Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
File: 7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer (raw, json)
Hash identifier: und6qCVak4oQLwtjzoKB63SXhzicnvAyocZYBURXV98=
Subject key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1045E8244BBD7CCDD1231011A7F86FDA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 04 Oct 2026 00:44:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8203
AS: 8551
AS: 51606
IP: 31.168.0.0/16
IP: 46.16.136.0/21
IP: 62.219.0.0/16
IP: 79.176.0.0/13
IP: 81.218.0.0/16
IP: 82.80.0.0/15
IP: 84.108.0.0 -- 84.111.135.255
IP: 84.111.144.0 -- 84.111.207.255
IP: 84.111.216.0 -- 84.111.255.255
IP: 85.130.128.0/17
IP: 109.64.0.0/14
IP: 185.145.212.0/22
IP: 185.187.32.0/22
IP: 192.114.11.0/24
IP: 192.114.40.0/21
IP: 192.114.64.0 -- 192.114.83.255
IP: 192.114.144.0/22
IP: 192.115.8.0/22
IP: 192.115.16.0/20
IP: 192.115.56.0/21
IP: 192.115.104.0/22
IP: 192.115.128.0/21
IP: 192.115.184.0/21
IP: 192.116.24.0/21
IP: 192.117.96.0/19
IP: 192.117.232.0/21
IP: 212.25.64.0/18
IP: 212.179.0.0/16
IP: 217.22.112.0/20
IP: 2001:4cd0::/29
IP: 2a04:f140::/29
IP: 2a10:8000::/27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:5e:82:44:bb:d7:cc:dd:12:31:01:1a:7f:86:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 4 00:44:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef023fdc2bba283513c6a587f907770b26eff569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:29:60:0a:25:ff:95:58:92:c1:35:28:14:
ca:5f:4d:38:29:f4:33:a3:37:d2:2a:4b:1b:77:17:
05:75:68:c4:2a:a7:2c:e9:70:ff:79:52:94:64:4d:
d4:3c:50:6a:86:1c:7e:7f:7d:c6:3d:0c:0b:1c:19:
8d:ae:3e:6d:bf:fa:04:1b:fc:a2:8c:a8:d5:19:7f:
f1:06:c4:df:14:70:b5:15:3d:f7:f1:1b:a5:63:b1:
a2:cb:08:c2:83:f0:a0:2d:9d:9d:0a:50:d1:06:11:
3b:45:8f:35:d7:6a:ad:68:7b:6d:ba:82:04:fa:e2:
d7:c1:33:1d:a2:4d:c5:2c:6e:db:de:d3:57:cc:86:
fb:ff:e6:90:bb:07:8e:6f:67:01:f8:08:b7:c0:00:
f7:18:cc:84:fa:58:43:11:60:53:04:3a:b6:c8:bf:
b5:a1:43:b6:86:78:07:a3:93:a6:df:1e:fb:67:54:
50:ef:e2:11:76:ae:76:31:e3:70:03:93:a4:fd:be:
02:8b:0a:a9:3f:a3:66:c3:1b:c4:8b:d3:42:26:d5:
28:89:0b:0f:27:7d:2f:90:ac:3a:51:25:95:7d:2a:
b7:33:0d:f9:88:27:80:3b:15:bf:d7:14:06:e5:75:
20:1c:a0:f2:05:3f:8b:a3:95:cb:37:98:ca:f8:49:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.168.0.0/16
46.16.136.0/21
62.219.0.0/16
79.176.0.0/13
81.218.0.0/16
82.80.0.0/15
84.108.0.0-84.111.135.255
84.111.144.0-84.111.207.255
84.111.216.0-84.111.255.255
85.130.128.0/17
109.64.0.0/14
185.145.212.0/22
185.187.32.0/22
192.114.11.0/24
192.114.40.0/21
192.114.64.0-192.114.83.255
192.114.144.0/22
192.115.8.0/22
192.115.16.0/20
192.115.56.0/21
192.115.104.0/22
192.115.128.0/21
192.115.184.0/21
192.116.24.0/21
192.117.96.0/19
192.117.232.0/21
212.25.64.0/18
212.179.0.0/16
217.22.112.0/20
IPv6:
2001:4cd0::/29
2a04:f140::/29
2a10:8000::/27
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8203
8551
51606
Signature Algorithm: sha256WithRSAEncryption
46:d4:cf:71:dc:69:1b:58:ae:77:c6:c3:7c:5a:aa:81:05:96:
c6:ed:cc:c5:9d:d3:21:d8:64:3c:b9:ed:22:9a:22:ce:3e:8d:
79:69:68:d4:3a:5c:ff:15:2e:97:96:0f:90:a1:20:03:a2:d4:
3e:93:f3:82:38:e8:e4:b7:ab:3f:88:33:23:7e:2a:a0:5f:09:
2b:5c:2a:79:71:7c:7d:98:05:4e:02:5a:4f:d3:c5:8c:65:e1:
7d:e7:dc:cc:13:85:34:49:13:0a:4f:c8:77:07:a7:24:06:2f:
50:7d:df:69:5b:0a:9d:01:c9:22:d1:01:48:b8:26:4a:99:35:
71:89:aa:22:39:25:d3:c5:9e:67:a2:60:70:7a:54:27:56:75:
d6:89:17:13:fc:39:51:c3:47:29:85:a5:a8:46:a6:52:9e:17:
25:54:01:84:5a:c9:02:96:4f:92:e1:e3:5a:fb:04:b1:18:38:
b3:6f:78:8f:87:4f:a1:59:0f:5d:15:7c:e4:cd:05:3a:8a:22:
c9:03:1e:0f:1b:cd:27:59:04:4f:4d:13:88:19:05:a6:a1:8c:
18:52:1b:dd:4b:90:a7:5b:24:d6:8a:fe:2c:58:7c:42:c9:8a:
3e:00:d5:84:71:dc:48:c6:ff:a8:88:92:0f:ed:22:c0:28:bb:
97:83:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:12:32 2026 by rpki-client