Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
File: 7hw0csJazTRzZLfWMSYYqjUwy2M.cer (raw, json)
Hash identifier: 06QjiLbUuOrnpV9+3dhyLFdPoc+StMjvdAcb66BYqR8=
Subject key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E889E327461CAB996AE08C2D984B897F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 13:55:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 14.102.224.0/20
IP: 43.242.136.0/22
IP: 45.115.192.0/22
IP: 45.127.248.0/22
IP: 45.151.140.0/22
IP: 74.112.152.0/21
IP: 77.111.96.0/20
IP: 85.208.8.0/22
IP: 89.106.0.0/19
IP: 94.229.208.0/20
IP: 103.41.44.0/22
IP: 103.47.56.0/22
IP: 103.63.28.0/22
IP: 103.71.61.0/24
IP: 103.84.212.0/22
IP: 103.102.132.0/22
IP: 124.158.100.0/22
IP: 124.158.112.0/22
IP: 185.195.212.0/22
IP: 185.195.220.0/22
IP: 185.196.188.0/22
IP: 185.199.116.0/22
IP: 189.12.48.0/20
IP: 189.31.208.0/20
IP: 189.73.16.0/20
IP: 189.75.176.0/20
IP: 191.44.16.0/20
IP: 191.217.160.0/20
IP: 191.219.16.0/20
IP: 191.222.32.0/20
IP: 191.222.240.0/20
IP: 194.36.32.0/22
IP: 194.93.4.0/22
IP: 200.102.80.0/20
IP: 200.102.176.0/20
IP: 200.165.16.0/20
IP: 200.181.80.0/20
IP: 201.11.224.0/20
IP: 201.14.208.0/20
IP: 201.24.192.0/20
IP: 205.237.88.0/21
IP: 2a09:1e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:9e:32:74:61:ca:b9:96:ae:08:c2:d9:84:b8:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 13:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:66:1f:81:55:49:97:5c:34:5f:47:3f:b3:
bd:6e:d8:a3:04:11:21:ff:16:87:4d:84:6a:61:2c:
77:6c:78:e9:88:0b:9f:43:2f:52:f4:ab:b1:cf:61:
a5:a4:3a:65:fd:2f:83:d7:fd:0e:cb:8a:88:8a:b9:
91:0e:2b:dc:a5:93:d3:23:08:dc:43:5c:1e:ea:ea:
7a:e9:fd:72:2b:c1:2e:7b:a3:b4:0b:9d:e1:4a:fe:
ed:0b:82:46:b9:9f:2a:c7:ad:6a:4f:3d:9a:6d:af:
bf:bd:41:15:bd:ee:cb:4a:d9:23:09:77:af:7a:4e:
c7:49:e2:f0:7f:9f:07:7f:11:ca:2a:70:63:e1:0b:
ef:a1:be:7a:7f:08:30:50:96:c2:e6:fa:b6:16:02:
40:66:44:fd:f2:76:7d:bb:6d:45:41:21:22:ce:33:
13:00:d1:15:06:2d:ae:b1:2b:58:bf:d3:03:ff:1d:
1e:9a:3d:3e:b1:c3:68:74:53:64:c4:bf:33:d6:c5:
54:dc:17:27:d0:f1:4d:2f:62:e1:ff:c5:c6:ff:36:
8f:e4:74:67:f3:d6:f8:5d:f2:48:48:5e:7c:78:1c:
9e:10:3c:8d:66:4d:01:3e:f3:48:70:70:91:d0:6c:
d9:94:d8:34:d6:16:35:cc:78:2b:a3:af:16:20:90:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/20
43.242.136.0/22
45.115.192.0/22
45.127.248.0/22
45.151.140.0/22
74.112.152.0/21
77.111.96.0/20
85.208.8.0/22
89.106.0.0/19
94.229.208.0/20
103.41.44.0/22
103.47.56.0/22
103.63.28.0/22
103.71.61.0/24
103.84.212.0/22
103.102.132.0/22
124.158.100.0/22
124.158.112.0/22
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
189.12.48.0/20
189.31.208.0/20
189.73.16.0/20
189.75.176.0/20
191.44.16.0/20
191.217.160.0/20
191.219.16.0/20
191.222.32.0/20
191.222.240.0/20
194.36.32.0/22
194.93.4.0/22
200.102.80.0/20
200.102.176.0/20
200.165.16.0/20
200.181.80.0/20
201.11.224.0/20
201.14.208.0/20
201.24.192.0/20
205.237.88.0/21
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
72:26:c4:5c:a6:96:a2:69:88:00:b2:4a:7d:0c:bd:c8:6f:ca:
99:71:a2:8a:54:a7:be:1e:63:33:25:c9:3b:e6:94:df:ca:19:
86:cc:c2:bd:9a:03:bc:3a:17:33:de:f8:33:11:77:9a:f7:2a:
b2:a8:a3:6a:e0:e6:09:4d:a8:1f:96:f7:ae:4c:38:33:8c:2c:
d0:44:21:7b:9f:75:d8:ae:b7:4e:62:f1:12:bd:5a:30:57:1b:
97:7c:e0:e2:f3:3c:e5:14:25:9d:20:2a:e2:36:e2:b6:fa:17:
a1:80:57:2b:e2:8e:5e:e8:e0:f5:cf:c7:fd:28:8a:eb:9d:7d:
d4:6f:10:bd:c6:9f:96:36:0c:8b:b4:08:8c:a7:a4:ff:f4:07:
64:67:87:ef:73:0f:cb:5a:bd:7e:5c:a3:ea:d9:70:60:99:91:
be:91:4d:d3:c6:14:3b:83:7e:5e:2e:86:55:83:9a:26:27:30:
a4:85:18:95:2f:23:b8:17:ac:29:60:32:3d:20:34:f0:6d:f7:
1b:46:66:7a:2d:3e:69:89:04:d0:a6:d7:88:82:61:f3:72:c1:
4f:e9:6e:66:42:29:0b:48:47:89:2b:b5:3b:f5:90:ce:d5:e8:
ad:cf:56:51:e2:63:83:70:02:6a:b5:63:2b:00:94:86:77:0a:
ce:f2:ea:75
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgISAZ6InjJ0Ycq5lq4IwtmEuJfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjAyMTM1NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTFjMzQ3MmMyNWFjZDM0NzM2NGI3ZDYzMTI2MThhYTM1MzBjYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eFmH4FVSZdcNF9HP7O9btijBBEh
/xaHTYRqYSx3bHjpiAufQy9S9Kuxz2GlpDpl/S+D1/0Oy4qIirmRDivcpZPTIwjc
Q1we6up66f1yK8Eue6O0C53hSv7tC4JGuZ8qx61qTz2aba+/vUEVve7LStkjCXev
ek7HSeLwf58HfxHKKnBj4Qvvob56fwgwUJbC5vq2FgJAZkT98nZ9u21FQSEizjMT
ANEVBi2usStYv9MD/x0emj0+scNodFNkxL8z1sVU3Bcn0PFNL2Lh/8XG/zaP5HRn
89b4XfJISF58eByeEDyNZk0BPvNIcHCR0GzZlNg01hY1zHgro68WIJDvaQIDAQAB
o4IDizCCA4cwHQYDVR0OBBYEFO4cNHLCWs00c2S31jEmGKo1MMtjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzFmZjQ0
Zi01MWQ2LTQ1NDUtYWQzNi1iNGI4ZGIyMGIxZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMWZmNDRm
LTUxZDYtNDU0NS1hZDM2LWI0YjhkYjIwYjFmYi8xLzdodzBjc0phelRSelpMZldN
U1lZcWpVd3kyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJAYIKwYB
BQUHAQcBAf8EggETMIIBDzCB/QQCAAEwgfYDBAQOZuADBAIr8ogDBAItc8ADBAIt
f/gDBAItl4wDBANKcJgDBARNb2ADBAJV0AgDBAVZagADBARe5dADBAJnKSwDBAJn
LzgDBAJnPxwDBABnRz0DBAJnVNQDBAJnZoQDBAJ8nmQDBAJ8nnADBAK5w9QDBAK5
w9wDBAK5xLwDBAK5x3QDBAS9DDADBAS9H9ADBAS9SRADBAS9S7ADBAS/LBADBAS/
2aADBAS/2xADBAS/3iADBAS/3vADBALCJCADBALCXQQDBATIZlADBATIZrADBATI
pRADBATItVADBATJC+ADBATJDtADBATJGMADBAPN7VgwDQQCAAIwBwMFAyoJHoAw
DQYJKoZIhvcNAQELBQADggEBAHImxFymlqJpiACySn0MvchvyplxoopUp74eYzMl
yTvmlN/KGYbMwr2aA7w6FzPe+DMRd5r3KrKoo2rg5glNqB+W965MODOMLNBEIXuf
ddiut05i8RK9WjBXG5d84OLzPOUUJZ0gKuI24rb6F6GAVyvijl7o4PXPx/0oiuud
fdRvEL3Gn5Y2DIu0CIynpP/0B2Rnh+9zD8tavX5co+rZcGCZkb6RTdPGFDuDfl4u
hlWDmiYnMKSFGJUvI7gXrClgMj0gNPBt9xtGZnotPmmJBNCm14iCYfNywU/pbmZC
KQtIR4krtTv1kM7V6K3PVlHiY4NwAmq1YysAlIZ3Cs7y6nU=
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:44 2026 by rpki-client