Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/M7ASjGgRbAA9EGv-yo7oEqco9-c.cer
File: M7ASjGgRbAA9EGv-yo7oEqco9-c.cer (raw, json)
Hash identifier: r1EWTup+4RLLB9Mt0rBNRyMtIjjNquDNFMKsmNw7bW8=
Subject key identifier: 33:B0:12:8C:68:11:6C:00:3D:10:6B:FE:CA:8E:E8:12:A7:28:F7:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A187BBDC865646DB20AC1A2B317B51E9DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/M7ASjGgRbAA9EGv-yo7oEqco9-c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Oct 2026 12:56:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218564
IP: 2001:678:13b0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bb:dc:86:56:46:db:20:ac:1a:2b:31:7b:51:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 12:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33b0128c68116c003d106bfeca8ee812a728f7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:0b:7b:b5:42:6a:1e:b1:c3:63:1e:ee:a9:
d6:7c:12:a8:ce:cb:18:13:c7:86:41:5e:c9:7e:20:
1e:91:33:3b:a5:d8:50:dc:1a:35:0a:f9:ce:4b:9c:
32:48:67:6c:19:47:f9:8a:73:9d:77:53:86:0e:93:
68:68:c9:f7:16:e3:ce:a6:52:a5:28:9b:57:1c:98:
b8:b5:ef:50:8f:da:cc:42:23:45:49:2d:73:ec:66:
b1:4b:30:24:a5:9b:b0:76:2c:e5:65:d2:4a:6e:84:
5b:a5:8f:e2:e1:b9:f9:15:a3:bd:5c:a6:08:99:b9:
6f:49:d4:b3:ad:3d:b8:d5:0e:45:8e:10:a3:0d:41:
0f:40:f5:11:81:ac:66:5e:7c:f1:b7:d7:c3:eb:34:
54:a9:1d:ba:8d:45:0e:b3:ac:7d:1c:95:13:c8:d6:
ae:a4:36:db:84:5c:f3:0d:d3:68:66:3f:62:07:4b:
d1:36:ff:24:69:8d:4d:f3:8a:71:26:22:35:33:81:
39:6c:f2:04:f2:88:4c:cf:48:33:1e:99:fb:37:c1:
fb:f7:e5:41:81:7f:aa:59:1f:45:64:90:10:d2:99:
c1:bc:25:85:00:19:b4:7f:5c:4a:59:02:14:9c:b3:
16:94:54:59:9d:a6:12:81:6e:5c:96:06:79:a7:c2:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:12:8C:68:11:6C:00:3D:10:6B:FE:CA:8E:E8:12:A7:28:F7:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7acd8-231d-49f0-ae90-97cfb4620604/1/M7ASjGgRbAA9EGv-yo7oEqco9-c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13b0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218564
Signature Algorithm: sha256WithRSAEncryption
3e:1a:97:f1:77:98:a9:85:d6:50:5b:95:f1:28:98:e0:04:4b:
b1:e6:a6:92:0a:9f:03:2b:fa:d7:fa:80:eb:d3:76:62:f9:c6:
fe:60:12:d8:2f:93:fe:6a:7d:29:c4:30:aa:7e:01:be:c3:ff:
44:e4:81:88:84:38:2c:45:9e:51:21:9f:a5:45:d5:27:bd:bd:
db:15:6c:bb:eb:b0:c1:b2:fa:0a:b8:6c:d5:99:16:bb:84:dc:
eb:49:da:f0:8f:5b:9d:9f:1e:5d:e4:77:06:c7:09:ac:06:f2:
19:3f:18:f3:8e:2c:a9:09:2c:7d:ba:b9:59:b6:02:9e:5e:2b:
50:70:dd:8f:6f:4d:6b:9a:76:dc:70:ca:fb:c8:f0:3c:bd:74:
8d:92:10:35:46:89:da:07:28:99:90:bd:cb:4b:da:4b:45:b8:
2b:47:3c:44:ac:b8:33:3a:5b:a7:52:37:34:78:07:16:48:8c:
b7:5f:3f:04:d8:d3:7e:4e:e4:d0:f1:db:36:b7:62:9e:c5:22:
42:27:78:59:c8:81:44:eb:b4:b5:7b:52:bc:c9:5f:8e:af:02:
ac:8c:7d:40:ee:66:db:b0:27:25:ac:d5:0d:9e:d4:6b:15:fc:
bc:78:d0:0c:17:c4:e9:f7:fc:e4:78:67:83:64:a3:52:90:6a:
9a:be:c8:28
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAaGHu9yGVkbbIKwaKzF7UencMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDI5MTI1NjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2IwMTI4YzY4MTE2YzAwM2QxMDZiZmVjYThlZTgxMmE3MjhmN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkALe7VCah6xw2Me7qnWfBKozssY
E8eGQV7JfiAekTM7pdhQ3Bo1CvnOS5wySGdsGUf5inOdd1OGDpNoaMn3FuPOplKl
KJtXHJi4te9Qj9rMQiNFSS1z7GaxSzAkpZuwdizlZdJKboRbpY/i4bn5FaO9XKYI
mblvSdSzrT241Q5FjhCjDUEPQPURgaxmXnzxt9fD6zRUqR26jUUOs6x9HJUTyNau
pDbbhFzzDdNoZj9iB0vRNv8kaY1N84pxJiI1M4E5bPIE8ohMz0gzHpn7N8H79+VB
gX+qWR9FZJAQ0pnBvCWFABm0f1xKWQIUnLMWlFRZnaYSgW5clgZ5p8LEBwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFDOwEoxoEWwAPRBr/sqO6BKnKPfnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2Q3YWNk
OC0yMzFkLTQ5ZjAtYWU5MC05N2NmYjQ2MjA2MDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvZDdhY2Q4
LTIzMWQtNDlmMC1hZTkwLTk3Y2ZiNDYyMDYwNC8xL003QVNqR2dSYkFBOUVHdi15
bzdvRXFjbzktYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBOwMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNVxDANBgkqhkiG9w0BAQsFAAOCAQEAPhqX8XeYqYXWUFuV8SiY4ARLseam
kgqfAyv61/qA69N2YvnG/mAS2C+T/mp9KcQwqn4BvsP/ROSBiIQ4LEWeUSGfpUXV
J7292xVsu+uwwbL6Crhs1ZkWu4Tc60na8I9bnZ8eXeR3BscJrAbyGT8Y844sqQks
fbq5WbYCnl4rUHDdj29Na5p23HDK+8jwPL10jZIQNUaJ2gcomZC9y0vaS0W4K0c8
RKy4Mzpbp1I3NHgHFkiMt18/BNjTfk7k0PHbNrdinsUiQid4WciBROu0tXtSvMlf
jq8CrIx9QO5m27AnJazVDZ7UaxX8vHjQDBfE6ff85Hhng2SjUpBqmr7IKA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:41:52 2026 by rpki-client