Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer (raw, json)
Hash identifier: hAkRcZi/IwyVh6aqd9Vq0sXT7u+C+7K48yGXeN719Qw=
Subject key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CFE3DC53582705EF2877173CE1574D52A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Mar 2026 23:59:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34135
IP: 195.160.236.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fe:3d:c5:35:82:70:5e:f2:87:71:73:ce:15:74:d5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 17 23:59:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f90588ca22897c69a102949a682f9f1a35835bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:6a:21:3d:61:02:b7:6c:76:63:b4:79:15:
99:5b:2a:fb:55:2e:2f:57:f6:28:2e:1c:0b:c3:9e:
43:6c:26:03:06:a4:c8:b5:16:77:26:a2:01:4c:24:
c9:59:99:53:47:da:08:a9:9f:ec:0b:8c:1c:2c:ae:
f6:ef:99:17:67:c1:4b:12:92:1f:ff:6b:68:dd:87:
c2:7c:e1:83:22:1c:08:97:bf:bf:44:78:96:6e:dc:
a8:ec:52:e6:24:35:a5:9a:17:32:9f:b1:bc:05:ba:
6a:c0:52:64:d5:c4:e0:03:27:25:1f:59:ae:ba:42:
af:81:71:0c:b9:96:1c:ba:de:64:77:3f:85:76:dd:
8e:14:00:be:79:49:74:aa:fe:06:e4:8c:e4:8b:f9:
da:dd:17:4d:63:54:bb:6b:35:13:e8:0d:02:13:04:
e1:a5:8e:eb:fb:83:a1:0c:71:59:e0:b2:1e:62:1a:
d4:17:fd:5a:bf:eb:85:a5:d0:f9:ba:ca:22:59:6d:
8f:b9:11:87:3b:cf:51:35:b7:60:5d:62:eb:07:33:
4b:15:c9:b6:b0:3a:c4:07:82:c9:2b:6e:3b:b4:41:
d4:65:ef:b1:ef:0d:47:33:d0:da:09:a3:36:c9:3b:
e9:4a:63:20:00:61:e9:49:71:a4:7e:c8:f8:7a:0e:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34135
Signature Algorithm: sha256WithRSAEncryption
58:ab:f0:3e:66:46:c4:ba:89:85:f5:a9:57:ef:fd:db:b6:be:
d2:39:01:e6:ff:c2:3b:fb:ff:b0:08:2a:08:84:52:78:65:b4:
4f:9b:ae:a0:f7:3e:9d:3d:2e:8e:8d:72:03:3f:25:bf:b6:f7:
37:f5:38:cf:c4:7e:9e:45:e0:08:e1:01:68:c5:98:d8:e6:71:
04:66:1f:1f:7c:89:cb:cd:fe:0c:27:99:8c:1e:1f:64:0f:36:
5b:42:03:64:d8:00:b3:ef:94:e3:01:c2:d0:f4:a4:43:fe:3f:
b9:df:40:79:d0:51:80:3d:b7:df:3c:8d:2d:2c:ae:2b:a8:c4:
26:31:64:56:9c:8f:76:f9:18:ae:64:c6:29:7c:c5:e4:f7:ef:
4f:ca:e8:9e:ed:f0:6c:13:dc:8f:53:00:b9:c3:6e:f3:b9:28:
86:88:84:74:34:4e:e7:f3:83:75:7c:be:c0:ac:3e:38:03:81:
36:2c:98:b8:1f:87:46:e8:a3:bb:05:d2:00:75:ed:3f:0b:53:
ca:66:4e:15:99:5d:42:67:49:1c:0e:f4:50:52:2b:a0:f6:7e:
b3:2e:03:8c:2b:cb:08:65:64:24:bf:a4:00:18:dd:9f:59:a3:
59:60:12:21:3b:3d:60:9a:d0:01:d3:06:60:8d:de:a9:32:05:
61:2a:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:36 2026 by rpki-client