Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r7NIK47C52BYefhTpI26wGFF4bs.cer
File: r7NIK47C52BYefhTpI26wGFF4bs.cer (raw, json)
Hash identifier: csTJXGdGdRdv1TelOxmAbQW6MZRg+cvucntS0yWVaMQ=
Subject key identifier: AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019ED5F5F00F7FB6C69D7547323672AB934B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Jun 2026 14:22:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200165
IP: 181.224.166.0/23
IP: 185.79.128.0/22
IP: 190.123.0.0/23
IP: 2a05:7440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:f5:f0:0f:7f:b6:c6:9d:75:47:32:36:72:ab:93:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 17 14:22:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afb3482b8ec2e7605879f853a48dbac06145e1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:be:e4:f9:e6:a0:cb:aa:c2:95:a3:af:f4:
e5:2d:38:b0:1b:c9:c8:e4:58:91:b5:a3:d1:3e:06:
3b:a8:03:d0:aa:9c:e1:e1:b8:94:06:d8:3a:0a:e5:
f6:4d:f5:e7:e3:7f:ff:53:15:2b:0e:ca:95:62:c8:
88:ce:c8:86:1c:c5:7a:30:2c:e7:de:6f:0c:5d:00:
6e:2c:0f:f3:16:7f:19:e5:5b:0e:80:04:7f:8b:17:
fb:1b:01:af:cd:fb:f1:78:7b:19:0f:f6:64:29:34:
30:92:39:65:d5:cd:57:f9:eb:20:20:cd:b4:94:69:
7d:0a:bb:f8:91:9a:6c:4c:b2:52:ee:f7:56:05:b1:
21:2a:96:ca:29:5f:2e:40:e9:b6:db:30:57:00:e4:
cc:ec:dc:23:c9:de:eb:63:7b:de:44:50:03:d9:db:
bd:44:cc:5d:2b:90:20:55:f0:05:56:1b:6a:e5:6a:
90:be:da:7c:43:82:15:d3:37:75:98:1b:6d:ed:d4:
14:a1:e4:88:d5:8f:74:49:6d:e7:f6:83:d5:02:f2:
da:25:2c:75:c3:c7:b3:90:cc:99:9b:dc:27:df:18:
cc:f1:52:39:29:1f:a0:c1:79:c7:00:5a:f7:54:ef:
55:f9:d4:3b:93:e0:2f:c4:8c:33:3b:99:ad:69:84:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:48:2B:8E:C2:E7:60:58:79:F8:53:A4:8D:BA:C0:61:45:E1:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/77317f-5b2f-42df-8ef4-811d25ecb7d2/1/r7NIK47C52BYefhTpI26wGFF4bs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.166.0/23
185.79.128.0/22
190.123.0.0/23
IPv6:
2a05:7440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200165
Signature Algorithm: sha256WithRSAEncryption
19:c9:b8:04:00:a2:bc:2c:4c:9b:2d:81:75:31:3d:db:24:9f:
0c:7c:30:2d:3c:09:dd:6d:ba:b7:38:8a:f8:f9:28:8c:cc:ae:
3e:d5:e4:3e:50:22:18:e5:08:72:4f:96:af:ff:aa:e2:39:ca:
a3:d9:91:02:b8:d9:16:2d:45:a6:67:23:b4:72:ee:7b:73:d3:
09:c3:be:1e:f7:ef:6c:00:4c:fb:d2:8d:e2:03:27:af:60:f7:
25:a9:02:e1:f1:b9:3e:47:12:86:95:c6:8a:92:6c:42:46:ba:
8b:2e:54:ed:d6:37:e5:ea:ca:4f:28:0f:80:63:8c:0e:42:a1:
e2:48:75:f7:20:9e:bb:27:af:17:e2:d8:53:a4:d1:d6:38:49:
4c:3f:d0:cf:09:30:c0:62:f2:50:6f:a3:40:f3:58:80:01:d3:
7f:16:98:2e:f4:46:28:b4:69:e8:23:cf:39:98:c0:ac:28:43:
ae:85:ea:13:c4:be:94:ae:d3:3f:28:e6:95:7d:96:52:fe:77:
23:7e:0f:ec:ea:ed:24:10:92:c7:78:73:85:37:e2:5b:ff:00:
65:49:ba:f5:d1:5a:d3:42:1e:24:4c:08:d7:a2:3d:c2:94:27:
85:26:77:a2:ba:41:e0:64:db:c9:ed:94:ea:ff:68:68:c3:f2:
19:99:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:41 2026 by rpki-client