Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
File: Lt7Joglt7BA7ri18N5bg1HCFwgI.cer (raw, json)
Hash identifier: XzNOXwQeL+scy4Nrsh3MlRxam5fBDS7TAA0t/seuNK8=
Subject key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF1439869D6BC67446A9FBEFFA24651
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:21:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29687
IP: 77.71.0.0/17
IP: 185.186.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:43:98:69:d6:bc:67:44:6a:9f:be:ff:a2:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:21:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:00:23:59:63:1c:3d:65:9b:91:93:b6:a2:
79:85:25:2d:c5:1f:40:65:ce:6f:96:3a:b7:02:fe:
89:b5:a7:3b:c7:3c:ed:10:32:38:26:84:e8:bf:4b:
ac:8f:db:88:8b:21:7d:af:6f:e0:11:31:5d:95:ce:
91:f6:fd:32:6f:29:bf:25:b2:04:f0:f9:3a:28:fb:
37:80:86:64:e8:4e:99:f1:7c:0f:9f:66:b9:c0:85:
76:d2:28:a0:30:59:e6:21:08:e5:4f:3d:b9:3a:54:
29:4e:76:3a:ce:3e:4d:d4:e4:93:27:46:f1:2e:8e:
ad:4e:b9:01:c3:96:d5:6b:95:94:27:f8:7b:20:6a:
78:6f:33:71:96:c2:55:de:5e:c1:a8:28:52:f0:f0:
ef:84:fd:24:11:f5:4d:31:d7:5a:1c:31:b8:bf:4f:
58:17:f8:ca:8c:80:13:e8:b4:81:24:0f:29:f0:1f:
4e:50:c4:5d:6e:fd:d5:ff:e6:05:26:61:f2:3e:e6:
9b:9b:36:83:23:39:58:ee:43:17:06:70:6e:c9:35:
08:d8:45:b2:24:21:7b:86:4b:14:1b:27:58:0f:78:
d7:cc:c1:a6:3d:23:8e:57:d6:40:be:e8:a4:70:19:
55:80:1d:a1:f5:f2:b8:53:74:57:01:d0:12:6c:b9:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0/17
185.186.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29687
Signature Algorithm: sha256WithRSAEncryption
87:d3:0c:ba:28:b9:be:55:8e:55:ef:25:d0:c8:94:61:d1:b0:
37:48:f6:29:e2:29:01:ad:c7:92:47:c9:2f:df:78:ca:5d:67:
73:e8:3f:68:67:ce:0e:12:b4:86:56:68:55:fe:93:4c:3c:a9:
8b:56:40:0c:f6:bc:a4:e5:dd:a8:7a:b8:d8:63:0c:0c:70:ac:
d3:6c:48:51:4b:c1:6e:1b:de:03:30:e7:4d:c8:15:a0:38:a2:
15:10:33:38:2d:66:70:45:b0:9f:fe:09:40:9d:49:cb:aa:bb:
60:4e:8e:a0:1c:b2:0c:8c:23:bd:33:d4:25:d6:7e:a1:eb:87:
64:2b:6f:6a:27:94:49:59:9c:6c:7f:61:37:66:02:f2:fa:65:
9d:c3:0b:ed:04:10:cd:94:60:4b:b8:c4:02:71:6f:2e:40:71:
39:dd:49:5c:5a:ec:b1:db:49:ca:d2:c1:4c:2c:bd:24:35:28:
e0:9e:0a:f5:f1:db:3e:95:d9:ea:14:9d:c4:25:7d:c3:4b:0d:
a9:8b:d9:ec:3e:f0:7e:cd:71:c7:19:23:a2:05:27:88:5f:c9:
dd:d9:d3:ad:81:c6:10:ca:2f:24:bd:34:03:b9:72:40:67:21:
71:2f:a3:73:d5:b4:00:e8:78:fd:9f:46:62:b6:93:ed:8b:db:
ab:c7:1d:c9
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZt/8UOYada8Z0Rqn77/okZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTgyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWRlYzlhMjA5NmRlYzEwM2JhZTJkN2MzNzk2ZTBkNDcwODVjMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEwAI1ljHD1lm5GTtqJ5hSUtxR9A
Zc5vljq3Av6Jtac7xzztEDI4JoTov0usj9uIiyF9r2/gETFdlc6R9v0ybym/JbIE
8Pk6KPs3gIZk6E6Z8XwPn2a5wIV20iigMFnmIQjlTz25OlQpTnY6zj5N1OSTJ0bx
Lo6tTrkBw5bVa5WUJ/h7IGp4bzNxlsJV3l7BqChS8PDvhP0kEfVNMddaHDG4v09Y
F/jKjIAT6LSBJA8p8B9OUMRdbv3V/+YFJmHyPuabmzaDIzlY7kMXBnBuyTUI2EWy
JCF7hksUGydYD3jXzMGmPSOOV9ZAvuikcBlVgB2h9fK4U3RXAdASbLmeFwIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFC7eyaIJbewQO64tfDeW4NRwhcICMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2RmMGQz
Ny00ZjY1LTQzOWQtYTUzMS0wNTdkN2FmMGFlZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvZGYwZDM3
LTRmNjUtNDM5ZC1hNTMxLTA1N2Q3YWYwYWVmNC8xL0x0N0pvZ2x0N0JBN3JpMThO
NWJnMUhDRndnSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQHTUcAAwQCubqIMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAnP3MA0GCSqGSIb3DQEBCwUAA4IBAQCH0wy6KLm+VY5V7yXQyJRh0bA3
SPYp4ikBrceSR8kv33jKXWdz6D9oZ84OErSGVmhV/pNMPKmLVkAM9ryk5d2oerjY
YwwMcKzTbEhRS8FuG94DMOdNyBWgOKIVEDM4LWZwRbCf/glAnUnLqrtgTo6gHLIM
jCO9M9Ql1n6h64dkK29qJ5RJWZxsf2E3ZgLy+mWdwwvtBBDNlGBLuMQCcW8uQHE5
3UlcWuyx20nK0sFMLL0kNSjgngr18ds+ldnqFJ3EJX3DSw2pi9nsPvB+zXHHGSOi
BSeIX8nd2dOtgcYQyi8kvTQDuXJAZyFxL6Nz1bQA6Hj9n0ZitpPti9urxx3J
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:21:55 2026 by rpki-client