Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
File: h7kq03MXwzCg61kKFw0U9Rm3UrM.cer (raw, json)
Hash identifier: vzBq0bDp8Kefik2E0qDm3NWqXtCr5pOyvtDEryU2rp8=
Subject key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA19D7E2E8C1CE2A688282D383C800
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39337
IP: 194.126.160.0/22
IP: 2a05:c400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:19:d7:e2:e8:c1:ce:2a:68:82:82:d3:83:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:12:e2:00:83:9a:21:d9:9f:9f:af:37:6e:
02:9a:98:ef:7d:47:84:80:e1:34:42:89:50:c0:83:
90:23:7c:26:14:5e:2b:5f:a2:bc:70:72:35:47:57:
af:99:a5:2f:e2:5d:d9:a1:04:f0:ae:67:64:8d:d1:
40:94:1b:5f:cc:de:05:3d:31:c6:a6:27:c0:07:98:
0f:23:f1:63:b8:54:5b:ec:a1:9f:cd:bc:4f:b7:2a:
d2:3c:dd:bf:1e:6c:91:50:19:f9:9c:1d:e2:53:1b:
06:dd:bd:f2:98:bd:80:a5:a0:7c:e6:10:4d:d9:f1:
60:88:2a:25:97:fb:90:4b:6d:f8:7b:c3:3d:0e:b7:
5e:e4:9d:75:5b:1c:62:a9:10:58:83:45:57:4d:0f:
9e:25:fe:8c:5d:1b:1b:7b:bd:95:80:83:72:e8:d3:
b4:c6:44:df:c4:82:d6:6b:23:10:ab:09:2f:96:0e:
c8:ab:43:d8:26:ce:b5:87:ff:5f:36:07:3b:db:3c:
37:97:ba:b3:f2:1d:e2:48:c6:af:b5:7e:27:d8:63:
11:dd:64:4f:30:61:ff:1d:84:fb:89:91:39:45:75:
60:7c:87:00:ce:31:19:38:0c:14:dd:85:2d:51:b2:
85:cd:5c:99:db:7c:6a:61:30:a1:0f:f2:74:e6:6c:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.160.0/22
IPv6:
2a05:c400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39337
Signature Algorithm: sha256WithRSAEncryption
73:00:33:7c:28:7c:7c:3d:97:74:34:ae:17:b2:14:b3:14:3e:
4f:5c:4f:fa:34:7f:d4:6c:ba:8a:f7:60:ff:24:c2:26:69:a3:
94:53:62:9e:1b:83:50:db:7c:6f:b2:db:d5:fe:6d:3d:38:57:
c7:3a:6a:bb:8b:e2:b5:57:34:88:eb:c5:8b:01:2c:f0:c3:0e:
64:ab:2b:af:11:63:09:65:20:3a:8b:b7:66:1a:97:88:0d:54:
f5:ef:71:e2:06:0e:bd:bf:a7:65:a2:0f:d7:ba:15:3f:ee:b6:
f4:b9:27:32:e5:b4:34:8a:ed:59:a1:98:ba:8b:a1:d4:63:18:
26:81:d9:b7:d5:fc:77:b4:fe:c7:58:fe:4d:3c:b6:36:26:46:
17:5c:8c:0e:ae:12:db:f9:d9:36:ea:2c:d3:fa:32:61:33:92:
60:0b:7c:d5:06:d6:cb:6c:ca:3e:7c:0e:83:7d:31:57:8f:39:
76:6d:30:ff:e6:0d:e9:80:fb:68:a6:53:38:7a:5d:b5:8a:d0:
ba:60:29:49:9c:c7:f1:7e:25:fa:c2:94:ab:56:e1:54:8e:a1:
49:1c:bb:a9:e1:c2:4b:1f:08:cf:c2:23:13:49:a8:20:34:da:
02:c9:95:dd:54:87:51:12:e0:30:d4:f7:d5:08:47:ee:d6:c3:
5c:a6:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:57 2026 by rpki-client