Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
File: 7XQkmGl8kYnDAaFsiAh6lx_boPY.cer (raw, json)
Hash identifier: A5MiLAR9uxV9GDzlZWHBBcDr2B02Tk/TNFi5riK999k=
Subject key identifier: ED:74:24:98:69:7C:91:89:C3:01:A1:6C:88:08:7A:97:1F:DB:A0:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1196B8B1F05B67D71BE96D5576FB1DDDD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 02:50:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208251
AS: 208688
AS: 213350
AS: 213352
IP: 45.87.108.0/22
IP: 2a07:9ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:6b:8b:1f:05:b6:7d:71:be:96:d5:57:6f:b1:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 02:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed742498697c9189c301a16c88087a971fdba0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:ba:d4:b6:e1:ad:c0:45:d0:56:ee:76:e6:
39:5b:21:9c:ca:3f:0d:92:43:40:48:06:9e:5d:69:
63:3c:0b:41:47:b4:38:9c:bf:d1:78:9b:39:b9:c8:
4d:1d:e1:2a:bb:0b:73:15:b0:b1:32:6a:da:35:7d:
c4:7a:85:8e:3a:00:60:9a:56:66:c1:53:00:a2:ec:
18:5e:75:35:dd:33:58:39:ab:ba:53:2b:59:a6:66:
07:66:0b:ca:c5:6c:79:fd:48:30:b6:2a:22:6f:21:
50:6f:e6:e5:26:21:36:16:c8:eb:88:0b:ce:96:ff:
1b:ac:18:dc:51:cf:fa:8c:f2:b0:7a:43:1b:40:76:
18:0b:50:90:66:44:b2:fe:ee:7c:b0:78:7a:ef:c4:
2a:77:b6:2d:77:63:b1:e9:59:0e:0c:a6:d9:20:e8:
38:b8:8a:94:33:ca:b3:02:ed:b6:f2:70:b3:c4:ff:
44:c7:c5:b5:cc:cc:d5:ea:20:96:b7:20:b4:9b:4f:
13:bf:ae:21:6a:e1:36:5f:83:59:35:bf:02:fe:1d:
5a:54:5b:da:43:d8:35:8e:0b:2a:31:ff:1e:c7:66:
8e:9f:6e:5b:83:98:4c:3d:c7:02:1f:da:19:e9:69:
5b:05:ad:00:0f:0b:6f:90:58:95:9f:b9:c1:65:4f:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:24:98:69:7C:91:89:C3:01:A1:6C:88:08:7A:97:1F:DB:A0:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.108.0/22
IPv6:
2a07:9ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208251
208688
213350
213352
Signature Algorithm: sha256WithRSAEncryption
5e:bc:e8:71:e4:bf:92:57:af:49:0a:52:93:14:5b:a1:37:3e:
18:cb:64:54:a0:6e:b6:d1:26:a6:9c:ea:6d:5f:43:b7:1a:9c:
ec:d2:cf:27:84:83:1d:9d:39:ad:c2:1b:68:da:ca:f8:74:14:
c7:3c:a6:b2:2b:bb:54:c1:47:bd:8b:ee:cb:eb:55:3a:0d:e5:
06:21:01:f7:00:30:0c:f6:21:43:9d:68:99:7d:61:59:ac:9a:
f3:bc:7d:8b:28:49:9b:d0:79:45:2f:25:f7:13:9e:c1:7f:be:
c1:e9:d9:c9:72:31:1a:22:c1:be:b5:56:b9:12:61:7b:58:a2:
7c:28:9c:6f:5f:f1:13:3c:40:3a:45:0a:50:c3:5a:70:cd:96:
08:7b:34:42:f4:56:d7:88:3a:ee:78:8a:39:f3:74:1b:cb:9e:
9c:40:cc:21:9e:8c:c1:5e:1c:57:64:1d:ac:86:bb:98:18:40:
87:58:4c:29:11:0b:9c:a8:36:cf:40:5c:9d:90:5a:d5:81:04:
8a:f8:c3:5b:35:0c:8b:0d:66:aa:05:e0:72:f7:76:f8:39:d4:
6e:ca:0b:cc:72:47:63:31:db:6b:37:bf:fc:eb:33:52:ea:09:
31:45:0b:ee:ff:90:fe:78:ae:e2:18:74:4b:82:85:06:48:f4:
c9:47:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:14 2026 by rpki-client