Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
File: B7gNX0qckt2SpGBXGeCujRpiwEM.cer (raw, json)
Hash identifier: No/qO2YnXZ7UWcNJAtJLEBr+sGv5cka8CDIjepTTICA=
Subject key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C135C7AC1572465CF50EDAE18923D28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:20:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.176.190.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:5c:7a:c1:57:24:65:cf:50:ed:ae:18:92:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:20:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:98:c4:bc:51:1d:ca:d1:f9:c8:fb:24:e4:
4a:cd:e5:ef:93:09:47:55:6e:3a:6b:a9:61:43:3b:
21:15:cf:e5:29:51:d1:09:97:0a:18:15:26:17:37:
97:c9:25:e6:fe:55:3a:5e:81:e7:2e:44:43:f7:63:
b6:26:83:0f:5b:9b:97:b0:82:44:e8:ae:c8:30:dc:
b5:db:ed:4e:96:51:63:f9:44:10:ce:c0:14:e0:9f:
0a:2a:00:74:a1:f3:34:4b:f1:77:80:18:45:f6:93:
be:66:b5:0a:cc:22:24:7d:57:49:c5:8c:df:5f:7f:
cc:c7:80:cf:d9:48:8c:c9:39:fa:aa:64:a0:5c:10:
b5:c2:c6:bd:d1:bc:09:f3:db:5c:10:d5:15:b4:6e:
a2:e6:be:9e:33:e7:1f:81:3e:a2:12:b0:75:e8:cf:
80:8a:fa:81:e9:10:db:28:cd:53:fa:46:7b:0c:eb:
54:d3:29:b5:ef:7e:17:df:b2:4b:ba:2c:f1:77:46:
c5:2e:20:d0:31:36:e6:89:1d:b8:25:9b:3e:c9:d5:
be:91:f8:d6:cd:ce:67:7a:7d:a7:d8:46:17:eb:10:
5c:23:bc:e7:b9:da:41:8d:57:bc:62:e8:b9:d4:58:
90:8f:25:b7:a2:99:be:1b:5f:04:f9:30:dc:5d:53:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cb:8a:98:ea:d8:ac:fa:2b:e7:98:1f:7c:fd:64:2f:6c:62:
0f:c9:57:8e:6f:ed:9e:03:6b:c2:f6:36:4f:17:a3:e6:88:80:
8d:45:60:8a:1c:c5:3f:bd:7d:1c:0a:e9:5e:4e:64:f3:30:52:
56:34:f7:94:d2:31:6c:9a:eb:ea:95:a4:ef:09:d1:26:3c:08:
3b:4d:9f:c6:9a:6a:5e:11:86:1e:f2:fc:3c:ef:57:2b:56:b2:
c0:bd:60:29:6f:5e:18:7f:4a:8e:ef:78:ce:b7:70:74:33:62:
b5:85:df:5e:c4:42:37:1e:13:27:ec:ff:15:89:e9:cf:6f:3e:
ad:54:b3:20:bd:aa:a0:e0:09:04:18:4c:b1:fe:29:03:48:2c:
8a:98:6d:1b:5d:9f:80:00:3d:ec:aa:c1:46:51:75:97:1b:4d:
c8:53:7d:bb:48:e7:ae:a9:c0:70:87:a3:42:9a:4c:87:86:ac:
d9:90:c7:25:ed:36:16:67:9e:6d:f0:4e:43:2b:aa:10:a2:15:
6d:53:a8:1d:0f:e1:5f:2a:c2:ec:26:3a:2e:a6:1c:88:43:b1:
15:18:8d:71:3c:83:b5:a0:19:b5:06:ed:d5:8c:2d:21:01:e1:
01:ad:f7:a3:ec:a8:26:f7:50:e6:d0:f4:58:44:52:f1:02:4f:
6b:71:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:59:14 2026 by rpki-client