Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
File: 7512O0ngJKe2oZ6vffuYkRqclMg.cer (raw, json)
Hash identifier: s1vrNhvXehRgSAAZMzFNagbB5VCIBQcSVpuFQV/mf48=
Subject key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A037E302ED6EA1D4C47519CDCAD6D410CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Aug 2026 07:46:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.182.20.0/22
IP: 2a0e:b800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:e3:02:ed:6e:a1:d4:c4:75:19:cd:ca:d6:d4:10:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 07:46:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:99:c0:16:74:c9:5d:3d:7c:08:24:28:8b:
ae:c0:94:20:25:16:10:32:fa:88:4e:1a:b6:2c:5b:
dd:a0:c1:cc:69:5e:0e:fb:9d:64:b1:d9:0e:29:45:
e1:3e:10:88:eb:da:01:fd:e7:5a:1e:db:d3:a0:e3:
1f:5f:d9:2a:6e:ba:b3:73:8e:19:6d:9f:50:31:b3:
63:d4:b6:fa:5f:53:93:eb:c4:42:a2:c4:67:63:ed:
16:9e:83:de:cc:87:62:34:29:f2:9c:d2:d4:f0:04:
c4:3b:71:0b:c7:9b:87:dc:fd:eb:6e:6a:28:61:05:
53:a6:f9:c1:83:8c:1a:f1:0c:e7:12:39:9d:11:80:
ef:12:7c:48:0d:ab:af:e5:b4:22:bd:5c:f7:cc:10:
b1:25:43:1a:a5:49:80:89:c3:3e:0d:b6:6a:da:5e:
cd:94:49:5c:09:88:71:4e:cd:f2:b9:5c:99:8a:7c:
f2:f6:42:1e:97:68:2a:f6:31:26:a3:44:63:ef:40:
d1:2e:87:0d:74:a8:1d:2a:a9:1b:a5:65:92:8e:96:
86:b9:7c:ac:a8:ee:1a:be:a6:ab:c0:6b:ab:6d:fd:
a2:2f:75:6f:63:89:ac:3e:40:c8:99:31:b5:9e:5c:
cf:61:83:45:69:e8:72:83:a4:18:3b:ab:70:3f:c6:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.20.0/22
IPv6:
2a0e:b800::/29
Signature Algorithm: sha256WithRSAEncryption
4e:09:41:f8:c6:00:a7:2c:61:06:4d:06:0b:99:7e:0b:b7:a6:
58:26:7f:8b:5f:6f:a0:5e:11:8f:cf:a6:07:92:33:38:3b:3b:
3c:c1:4f:80:ea:49:1a:8b:2d:62:97:b6:e6:97:24:47:0e:71:
7c:8b:0b:b4:19:45:87:a6:17:63:42:13:da:35:26:45:2d:04:
de:19:f7:7f:4c:a5:d8:fe:21:77:63:9c:0e:3a:8f:4d:d9:94:
13:23:1f:54:d7:3f:ce:28:c3:df:55:a7:6a:95:4a:ed:f3:79:
d2:ba:f5:1b:0e:b4:e5:ab:fa:68:0b:40:5e:2d:04:f7:a0:ee:
73:66:3e:65:58:98:c1:9c:54:2b:93:a2:02:28:c2:82:0f:e9:
bf:7d:ec:a6:c7:13:60:f5:4e:52:7e:a8:4f:40:4a:b0:ee:2f:
cc:69:5b:f3:a5:d0:4d:66:e4:37:7d:11:c6:8e:3c:e8:ac:df:
ed:93:09:8e:4f:e1:97:7a:be:f1:4d:f3:13:97:13:fd:80:05:
fd:a5:af:7a:1a:2d:e9:89:48:9f:95:c0:e2:b0:6d:3a:17:27:
0d:90:8e:67:ad:64:7f:a0:8a:db:bc:24:d7:b6:78:88:ee:05:
ab:00:97:4d:89:ef:19:6e:4c:7f:df:53:ea:a2:e5:06:c4:dc:
bb:f4:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:47 2026 by rpki-client