Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
File: 2qHEXTvEY4ygPaHSpIM1GnITIOU.cer (raw, json)
Hash identifier: 5t6KdrWuB08G4kDNcRtOTiCNzZepxGvdULQ1CJjED8g=
Subject key identifier: DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EDA4237EF3278FF2A3B9A65DCD9FAD2AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 10:23:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204343
IP: 185.86.92.0/22
IP: 193.109.246.0/23
IP: 195.216.243.0/24
IP: 2a05:b7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:42:37:ef:32:78:ff:2a:3b:9a:65:dc:d9:fa:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 18 10:23:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:93:1e:67:7e:80:90:aa:0d:58:f4:a1:c0:
2a:62:3d:1e:c4:c0:61:f7:32:14:14:5f:b4:7e:55:
0e:0f:c6:0b:f6:08:b6:3b:c2:83:10:43:c8:ec:83:
60:ad:b2:88:57:aa:f6:16:f5:be:5b:73:a9:af:1d:
e0:27:bc:f7:40:04:27:64:61:ed:6d:c7:78:de:61:
51:c0:40:53:cc:b7:8d:63:5c:3d:17:a6:3a:0c:93:
a0:c3:ca:4b:b4:b4:9b:41:d1:b6:08:81:ec:10:46:
70:5f:02:e9:2e:8f:b0:23:99:59:ad:64:7e:37:c6:
46:52:8e:05:e0:a8:be:9d:1c:ec:ad:91:c2:6c:49:
c8:5e:cb:a2:8f:8b:5a:91:24:06:25:0d:40:cc:61:
04:b8:19:19:23:da:89:03:be:47:62:de:bb:5d:06:
86:2b:f0:64:bf:46:48:24:3d:d2:8f:68:01:92:ed:
c5:8e:88:c8:ac:b0:0d:dc:57:db:bc:3a:c4:5d:f3:
eb:b4:ca:61:ea:bf:1c:91:12:08:ef:5b:46:3f:10:
fd:93:22:ee:39:ae:1e:0d:24:25:91:27:79:bd:d8:
bd:5c:68:9a:fb:11:ec:fb:96:92:dd:ca:27:b1:d6:
c1:1d:bb:2b:4a:f7:bf:96:64:cc:53:a0:07:b8:df:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.92.0/22
193.109.246.0/23
195.216.243.0/24
IPv6:
2a05:b7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204343
Signature Algorithm: sha256WithRSAEncryption
67:08:f6:d4:1c:e4:04:1b:59:ea:18:3b:31:92:a5:a3:da:a0:
ee:0f:61:62:b0:96:ff:58:53:2e:29:ce:27:66:72:c8:78:72:
9c:37:6e:9e:36:93:e2:2f:90:58:66:f5:1f:17:37:58:59:4b:
84:98:e4:a2:75:10:65:cf:90:dc:33:32:f2:37:dd:2b:3d:85:
91:89:b2:34:19:5c:cb:09:91:04:84:36:89:b0:e2:2b:28:91:
02:62:bf:13:70:18:32:af:8d:da:e3:59:6f:bc:ed:fc:04:ce:
4c:bd:5e:da:64:ed:0f:5f:93:68:69:41:73:5f:fe:ba:d3:92:
9d:3d:a3:f5:21:98:58:cb:0a:ca:25:a6:7a:f9:69:e1:88:4e:
54:60:d5:3b:40:7e:40:d0:05:38:3e:03:21:46:2a:e0:90:3d:
05:11:ad:ac:4d:1f:70:b8:03:63:58:2b:69:2b:47:bb:37:c7:
c0:df:2d:4e:d5:57:54:53:e5:ab:74:54:05:c9:54:bf:dc:3e:
22:5d:40:75:3d:ef:db:ad:2a:ca:7e:1d:3c:46:04:f7:91:e9:
a9:ff:6a:c1:31:7b:3a:0b:58:12:31:6b:7b:01:30:4c:6c:08:
20:63:67:9f:66:e3:36:39:49:a7:e6:c0:76:a7:71:50:72:b5:
f4:5f:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:17 2026 by rpki-client