Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
File: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer (raw, json)
Hash identifier: ik+xvTHpFtzTloGziUxDs+HdwioVdLJ6nZrlR905WWU=
Subject key identifier: FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC08E8A045B57DDC5669AB01D6F140
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200675
IP: 91.194.200.0/24
IP: 138.124.188.0/22
IP: 185.71.176.0/22
IP: 185.232.76.0/22
IP: 2a05:3400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:08:e8:a0:45:b5:7d:dc:56:69:ab:01:d6:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faa401b6e9015d573a96dea26bf1974150a3911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:81:ab:e6:1f:df:a7:35:f2:2a:29:20:a0:
a5:4e:99:bc:68:76:0b:81:f0:60:68:c7:17:5b:bc:
70:c8:3a:0d:0f:64:ff:b5:e8:32:3a:cd:ac:75:df:
6f:52:ca:d9:c0:14:5a:d7:28:f8:75:b8:47:40:47:
fb:ec:c8:7c:b8:d9:0a:aa:46:c5:fe:f8:f2:6d:6e:
b0:f7:b7:88:32:17:32:04:29:0a:85:2b:01:45:9d:
5a:40:1a:9b:99:e5:21:4f:fa:9e:12:7b:60:d1:cc:
37:73:36:07:25:60:d4:b5:2d:07:dc:3c:aa:af:67:
09:6f:e2:9f:7a:e2:f2:15:47:16:50:c7:de:42:c1:
67:d4:68:43:dc:96:3f:9d:b8:a0:35:3b:f3:55:6f:
8f:b1:a9:9b:81:15:c4:20:4f:19:8c:fd:35:2f:5d:
25:5e:c4:b5:3b:67:11:f3:c9:0f:84:3f:ac:c4:3e:
63:d2:14:53:83:87:a5:4e:9e:59:3b:0f:e7:0d:90:
44:4f:68:0c:d8:7a:f8:bd:c3:08:45:08:0c:48:54:
4a:dd:82:d7:e2:a2:ab:75:10:10:e0:5e:77:1d:7c:
e6:c4:49:50:1b:9d:a7:cd:f6:8c:53:c3:6c:d3:52:
0e:3a:5f:7e:55:95:92:56:fe:3c:00:de:db:cf:1c:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.200.0/24
138.124.188.0/22
185.71.176.0/22
185.232.76.0/22
IPv6:
2a05:3400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200675
Signature Algorithm: sha256WithRSAEncryption
28:69:21:61:e0:4e:2a:62:d4:8d:2c:d5:d3:b1:8a:6f:d1:ed:
2a:8e:15:04:e4:80:2c:3d:6c:8d:93:66:b5:b2:99:1b:4d:50:
75:4b:4f:44:62:8b:37:69:c3:ac:54:59:be:35:5b:40:a1:e8:
39:b0:e2:1f:36:73:96:c8:ce:ef:0b:70:fd:1a:3c:6c:8d:50:
f9:f8:f0:05:c9:18:54:bd:95:c1:ec:9b:c1:8b:a4:6c:d9:1d:
d6:bc:c8:a2:f7:51:57:aa:5f:ae:13:34:37:fe:f2:98:f6:ce:
fb:92:d4:9a:a7:ae:d7:38:d9:42:f5:6d:aa:ec:f8:cc:ba:58:
8e:9a:4f:79:a4:fd:e5:80:da:0e:2c:47:65:10:23:9b:5b:99:
b4:68:4e:e3:54:dc:c1:27:f7:6d:d7:29:75:28:a9:f6:8c:cb:
a3:10:b5:f1:e8:60:66:8e:83:13:b2:f9:8a:e6:bd:94:87:82:
69:6b:88:f6:c1:ff:7c:a7:8b:c7:1d:02:81:a2:b1:16:d5:04:
e1:51:43:df:bc:a7:09:60:47:f0:99:0d:d4:ac:61:2c:63:b2:
b0:93:fe:85:1b:04:54:02:7c:a0:3b:85:88:98:91:c8:ee:d9:
7d:cb:04:be:cd:7f:83:4d:af:dc:ba:bb:c6:c6:64:ae:b9:64:
84:76:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:13 2026 by rpki-client