Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.cer (raw, json)
Hash identifier: BLh573h40G0353JSZK6qZZ5whuDYVJ0Mvw0O1wr8uSI=
Subject key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0385450A90EAB36BF9DE55D33ECD811A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Aug 2026 09:50:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62068
AS: 218878
IP: 5.182.208.0/22
IP: 45.14.224.0/22
IP: 45.87.41.0 -- 45.87.43.255
IP: 45.148.120.0 -- 45.148.122.255
IP: 62.68.71.0/24
IP: 91.217.200.0/24
IP: 91.226.227.0/24
IP: 91.230.49.0/24
IP: 146.19.248.0/24
IP: 185.46.70.0/24
IP: 185.224.128.0/22
IP: 185.244.36.0/22
IP: 2a0d:2400::/29
IP: 2a0d:2780::/29
IP: 2a0e:16c0::/29
IP: 2a0e:1740::/29
IP: 2a0e:2000::/29
IP: 2a11:b240::/29
IP: 2a12:a8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:54:50:a9:0e:ab:36:bf:9d:e5:5d:33:ec:d8:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 09:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:4b:0b:ac:dd:1b:97:aa:95:c8:4f:e9:49:
72:e7:92:ce:ba:d5:5a:f3:2b:28:3e:d4:68:d8:7a:
b7:42:97:f2:d4:7c:ba:a9:78:dd:5e:30:d2:13:81:
4c:6a:e8:3e:70:6b:7d:8a:52:24:30:f8:f1:22:0c:
ab:a1:bc:50:61:be:4a:2d:a2:8b:1e:65:cf:07:57:
6f:7b:c1:c8:31:2a:0d:fa:27:5f:dc:9f:33:97:aa:
59:e9:d3:4f:59:95:6d:35:a4:68:74:1d:e8:76:85:
6c:ee:40:e0:1e:42:f3:0b:75:80:68:f7:0a:ca:fb:
e1:96:88:99:cd:cf:50:d6:a0:96:30:82:53:06:14:
b8:3c:97:f3:10:4b:ad:4c:81:d8:e8:86:e2:62:57:
5e:ff:e7:fc:b7:c2:d4:06:23:67:58:a2:10:7e:ae:
5d:ba:49:79:91:01:a0:a0:1d:1c:f0:67:ad:3c:31:
ba:33:e6:de:50:d7:44:31:18:ba:fc:87:54:16:94:
a2:45:63:30:5c:51:ef:e0:2f:6a:88:60:50:5f:b8:
89:0c:44:21:13:d9:f7:6e:6e:cf:ed:00:27:a2:8d:
66:23:41:4a:f7:a1:4a:df:92:01:a4:e7:22:cb:e2:
8f:5b:ad:d1:34:91:88:55:3a:94:37:cb:4b:c3:06:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.208.0/22
45.14.224.0/22
45.87.41.0-45.87.43.255
45.148.120.0-45.148.122.255
62.68.71.0/24
91.217.200.0/24
91.226.227.0/24
91.230.49.0/24
146.19.248.0/24
185.46.70.0/24
185.224.128.0/22
185.244.36.0/22
IPv6:
2a0d:2400::/29
2a0d:2780::/29
2a0e:16c0::/29
2a0e:1740::/29
2a0e:2000::/29
2a11:b240::/29
2a12:a8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62068
218878
Signature Algorithm: sha256WithRSAEncryption
61:03:6a:e9:f3:17:db:e4:60:8e:6a:28:0d:65:57:32:b5:e2:
c6:64:b8:1e:a2:68:73:da:e8:3a:50:2d:02:7e:b7:9f:2a:1d:
98:03:6a:ad:71:7c:23:8f:0a:2d:24:76:3f:6a:c9:bd:0a:66:
d2:95:57:de:ad:f1:2e:c4:2e:28:6b:51:9e:73:6a:45:4f:cd:
48:bc:0c:b9:ed:69:0b:5c:a2:da:dc:69:76:06:40:af:db:28:
d6:f2:3f:8d:27:12:ad:3b:e6:8a:dc:53:c5:3d:d7:f3:45:3c:
9d:ac:d0:26:bb:f6:fa:6c:10:12:b2:a2:78:36:47:c2:2c:fc:
db:fd:45:5e:29:bb:27:b3:dc:a1:b8:1b:34:72:37:68:07:77:
05:54:8c:7c:b4:e1:90:6f:e2:83:71:cf:93:5c:a4:f5:da:0e:
fb:02:78:b8:67:b4:70:8e:d7:e1:1e:e0:b7:e0:9d:d1:9f:19:
f7:7a:1b:c8:85:70:e0:4b:0a:37:47:d9:58:ce:9d:9f:64:14:
47:f6:89:43:64:41:1a:4d:ae:99:d3:7f:52:b3:48:cf:35:6c:
b9:c1:65:9e:b2:72:89:15:0d:b7:bb:df:a6:4d:e7:e1:9d:c0:
7a:a2:9a:86:f9:cb:03:0f:45:6b:76:39:fd:5e:e2:e4:38:6f:
f4:e3:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:57:58 2026 by rpki-client