Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
File: B7egwbq9Yh6CINDXd4d6hEtBPBA.cer (raw, json)
Hash identifier: 1Pir3IE+NCXNZZZpVRgMbnUAWewb9ZnHLUW7ADWf/h0=
Subject key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1171520FB3060082F11429B6D01600
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:17:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.203.2.0/23
IP: 193.203.16.0/23
IP: 2a0f:e280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:71:52:0f:b3:06:00:82:f1:14:29:b6:d0:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07b7a0c1babd621e8220d0d777877a844b413c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:47:8b:02:1c:2f:aa:8f:b9:af:68:59:ea:
70:26:94:01:9b:86:5f:2d:9f:fd:0b:85:a2:be:82:
7f:f6:b7:1d:2c:5a:25:1b:61:15:4a:41:6b:54:b5:
d8:f5:5b:0c:ab:45:c6:d7:98:93:41:d3:0b:b7:d3:
c5:76:e1:82:94:c8:f1:ae:4e:91:94:9e:8f:e2:b6:
ce:0c:94:9b:ee:30:26:b1:59:c0:54:f6:99:40:21:
54:6e:20:b2:e1:ce:d8:76:a4:3b:57:ae:61:dc:13:
b8:33:cd:9c:8d:70:41:91:5b:55:c7:c1:d0:eb:6d:
7d:52:5b:5a:bc:5e:d8:95:54:eb:5a:17:87:4f:f8:
62:5e:07:fa:c9:02:03:4f:a0:01:7a:b1:fb:68:28:
1a:45:3b:bf:2d:50:a3:c0:d0:d7:a1:6e:2c:f3:45:
22:e3:77:09:bc:3d:55:20:a3:d7:4f:d2:56:9c:b9:
d5:06:0a:86:04:73:ca:4a:ac:16:c3:15:bd:21:2c:
90:f6:79:56:e0:12:37:c6:05:4f:bc:3c:ce:98:12:
e3:20:11:1f:71:43:f8:82:37:d6:0f:70:b7:48:be:
22:df:46:ae:07:88:ed:97:7c:97:2d:ee:9b:a3:a2:
34:c0:25:7b:13:90:56:aa:ef:9d:b6:a4:fc:76:04:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.2.0/23
193.203.16.0/23
IPv6:
2a0f:e280::/29
Signature Algorithm: sha256WithRSAEncryption
63:39:dd:f5:c8:86:5e:05:69:6a:53:7e:96:a8:0f:2b:47:46:
ac:58:ae:42:3b:e6:5f:d2:32:6f:8a:7e:b7:28:25:2a:62:c7:
63:f1:2a:a5:67:21:cf:09:71:07:06:98:08:88:d0:23:5e:3b:
20:51:84:df:c7:87:76:35:fc:c4:62:44:73:91:6b:37:b6:1a:
53:2e:c2:30:c0:dd:c0:e5:32:cb:06:04:97:ca:da:ce:be:68:
a6:58:18:a9:a1:4b:6e:4f:6d:32:6f:a0:0b:46:42:ff:5d:c7:
39:02:5c:20:00:ca:f3:d1:da:2b:d3:c1:54:d2:8f:72:bf:98:
b3:7b:71:dc:8f:91:69:b0:13:67:a6:05:f4:51:cf:b5:d2:bf:
f6:87:bd:81:ea:b8:a8:fc:87:2e:ed:81:99:93:ad:d1:cc:c6:
ac:30:17:c4:69:00:66:ea:62:1a:40:6f:29:2c:b0:52:0f:6d:
79:ff:05:9e:81:db:6f:83:e8:f4:9d:ac:c4:cd:6a:e3:65:f7:
20:84:40:85:85:26:01:fc:ff:05:e8:b1:12:50:95:96:4b:d6:
53:54:fa:79:d7:0f:4a:62:d3:89:53:a3:e5:a5:05:62:6b:89:
d9:b7:a5:66:ed:66:86:e5:e6:95:e9:6a:90:b8:26:d7:5b:f4:
af:1d:88:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:47 2026 by rpki-client