Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
File: p7He9pWIXq3lzMi0vioCuxYHnpw.cer (raw, json)
Hash identifier: o3EPg32dzFdyJzsZN6zJ8IJwqMbbs7jlCmCLBVTWu5M=
Subject key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D66B069985CD374D4C757E0ADD67A7177
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Apr 2026 06:45:30 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204648
IP: 173.255.144.0/22
IP: 173.255.149.0/24
IP: 173.255.151.0/24
IP: 193.17.36.0/22
IP: 2a07:ee40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:b0:69:98:5c:d3:74:d4:c7:57:e0:ad:d6:7a:71:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 06:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:8b:65:9f:51:c7:05:1a:de:99:f6:1c:76:
11:16:a0:75:9d:dd:1c:7e:64:d2:49:47:2e:67:7c:
e9:92:39:db:ab:c6:0f:6f:7a:74:31:dd:6c:b6:65:
70:6a:8c:3b:d6:e5:06:e9:7f:bb:4c:94:59:12:5d:
57:fe:5b:37:3d:7b:d4:e0:2f:16:43:fd:fd:8a:8a:
f5:db:a3:94:bd:d9:f8:7f:a5:ac:5d:39:b3:5d:cf:
a2:5a:1d:09:db:46:2e:4c:f0:9e:e6:f2:93:e8:3d:
b6:fe:0b:34:e7:91:61:25:ee:19:7d:a5:63:5e:b6:
97:d1:ed:ca:1f:93:8b:10:58:7f:83:c5:2c:c3:cc:
8a:54:69:2e:a1:ae:72:e4:31:09:6d:4e:bd:9b:e9:
06:6f:a9:01:1b:aa:11:0a:c9:f2:c4:9c:91:d5:c0:
4e:48:c7:8f:78:2d:fd:1d:56:7b:39:ff:9a:c0:94:
fb:22:59:2d:64:b0:82:10:7f:63:3d:d3:b4:e3:9d:
97:88:5b:66:7e:7d:ee:63:7e:9d:88:a9:e7:d7:01:
1b:76:2e:80:3e:ea:08:09:99:2b:a4:81:20:ad:46:
66:06:b9:b0:b4:2c:c3:6a:97:a2:a8:65:86:ef:84:
a9:50:40:61:a6:96:c5:cd:df:49:5a:e9:66:c0:2c:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.255.144.0/22
173.255.149.0/24
173.255.151.0/24
193.17.36.0/22
IPv6:
2a07:ee40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204648
Signature Algorithm: sha256WithRSAEncryption
52:a9:e8:2e:15:85:45:60:35:b0:71:e0:b7:00:3a:b7:30:c9:
22:b8:f0:47:5a:18:6a:f7:d8:8d:c6:40:e4:c0:3a:71:8c:07:
24:84:33:80:cd:fa:46:47:ff:d5:3d:78:05:0b:c7:7f:36:a7:
7c:69:91:1b:0b:83:69:35:7e:41:16:7f:3d:b1:02:2e:be:af:
f6:ba:8f:de:be:7d:c0:f9:cf:d3:b5:2a:a3:df:1d:b5:27:df:
ff:fc:a5:09:b9:e6:36:cc:a5:65:23:28:8e:9c:13:5b:87:2e:
9d:5e:95:d2:d3:3c:18:85:25:17:f5:0d:88:16:17:1b:0a:e1:
c2:b8:49:88:0d:a2:19:a0:7f:66:a1:31:ad:79:74:68:92:2b:
cb:b9:4b:2a:8e:68:d6:8e:ee:1d:cf:ba:38:ad:00:3d:32:29:
f6:4e:4f:f0:ae:fc:da:65:7b:91:c2:a7:be:df:6a:34:07:aa:
35:90:39:f3:88:6e:f7:c6:19:9b:47:a7:3f:77:55:28:1e:4c:
01:ae:83:dc:a4:54:fa:a9:49:d4:5b:79:73:34:f8:ff:f4:d6:
8d:50:59:f4:a8:71:ab:18:e3:2b:74:76:36:ed:6c:ad:3c:83:
b0:7b:a3:38:33:4e:0f:bf:08:68:c7:eb:9d:b3:7b:a4:c9:f6:
98:3c:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:54:46 2026 by rpki-client