Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer (raw, json)
Hash identifier: 9T6SEuRhbcmjX4rIN9ffEjls7NSkiFGkEYvF28orXtM=
Subject key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C9A5CB43E4D26CEF92E524C7DEDBBED60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 14:31:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34040
IP: 62.204.224.0/19
IP: 87.249.140.0 -- 87.249.159.255
IP: 2a02:17b8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:5c:b4:3e:4d:26:ce:f9:2e:52:4c:7d:ed:bb:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 14:31:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:13:72:67:eb:7f:4a:af:49:29:bb:e4:c7:
58:5d:b6:be:f4:48:2f:fd:5d:8b:30:bb:ef:80:58:
c7:d0:ee:ba:ea:f1:25:db:ab:53:32:00:22:50:e4:
16:13:e2:20:16:ce:2e:69:c7:58:fc:bb:47:f2:15:
c1:a7:27:40:13:85:c0:93:ab:47:ee:62:75:5f:13:
ec:9d:cd:a7:07:14:01:e0:5c:81:d0:5c:d3:92:1c:
38:d0:78:87:3b:6c:b5:b9:87:ea:07:90:d7:4f:68:
f0:fe:74:5c:4e:87:4a:70:b9:69:b3:ec:b7:37:47:
11:c4:68:2e:3f:38:ca:7b:7d:61:39:c8:0f:4c:57:
0a:27:93:d7:e4:d8:f8:42:37:de:b5:8d:93:3b:ab:
e5:9d:cc:22:c6:6c:0b:ba:76:1d:e1:ff:bc:da:9d:
05:5f:40:04:58:1b:c5:7a:f5:11:75:3f:27:b8:95:
89:60:b5:00:b4:22:23:dd:e0:69:6f:e9:d4:03:25:
47:ea:b8:e7:c4:13:51:87:d1:10:8f:f1:23:30:26:
3a:56:8d:b5:8b:e8:2b:3c:94:2b:4c:63:3a:08:d4:
17:11:18:0e:4a:7c:4e:57:df:4d:2e:7b:2d:fc:3c:
bf:f5:2c:42:71:22:e9:ae:a3:bb:1e:ce:fb:b6:f8:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.224.0/19
87.249.140.0-87.249.159.255
IPv6:
2a02:17b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34040
Signature Algorithm: sha256WithRSAEncryption
3b:1d:61:96:fb:ed:37:98:9e:f3:ec:03:f4:14:21:86:96:b4:
a5:ee:40:ac:c8:95:ca:34:a5:6c:a6:e7:63:cd:dc:e8:d7:5f:
a3:9a:2f:4f:75:88:8b:1d:bc:3e:f3:f9:6a:21:fb:75:c7:e2:
30:be:d4:06:f6:52:c4:f2:67:1a:dd:34:fd:31:2b:4b:50:92:
ed:30:6e:03:27:97:74:59:27:6b:ff:11:c1:6b:8f:95:49:2f:
d7:20:12:41:4f:70:43:9d:c9:d9:58:ba:e4:4d:bd:b6:47:04:
b1:b4:36:c5:51:84:d7:0d:f1:d1:b3:66:4a:e5:00:70:6c:bc:
f3:c8:32:1d:36:04:cd:66:21:de:02:af:f3:69:92:05:b7:b7:
7a:70:fc:5a:95:82:e9:5f:9f:a8:be:51:e2:80:00:e8:0c:4e:
bf:78:b6:18:e3:87:23:ce:61:f1:84:11:72:c0:9d:ae:fc:af:
5e:a9:c2:0b:a3:23:5a:5d:0b:6e:80:d6:d9:cb:c8:f9:09:6a:
b1:f3:cc:a5:e7:44:af:10:ab:5e:cb:21:92:68:4b:62:63:3e:
45:1d:8b:c1:a6:d0:56:c1:d6:c3:ff:ad:87:3c:5e:0e:32:c7:
6f:13:ab:4d:d3:68:42:93:62:54:09:d3:4f:14:d3:c6:4f:cc:
3a:ff:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:38 2026 by rpki-client