Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer
File: 7gyjMIvjRbOYjAWiFhsWU1hxgyk.cer (raw, json)
Hash identifier: uqLKTwHm0GujW5nTTGu3RGrMKPRU6DGaqf4lx1cNTXQ=
Subject key identifier: EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E87D1142E935E7897ADBD234AB7E5B971
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 10:11:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204290
IP: 185.253.84.0/22
IP: 193.163.152.0/22
IP: 2a10:1480::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:d1:14:2e:93:5e:78:97:ad:bd:23:4a:b7:e5:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 10:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee0ca3308be345b3988c05a2161b165358718329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:1b:35:4a:a4:b1:4f:6f:b3:f0:cd:20:39:
40:4a:18:b6:d1:53:09:32:16:85:f0:6d:9c:54:7b:
da:f7:62:2f:db:f7:9c:a3:26:56:cd:8b:9b:20:33:
9d:5a:c0:e7:58:5c:9f:3a:92:71:9a:d0:db:d8:9c:
90:b9:ee:09:a8:61:26:b6:84:22:91:02:ee:9f:65:
30:1c:24:43:4d:ce:f8:49:c9:40:02:a5:a9:60:53:
f7:93:36:6d:52:dc:2e:bc:6a:39:1e:ac:bf:b4:fb:
74:49:ef:d4:2c:48:1f:a7:18:a0:aa:75:66:64:36:
af:ea:b8:17:67:da:85:46:5c:7e:a5:54:c7:11:e0:
81:64:97:d0:2e:e9:2c:1f:5b:2b:28:f8:db:2f:a7:
b2:d7:2f:8a:b4:fa:48:db:0c:52:36:e1:e8:4d:ad:
a9:2e:1c:c7:92:f3:0c:29:50:62:67:5d:69:7c:8a:
0f:61:23:ef:23:48:35:53:33:ae:5b:97:9b:23:00:
69:4a:c1:2b:ce:5a:11:82:3b:8b:2a:60:cd:4e:8c:
98:e5:c4:32:d8:5f:16:c7:d8:06:86:fc:b3:d0:09:
ef:d8:5d:49:5c:d7:be:67:41:c8:11:f5:c3:23:aa:
0c:38:e2:5b:b1:72:0e:de:0e:fa:5b:f5:f6:3d:1e:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:A3:30:8B:E3:45:B3:98:8C:05:A2:16:1B:16:53:58:71:83:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c00d60-5db6-4737-aa7f-fb6f95de1ed0/1/7gyjMIvjRbOYjAWiFhsWU1hxgyk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.84.0/22
193.163.152.0/22
IPv6:
2a10:1480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204290
Signature Algorithm: sha256WithRSAEncryption
2d:0b:bc:34:d7:2a:52:36:b6:59:4a:b2:5e:a7:dc:76:a0:3a:
03:1c:27:bc:99:f5:5f:f0:9c:3a:ec:69:5a:02:82:af:b7:b2:
17:5d:ea:d6:d0:0f:2a:3f:17:3f:aa:5c:fa:ab:6e:76:d0:c3:
04:6a:a6:65:21:b5:85:62:01:38:5c:dc:ec:ae:47:2e:49:4d:
3b:93:4f:65:0d:e6:7c:a1:9e:a1:25:b3:dc:40:1f:c7:cf:3a:
0e:a2:33:77:47:ac:6f:af:27:dd:4a:ea:58:6f:50:69:70:07:
bd:4c:ce:6d:81:0d:b8:e8:43:e6:32:2f:b6:e6:70:cd:85:d7:
07:85:6e:14:07:80:e9:63:f3:d7:bd:24:f6:fa:53:c4:54:91:
a1:ff:27:16:1a:49:89:35:14:d6:9c:c1:78:dd:f4:56:a2:e2:
63:eb:aa:2f:ab:dd:ae:c4:bc:b5:3c:0b:f8:6c:3d:31:f9:60:
cb:16:0d:6f:55:8e:8d:6d:25:30:ad:08:f0:2b:a2:80:64:85:
72:07:f8:b2:ca:78:e9:eb:fc:11:21:1b:11:f5:f9:22:5c:38:
53:64:71:0c:42:e9:16:8d:76:91:87:d6:50:9b:83:50:77:a1:
a0:56:4d:f3:b2:81:8f:b1:bc:34:43:0c:03:3a:76:4a:ef:0b:
f2:d6:0e:81
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZ6H0RQuk154l629I0q35blxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjAyMTAxMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTBjYTMzMDhiZTM0NWIzOTg4YzA1YTIxNjFiMTY1MzU4NzE4MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rgbNUqksU9vs/DNIDlAShi20VMJ
MhaF8G2cVHva92Iv2/ecoyZWzYubIDOdWsDnWFyfOpJxmtDb2JyQue4JqGEmtoQi
kQLun2UwHCRDTc74SclAAqWpYFP3kzZtUtwuvGo5Hqy/tPt0Se/ULEgfpxigqnVm
ZDav6rgXZ9qFRlx+pVTHEeCBZJfQLuksH1srKPjbL6ey1y+KtPpI2wxSNuHoTa2p
LhzHkvMMKVBiZ11pfIoPYSPvI0g1UzOuW5ebIwBpSsErzloRgjuLKmDNToyY5cQy
2F8Wx9gGhvyz0Anv2F1JXNe+Z0HIEfXDI6oMOOJbsXIO3g76W/X2PR5p/wIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFO4MozCL40WzmIwFohYbFlNYcYMpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2MwMGQ2
MC01ZGI2LTQ3MzctYWE3Zi1mYjZmOTVkZTFlZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYzAwZDYw
LTVkYjYtNDczNy1hYTdmLWZiNmY5NWRlMWVkMC8xLzdneWpNSXZqUmJPWWpBV2lG
aHNXVTFoeGd5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuf1UAwQCwaOYMA0EAgACMAcDBQMqEBSAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMeAjANBgkqhkiG9w0BAQsFAAOCAQEALQu8
NNcqUja2WUqyXqfcdqA6AxwnvJn1X/CcOuxpWgKCr7eyF13q1tAPKj8XP6pc+qtu
dtDDBGqmZSG1hWIBOFzc7K5HLklNO5NPZQ3mfKGeoSWz3EAfx886DqIzd0esb68n
3UrqWG9QaXAHvUzObYENuOhD5jIvtuZwzYXXB4VuFAeA6WPz170k9vpTxFSRof8n
FhpJiTUU1pzBeN30VqLiY+uqL6vdrsS8tTwL+Gw9MflgyxYNb1WOjW0lMK0I8Cui
gGSFcgf4ssp46ev8ESEbEfX5Ilw4U2RxDELpFo12kYfWUJuDUHehoFZN87KBj7G8
NEMMAzp2Su8L8tYOgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:34:23 2026 by rpki-client