Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7weCE3GX0f74TQLlgbJdhj7eaEI.cer
File: 7weCE3GX0f74TQLlgbJdhj7eaEI.cer (raw, json)
Hash identifier: 5Y2iz68WeXDSNuX8iLLiKKHu40AknFYY+z2gAA6/iDY=
Subject key identifier: EF:07:82:13:71:97:D1:FE:F8:4D:02:E5:81:B2:5D:86:3E:DE:68:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A159AD2612422DEC0C617DD9A202DF31CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/7weCE3GX0f74TQLlgbJdhj7eaEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 Oct 2026 14:18:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197182
IP: 45.9.23.0/24
IP: 2a01:b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:ad:26:12:42:2d:ec:0c:61:7d:d9:a2:02:df:31:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 20 14:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef0782137197d1fef84d02e581b25d863ede6842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:bd:ea:37:9b:1b:4a:90:29:8c:9b:ce:2c:
be:29:af:b0:b5:f7:8f:27:ef:3c:40:56:18:ed:89:
fd:ec:3f:7f:db:5c:9e:60:6a:bc:19:61:b8:c1:da:
88:0e:4b:16:3d:09:bb:e1:31:86:4a:4b:da:dc:77:
47:82:56:a6:89:95:02:38:2e:26:d4:af:1c:30:e3:
35:e3:48:5b:ac:f1:29:e7:26:ca:fe:92:69:bd:02:
f0:70:e8:85:11:8c:95:0d:eb:74:e3:03:f8:00:89:
9b:2b:6c:81:91:20:1e:8b:a7:0f:7b:aa:80:50:6e:
6f:b0:e6:fa:8d:de:31:11:a9:81:62:36:55:30:d4:
20:22:a5:7a:c3:1f:45:f3:5c:27:fe:b6:16:46:77:
91:79:ba:1d:98:c0:34:cc:e6:4f:ae:f8:4b:bc:04:
a6:61:95:f3:03:e0:30:14:bd:12:d9:7e:6b:04:ea:
66:a8:e1:6d:84:19:bd:81:a5:a8:e7:07:b7:03:87:
7c:d9:19:02:71:86:11:7b:cf:a0:fa:ba:d9:2a:b1:
7c:5b:8c:1a:a1:63:c2:2f:09:66:d7:08:b7:64:04:
1f:c2:b6:e5:58:75:25:79:22:3d:e3:ba:dd:1a:73:
1e:be:db:16:55:45:45:97:61:f6:81:dc:b9:12:07:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:82:13:71:97:D1:FE:F8:4D:02:E5:81:B2:5D:86:3E:DE:68:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/7weCE3GX0f74TQLlgbJdhj7eaEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.23.0/24
IPv6:
2a01:b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197182
Signature Algorithm: sha256WithRSAEncryption
6b:a2:14:fb:7e:93:08:ba:50:93:b8:1d:55:e5:80:68:74:12:
e6:4e:52:bd:e9:ce:a0:5b:79:41:dd:18:8d:3b:34:e6:f3:59:
1d:bc:19:40:82:f2:6b:01:2d:70:e2:07:53:6a:24:31:6e:dd:
02:f3:8b:5f:f7:f3:dd:89:eb:e9:de:7e:35:76:d1:91:c5:04:
4d:5e:b2:f7:d0:76:c5:99:0e:73:80:69:78:e3:f3:a9:7f:58:
f5:fb:41:ac:1c:08:0a:3f:9e:b7:08:dd:8d:05:22:66:c1:af:
b5:af:1e:8f:84:72:85:8d:ef:e3:13:11:99:83:a5:55:8b:1a:
d4:7a:5d:52:ff:cc:e1:1e:21:71:af:4b:84:58:5f:46:0e:71:
27:d7:25:33:a9:04:62:93:1c:30:7f:d1:d4:61:12:b5:b2:d1:
c2:59:2c:7e:4a:5b:b6:0d:58:7d:ac:13:ff:46:5f:79:03:02:
b8:ab:40:d3:32:ac:9f:3c:96:a0:bc:b9:14:31:a8:f6:f8:35:
10:01:17:07:3e:63:19:2b:55:0e:6e:24:52:76:6c:23:9f:df:
4d:a3:b2:22:6a:88:8c:34:50:68:75:30:3e:03:1d:8f:8e:9c:
47:a9:b7:b7:f6:e6:63:51:14:d0:64:f7:ca:7b:9b:bf:08:58:
89:5a:34:59
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAaFZrSYSQi3sDGF92aIC3zHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDIwMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjA3ODIxMzcxOTdkMWZlZjg0ZDAyZTU4MWIyNWQ4NjNlZGU2ODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt+96jebG0qQKYybziy+Ka+wtfeP
J+88QFYY7Yn97D9/21yeYGq8GWG4wdqIDksWPQm74TGGSkva3HdHglamiZUCOC4m
1K8cMOM140hbrPEp5ybK/pJpvQLwcOiFEYyVDet04wP4AImbK2yBkSAei6cPe6qA
UG5vsOb6jd4xEamBYjZVMNQgIqV6wx9F81wn/rYWRneRebodmMA0zOZPrvhLvASm
YZXzA+AwFL0S2X5rBOpmqOFthBm9gaWo5we3A4d82RkCcYYRe8+g+rrZKrF8W4wa
oWPCLwlm1wi3ZAQfwrblWHUleSI947rdGnMevtsWVUVFl2H2gdy5EgfHawIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFO8HghNxl9H++E0C5YGyXYY+3mhCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2VmMDIx
ZC04MjMyLTRlODYtOTAxZS0yZWFlZDM3NDgzZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvZWYwMjFk
LTgyMzItNGU4Ni05MDFlLTJlYWVkMzc0ODNlYi8xLzd3ZUNFM0dYMGY3NFRRTGxn
YkpkaGo3ZWFFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALQkXMA0EAgACMAcDBQMqAQsAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMCPjANBgkqhkiG9w0BAQsFAAOCAQEAa6IU+36TCLpQ
k7gdVeWAaHQS5k5SvenOoFt5Qd0YjTs05vNZHbwZQILyawEtcOIHU2okMW7dAvOL
X/fz3Ynr6d5+NXbRkcUETV6y99B2xZkOc4BpeOPzqX9Y9ftBrBwICj+etwjdjQUi
ZsGvta8ej4RyhY3v4xMRmYOlVYsa1HpdUv/M4R4hca9LhFhfRg5xJ9clM6kEYpMc
MH/R1GEStbLRwlksfkpbtg1YfawT/0ZfeQMCuKtA0zKsnzyWoLy5FDGo9vg1EAEX
Bz5jGStVDm4kUnZsI5/fTaOyImqIjDRQaHUwPgMdj46cR6m3t/bmY1EU0GT3ynub
vwhYiVo0WQ==
-----END CERTIFICATE-----
Generated at Wed Nov 11 18:37:02 2026 by rpki-client