Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
File: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer (raw, json)
Hash identifier: Zv9A/miMJkPHFR0EE/ge5k7g8Sx7BQlCj6xaA8Hr5sA=
Subject key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0561D3B4614078E78BF910E7AEA02E83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Oct 2025 06:08:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8247
IP: 213.232.128.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:61:d3:b4:61:40:78:e7:8b:f9:10:e7:ae:a0:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 06:08:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:ec:11:0e:bf:15:54:9b:92:ca:f6:d8:36:
e1:e6:59:48:1b:81:6c:8e:07:52:4b:62:91:1d:59:
65:84:23:53:29:44:60:bf:db:40:1a:a7:e6:4b:37:
6a:bc:5e:1d:00:9a:a5:42:a6:d9:47:c8:90:ff:c9:
38:2d:a9:18:3f:e4:1a:b7:90:bd:7f:c9:8e:d3:5b:
63:2e:08:c1:f8:ab:5b:5e:28:a7:c2:05:00:0a:72:
70:e0:69:45:71:c4:b2:59:31:28:bd:c2:4b:c1:9f:
6a:59:28:19:5d:e8:8f:31:c4:ea:25:1b:f4:78:85:
de:4a:50:ce:62:37:c8:94:49:c8:fc:b3:29:8c:1a:
9b:0b:f3:ab:3c:c8:90:8f:3a:59:72:8b:95:72:56:
f7:1a:db:6e:59:27:49:ec:2f:bc:0e:17:e4:01:ff:
e5:39:5f:22:76:ad:92:c3:68:98:a9:15:4c:c9:32:
ca:18:29:66:94:23:e3:d8:a3:75:0f:0e:43:78:c2:
3a:c3:5e:3c:2b:92:30:52:fa:63:71:b1:6c:9c:a4:
e6:a0:3b:06:0d:69:45:82:96:61:73:3f:48:fd:7f:
1b:b4:4f:54:c4:ee:83:48:c1:59:b5:5f:85:9a:66:
81:ef:3a:af:4c:ef:a1:78:9d:95:18:a0:3d:98:5e:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.128.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8247
Signature Algorithm: sha256WithRSAEncryption
1e:21:99:78:33:8f:40:08:a9:20:40:4b:1a:8f:48:11:5e:f0:
c6:ab:90:33:d1:fd:ed:bd:55:eb:e5:23:7f:a9:bb:2b:bf:28:
9b:82:78:1d:a7:2d:9b:26:c3:69:89:fc:c9:53:06:e9:6c:f0:
7c:d8:fe:61:b9:8f:37:b8:0d:27:41:bc:59:aa:f3:4b:39:a3:
cd:74:3d:ae:ce:41:b7:3d:28:84:b2:e0:88:a6:7b:cc:79:99:
ec:ae:ba:09:02:63:eb:f1:a2:a4:f3:c8:9c:7e:f8:ba:ac:74:
de:d1:b5:08:b4:4e:f0:3d:d3:dc:f5:13:21:4d:15:f1:12:a6:
21:df:31:40:8a:18:3a:79:d4:0e:fe:a1:d9:c6:6d:8a:7c:5f:
87:12:21:27:88:0f:12:a6:37:c7:3e:29:d6:a9:4a:e0:35:ec:
6a:98:a3:00:8c:c2:b1:de:f1:03:32:cd:20:79:a0:53:6f:35:
7a:64:95:23:e4:65:1c:ea:9b:e8:c5:6f:a9:2b:13:b9:a6:06:
51:f3:54:98:1d:9d:7e:5e:e2:56:1e:69:b5:64:3f:c0:a4:93:
10:a3:50:38:68:24:ed:2b:91:1d:ef:a6:2c:64:5c:11:0f:c0:
d1:24:d5:c4:6d:9d:11:55:fe:07:76:ab:d2:ee:70:1c:e1:8a:
42:3e:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:54 2025 by rpki-client