Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer
File: l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.cer (raw, json)
Hash identifier: 5po/LC2UnuqkrLPNed/k+aQFKzZ74aq1ggeWl+4n934=
Subject key identifier: 97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EA5D003C724AC571B234BAEF5EBF08B1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 Jun 2026 05:58:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 217.198.191.0/24
IP: 2a01:900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:d0:03:c7:24:ac:57:1b:23:4b:ae:f5:eb:f0:8b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 8 05:58:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b663e58da9b254c229e819dcccca889ec9ce4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:df:fb:e5:a1:2a:43:ff:80:51:a3:1d:bc:
ac:b2:70:1a:6e:34:7e:09:9f:2a:61:a2:f1:8d:0d:
76:e4:e1:a9:ef:dc:45:8c:f8:f2:69:c3:b1:a8:24:
b4:64:82:33:c2:e7:e2:ea:82:8e:e9:5d:e4:34:97:
0f:c2:43:bd:fd:01:af:5c:d3:81:f9:ad:45:7d:57:
5c:c5:e6:8f:28:28:24:d5:2e:bf:70:58:1c:dd:96:
67:e5:5a:6b:24:4d:2c:bf:48:8f:a4:40:06:ea:80:
00:5d:55:e4:c1:f9:80:17:f7:74:fc:df:92:7a:f7:
62:28:4c:fa:1f:83:1e:bf:d7:b9:06:9f:a9:4a:4d:
3d:36:07:19:4c:7c:16:ae:06:15:8a:f9:35:a3:4d:
21:5f:3a:ce:a4:98:a7:50:6e:1c:07:b9:d0:28:d0:
1d:d9:15:21:23:42:28:63:9f:56:6c:ed:d1:49:f5:
d2:dc:61:be:23:f7:53:4f:60:1c:fd:21:40:f5:cb:
88:cb:fe:f0:92:f3:02:5a:07:fc:bf:64:84:2b:85:
90:65:4d:5f:f9:09:48:3f:a4:1b:96:c8:de:fe:4f:
7b:39:bd:31:0e:7c:0d:9a:f2:cd:8e:1c:1e:c3:4c:
fc:36:c5:6f:02:73:7d:1b:9c:04:8d:ad:1c:5c:76:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:63:E5:8D:A9:B2:54:C2:29:E8:19:DC:CC:CA:88:9E:C9:CE:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/85668f-3bdc-4287-9204-9d5557c85ef8/1/l7Zj5Y2pslTCKegZ3MzKiJ7Jzko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.191.0/24
IPv6:
2a01:900::/29
Signature Algorithm: sha256WithRSAEncryption
41:8a:a3:52:e3:94:e9:3f:ba:03:a1:03:2c:a6:e7:b1:24:85:
f1:24:3d:2c:10:27:6b:9e:f1:5d:28:c2:f6:3a:5e:fd:33:15:
8f:9e:d6:3a:15:4f:58:95:66:1f:41:a6:20:20:70:4a:32:5b:
62:d1:ba:a9:ba:f2:25:ff:00:3a:90:25:4f:ae:2e:00:cf:d2:
5a:41:a7:1a:8f:a6:12:d3:ed:9a:71:75:28:87:e1:8a:95:eb:
7c:bb:b3:8d:66:0c:d1:f2:34:37:a1:95:d2:b4:c5:28:e5:e3:
68:22:fe:52:92:fc:4c:34:a9:2b:a7:fd:8e:ea:a2:2c:dc:93:
65:b0:4a:6d:dd:00:d4:45:7e:84:e6:87:f0:91:c2:cc:f9:0c:
4d:bd:9c:b4:09:f7:47:1a:e4:b8:9f:51:11:13:9e:60:32:eb:
ae:9a:7e:4c:0e:90:4c:a7:b1:e8:00:64:c5:91:60:f5:8e:97:
70:21:d7:c5:6a:be:9e:cb:12:41:ab:d0:c7:e7:1d:2b:a7:9f:
b9:2d:5c:5f:52:03:26:13:48:da:a0:1a:b5:f6:6b:65:d7:9d:
92:55:97:44:8a:44:64:80:72:7d:ff:9d:03:25:6d:37:13:b8:
d1:68:68:77:37:ad:ff:bc:38:94:90:ec:5e:68:a6:d4:dc:a8:
84:c4:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:04 2026 by rpki-client