Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
File: T7K7e61Q8ZIYEKAo547dZfgfan0.cer (raw, json)
Hash identifier: 12wcqO2y780D5gquAX+4cuMaVXXQqX2SD4cz3kONdb4=
Subject key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0CE74E195D2B962ABAFB1D6ADCA76B1EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 13:29:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31715
IP: 5.150.156.0/22
IP: 9.148.0.0/16
IP: 9.152.0.0/16
IP: 9.155.0.0/16
IP: 9.174.0.0/15
IP: 9.200.0.0/16
IP: 91.238.70.0/23
IP: 135.137.0.0/16
IP: 153.58.0.0/16
IP: 153.63.0.0/16
IP: 185.22.40.0/22
IP: 185.141.116.0/24
IP: 2a07:23c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:74:e1:95:d2:b9:62:ab:af:b1:d6:ad:ca:76:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 13:29:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:6c:f1:0f:0c:c5:c5:a5:de:60:22:aa:31:
55:72:b7:de:75:b9:cc:ee:0d:07:14:93:09:59:f7:
b3:68:a2:ec:a7:f0:9f:2c:8f:f7:79:7b:45:fd:36:
20:a5:8f:0d:fe:79:5d:ef:99:45:9e:56:59:b6:fa:
06:83:df:34:6d:1a:12:d5:45:2f:6d:da:ce:37:b9:
cf:17:2a:a1:d1:28:15:89:d6:9a:00:39:af:af:f9:
3f:ee:31:0d:4a:18:6f:39:55:82:52:17:1b:a4:39:
d3:75:38:d2:17:51:5b:03:02:4c:5d:50:73:80:03:
47:13:0d:a5:a0:de:ae:81:30:76:a1:c4:ba:df:eb:
e5:3a:bd:b2:44:06:7d:33:e9:a6:9f:d0:a8:20:11:
e1:73:fe:5a:d5:90:ce:fb:86:6a:04:6e:4b:bc:c6:
de:ea:fb:21:9b:c9:ba:44:aa:a0:34:f3:81:95:32:
45:cb:08:d1:b9:64:06:c3:49:5d:73:97:12:d9:36:
6a:28:1d:9a:a6:18:ac:be:49:9e:c8:6b:ea:47:a2:
33:43:bc:c9:46:64:62:70:cd:8b:1c:e3:f1:4b:b8:
ec:9c:ae:c4:c0:46:ab:65:7b:54:4b:15:55:21:dd:
5e:eb:22:41:7d:04:be:33:f8:9a:df:11:16:43:d8:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
9.148.0.0/16
9.152.0.0/16
9.155.0.0/16
9.174.0.0/15
9.200.0.0/16
91.238.70.0/23
135.137.0.0/16
153.58.0.0/16
153.63.0.0/16
185.22.40.0/22
185.141.116.0/24
IPv6:
2a07:23c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31715
Signature Algorithm: sha256WithRSAEncryption
73:3d:42:16:30:cd:0c:8a:32:e6:ab:75:eb:34:98:c7:0e:ae:
3a:27:3a:2b:94:21:c0:37:87:f7:c0:78:46:f1:e5:ab:2e:74:
a0:3d:d7:3e:3b:a4:7d:97:40:be:b3:d8:ca:c8:e1:88:e8:e4:
61:36:24:27:6b:a8:c5:16:08:56:62:5a:3b:20:75:9a:ed:f2:
f5:3a:0e:ae:3d:25:2b:a6:05:62:a9:a6:99:ef:df:43:45:1b:
11:f7:67:b4:52:b3:56:d9:28:04:7e:fc:58:b2:ea:0d:b6:5d:
d6:5d:82:e3:38:66:73:52:36:df:d1:37:65:42:6e:cb:f8:c8:
0d:0e:34:5d:13:25:d8:5d:16:4d:10:89:6b:87:3e:8a:98:2a:
4e:eb:5e:be:ba:be:20:3c:fb:66:82:b5:a3:8d:04:63:c9:8c:
35:5d:23:46:bb:b1:51:86:20:c3:4f:a9:10:b9:2e:70:7e:e9:
ce:6a:dc:15:e1:8b:42:4f:e2:55:ff:5b:05:91:1d:c9:a3:55:
c0:7f:72:93:b8:bf:d7:0d:25:72:33:49:d1:97:dc:d2:91:bf:
43:e7:41:7d:7b:f3:d8:6e:f3:f4:ff:57:16:4c:fe:31:c4:39:
16:86:76:3a:30:9f:88:76:62:3b:4b:d4:9f:26:f3:f3:50:b8:
4c:d0:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:10:36 2026 by rpki-client