe:01:a8:c9:70:95:f8:13:b0:c5:b5:05:7a:43:33:
59:36:c8:01:a5:7a:98:79:15:96:09:9e:6c:23:39:
43:1b:69:a7:50:59:79:01:40:e2:86:27:80:d5:1e:
f3:ca:7e:42:47:29:a7:bc:90:a5:07:59:3a:4d:cb:
99:1d:64:cd:54:e6:35:24:b8:ae:57:b7:40:9a:f2:
26:70:10:c6:36:fa:6f:5b:22:a2:21:a4:2e:f5:a7:
b7:46:0c:4b:14:9a:dd:9b:a3:21:85:ec:dd:bf:76:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.8.0/22
217.72.16.0/20
IPv6:
2a13:ed00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48904
Signature Algorithm: sha256WithRSAEncryption
1f:db:65:4f:aa:6d:0b:9a:cb:ca:f3:f4:36:35:41:db:6c:05:
2a:a0:0e:6f:ce:25:b2:52:13:46:f4:e0:fe:bc:a7:fe:db:37:
e4:1f:b6:7b:f5:97:a8:d0:37:78:2d:e5:fa:5d:16:7e:d9:86:
62:50:08:9a:e1:49:e3:9e:e4:a2:03:81:f8:c8:cf:ae:76:1a:
7b:e0:59:24:6d:39:42:80:f1:48:d2:1b:39:1f:fa:8e:8e:05:
e7:98:b1:da:5e:42:f2:ae:4c:cb:55:89:44:48:7c:3e:1b:3f:
6d:fb:0f:81:cd:9a:4b:b4:4f:a9:ff:2b:f8:35:c2:fd:08:8e:
ee:85:05:3b:f1:03:0f:e3:f6:04:e0:27:67:74:80:0b:42:c7:
85:10:80:cc:1c:2f:f6:63:e2:6b:52:b8:ac:75:55:f3:6b:12:
72:de:e8:28:d3:93:d1:52:2a:26:e6:38:d7:c7:71:f2:c7:21:
23:09:e3:a4:b6:2f:eb:20:2f:f1:b4:47:d6:94:ae:bd:1f:ff:
c3:a1:f7:9d:14:a1:75:19:e7:06:43:7f:0c:d0:6f:9a:3f:bd:
61:8f:c4:0a:46:5d:3d:e9:d2:ca:a7:3b:55:f7:82:cd:6c:d3:
f1:cd:70:38:72:35:55:2d:28:e4:ac:e8:40:3c:61:73:c6:b1:
a7:98:17:62
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZ8Y+W+rDccK9Zh+cIBJFUlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZThjNWFmMWMxNmUxNTE4Y2M0MzkyMjg0YTFhMGU1NGY0Y2JmNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEkAXQjvwser/Ca9m3bR3auM3opN
tg+kNiFH4Ac6EmQPjXr9yGCMWD8BSOh/uIGRb0DsYQCptyyF5w5LA6PWtp/EUQU2
edfFGDkOoKqcBcKbYrO2S0s9C9gtD318L2R2vZCGQAFANxPgt5Q+YatZX/k2T506
O48VH6FecuwQ6Ak7Wbjnf+haaKA9c5kMiXV50EYKXtH+AajJcJX4E7DFtQV6QzNZ
NsgBpXqYeRWWCZ5sIzlDG2mnUFl5AUDihieA1R7zyn5CRymnvJClB1k6TcuZHWTN
VOY1JLiuV7dAmvImcBDGNvpvWyKiIaQu9ae3RgxLFJrdm6Mhhezdv3ZW9QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFO6MWvHBbhUYzEOSKEoaDlT0y/dWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2L2IzNjZi
Yi03MjIwLTQ1ZjMtYjQ2ZC1kNjNhNTExMWZiZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvYjM2NmJi
LTcyMjAtNDVmMy1iNDZkLWQ2M2E1MTExZmJmNy8xLzdveGE4Y0Z1RlJqTVE1SW9T
aG9PVlBUTDkxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCucwIAwQE2UgQMA0EAgACMAcDBQMqE+0AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC/CDANBgkqhkiG9w0BAQsFAAOCAQEAH9tl
T6ptC5rLyvP0NjVB22wFKqAOb84lslITRvTg/ryn/ts35B+2e/WXqNA3eC3l+l0W
ftmGYlAImuFJ457kogOB+MjPrnYae+BZJG05QoDxSNIbOR/6jo4F55ix2l5C8q5M
y1WJREh8Phs/bfsPgc2aS7RPqf8r+DXC/QiO7oUFO/EDD+P2BOAnZ3SAC0LHhRCA
zBwv9mPia1K4rHVV82sSct7oKNOT0VIqJuY418dx8schIwnjpLYv6yAv8bRH1pSu
vR//w6H3nRShdRnnBkN/DNBvmj+9YY/ECkZdPenSyqc7VfeCzWzT8c1wOHI1VS0o
5KzoQDxhc8axp5gXYg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:58 2026 by rpki-client