Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
File: eqYGEXu19-QWDvJo-fSqBFc4BEE.cer (raw, json)
Hash identifier: BX+unUN2wZTHh3ez/b7NtfE5AwMNy9mKR8fQO2Wuy64=
Subject key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CECC1B5327668C7DB0DE37D2F43DBDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:17:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43228
AS: 211637
IP: 185.190.104.0/22
IP: 2a0a:840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:c1:b5:32:76:68:c7:db:0d:e3:7d:2f:43:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:bf:12:86:72:91:34:4e:3e:8e:a9:b3:87:
96:66:24:88:8d:47:a9:e2:18:6d:4a:2e:20:da:e1:
0a:e6:98:76:8a:d8:ea:56:a9:3b:b3:8c:90:38:e5:
48:22:a8:a8:4c:73:96:d8:c7:55:22:86:83:13:a4:
eb:42:e8:2c:c9:f0:40:b9:c7:16:d6:0f:91:be:2a:
b0:10:58:c2:ab:9e:ec:c1:e8:6d:20:aa:d3:b8:09:
d3:05:60:43:a1:57:3b:a8:43:be:22:3c:0b:ab:1b:
5e:3e:54:f1:bf:1a:35:a9:ca:53:13:3f:d2:3b:f0:
99:f3:ae:66:c7:3b:18:bd:13:1c:f7:50:52:98:9a:
8f:59:65:a8:c0:2d:59:7b:b4:76:c3:2e:a4:c6:af:
7c:7c:a8:74:1f:92:77:27:ea:de:0e:66:ac:63:10:
e0:0d:49:fd:87:96:ec:d1:bc:78:a1:23:7c:9d:2b:
fe:f7:4c:dc:f6:70:6a:42:ad:8d:06:36:be:24:99:
3b:d6:f2:7d:98:f5:35:59:60:62:5e:12:b7:d3:07:
4b:15:8c:94:0e:a8:5f:70:12:eb:e3:cd:9a:88:61:
ef:bb:9d:43:3b:91:90:47:94:23:4f:ce:15:32:2b:
e3:0b:37:ef:63:db:dd:20:24:db:c9:6c:69:85:2d:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.104.0/22
IPv6:
2a0a:840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43228
211637
Signature Algorithm: sha256WithRSAEncryption
62:d5:c7:e7:dd:aa:67:6d:90:ab:c1:ca:b8:c0:90:ee:c6:27:
24:57:fa:f0:e7:e5:5e:75:18:c6:75:2b:cc:50:9f:19:70:62:
9b:de:25:f6:fd:a7:d0:eb:5c:b6:0c:0a:cf:78:99:d6:74:ed:
75:d8:95:29:d5:d7:c6:75:8e:a1:55:3b:93:dc:d3:ac:69:d3:
0e:b7:b5:64:39:93:c4:91:be:c3:60:f7:40:7b:5c:71:d7:f1:
b5:59:c6:7a:06:b4:21:97:1a:e9:eb:37:b0:ee:01:03:57:87:
e6:76:80:d7:14:35:44:30:ee:b1:4c:6f:36:59:ed:db:0e:19:
34:e1:87:e3:42:04:8a:00:23:66:79:49:4d:9d:34:7f:bb:4e:
70:b6:16:fa:b5:2e:32:9c:d7:e9:54:e5:00:7a:19:66:c0:21:
14:77:c6:dc:54:6b:b9:c9:ee:e2:ac:d0:a3:6e:a6:64:1c:83:
17:6d:d8:0b:98:c6:7c:71:25:ca:0c:53:26:59:b8:01:fe:93:
06:53:8c:4c:be:7b:66:16:c3:f4:1c:fe:ff:56:c6:13:b5:d3:
ab:17:ae:77:1d:4c:74:12:bc:2f:94:98:ba:8b:36:fc:46:36:
cb:7b:de:38:29:34:a0:25:9a:21:33:9c:c1:86:39:b1:89:15:
2d:fd:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:20 2026 by rpki-client