Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer (raw, json)
Hash identifier: nsmZigzS5r+UyEXJvKIshbT8AfoyzUqItNvhFut7vFU=
Subject key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE6C2D46704F3DBF8F54F7DE146EED111
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 10:34:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210967
IP: 185.19.200.0/24
IP: 213.217.30.0/24
IP: 2a11:1b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:c2:d4:67:04:f3:db:f8:f5:4f:7d:e1:46:ee:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 13 10:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d90155c51ff2394da784a384aa717c76e3032c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:c2:db:b9:7c:8b:a7:f6:34:d8:47:b3:a4:
b6:2c:99:92:c5:9f:e1:fd:4f:61:16:13:d4:50:cb:
90:83:31:de:f1:6f:7a:8a:d6:93:5e:57:27:d6:09:
13:27:7c:1c:d6:a5:1b:3c:24:7b:37:7c:68:1d:3e:
6e:de:ab:ef:be:74:2f:94:3c:d2:38:97:5c:5e:27:
df:86:1b:2a:cf:f6:b3:05:24:50:80:25:66:7c:cf:
35:8a:0a:55:9e:23:79:fd:68:26:8e:71:c9:bb:21:
5f:f3:d2:52:b6:f6:b4:85:b9:12:36:93:98:20:5b:
a9:30:07:4c:9a:2f:8a:6b:67:76:c0:2b:b9:7c:40:
91:2f:a7:2c:fe:1c:77:c4:a6:46:c1:db:00:fd:2d:
ca:65:c8:0a:22:b6:ca:d8:51:77:9d:95:e9:a6:37:
3b:5b:cf:61:9f:09:f9:8e:42:dc:fc:41:bf:64:f1:
78:b2:bd:79:2a:56:71:b3:77:71:90:9d:0c:c7:0d:
c4:8d:cc:ca:60:c4:55:b9:f5:6e:50:47:8e:fa:ec:
d7:39:9f:2b:7d:91:5b:1d:b6:5f:13:57:5f:5f:75:
03:4f:5d:77:09:49:f3:97:dc:29:f8:1a:cb:94:1b:
f1:41:ba:e8:04:e2:6e:17:a4:62:7d:c5:ac:9f:8c:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.200.0/24
213.217.30.0/24
IPv6:
2a11:1b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210967
Signature Algorithm: sha256WithRSAEncryption
9d:f2:60:a8:f7:82:c9:ed:17:e4:98:62:82:5f:de:86:8d:ec:
a4:eb:6d:ea:0f:e4:ad:99:06:47:ad:56:bf:6b:ed:10:04:d3:
9d:a9:17:e1:58:48:c8:76:e4:0c:d9:70:fd:9e:dc:da:01:08:
49:48:a3:5b:89:df:e9:ff:22:a5:e9:76:f4:a9:84:26:37:0e:
59:80:de:09:cc:61:4e:d0:ee:9d:62:a4:6e:11:00:20:d0:7b:
e3:3a:d9:72:4e:b9:6a:e4:a7:e8:4c:10:50:0f:92:82:88:ea:
a5:36:3e:e7:c7:73:90:37:43:0b:48:29:ec:08:e0:e8:3a:82:
7b:e6:b7:d4:e8:cc:27:2d:2d:95:cf:64:40:7b:d5:fd:96:be:
45:2f:2e:35:27:3e:05:73:c5:5a:a1:f7:31:ef:26:4d:98:5a:
3b:a6:1a:dc:02:b6:4e:a3:69:00:91:d6:44:2c:da:7c:b9:6b:
6e:55:1a:ec:80:38:71:64:de:4e:d8:91:2e:64:22:fe:a6:db:
21:cd:d5:21:86:72:94:e8:92:14:46:b9:69:22:0e:8f:b0:5a:
a5:7c:0c:25:6c:ea:2d:39:2b:c0:91:22:5d:b9:44:59:20:7e:
bb:17:04:e2:d0:c2:e9:a5:91:33:ad:f9:a9:92:5f:06:17:1c:
ef:5e:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:39 2026 by rpki-client