Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
File: BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer (raw, json)
Hash identifier: zGa5bjVFKDcnsKBkxODQvk0ZJqhvGzzIeadUOUltBFw=
Subject key identifier: 05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F7F9FD7FFE6DFB823DEF34285FB7DD072
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 13:03:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204264
AS: 213287
IP: 185.23.176.0/22
IP: 185.109.44.0/22
IP: 2a00:7060::/32
IP: 2a01:a140::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:9f:d7:ff:e6:df:b8:23:de:f3:42:85:fb:7d:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 20 13:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=050afc9a98d7c1797169d753e6faf42219904284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:2a:c9:51:ab:86:6a:83:67:9a:71:65:16:
14:a1:74:64:ce:f3:af:f8:e3:ab:46:48:c7:53:ad:
86:43:32:50:8b:2a:d0:3f:3f:84:85:c5:2c:5f:83:
63:af:80:fb:7b:b1:04:5a:30:7c:ae:e0:fa:fa:0d:
ec:15:03:4e:aa:ae:46:af:9f:79:1b:96:7d:36:67:
2d:fa:2c:5e:d9:a6:f7:19:3c:33:c6:99:88:ce:e6:
48:46:d6:07:f4:d0:74:b5:fb:06:a5:6e:6f:8e:08:
c7:c0:f1:d7:a4:06:5e:d2:ee:1b:29:3e:64:02:38:
54:f9:f0:b5:d0:b6:78:a2:bd:f3:c5:42:ab:34:a6:
c7:9c:1e:8f:52:81:3c:f2:15:3b:c7:71:76:55:2c:
26:48:63:86:ba:1f:59:67:78:2c:62:3d:76:12:85:
91:50:33:09:28:4e:dd:10:83:fd:be:70:e0:43:04:
d0:40:70:55:07:ea:db:73:28:93:a6:0a:35:6f:46:
b7:df:3e:ec:d5:7e:55:0c:56:31:2d:c6:2a:2d:85:
f1:f2:63:05:44:12:b4:62:95:cf:6b:ab:ff:5c:9c:
6c:a9:e7:0b:b3:60:50:94:22:13:fe:c4:19:f5:b1:
ee:35:ef:97:f3:72:f3:1d:5d:b9:7d:d4:ea:59:f5:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.176.0/22
185.109.44.0/22
IPv6:
2a00:7060::/32
2a01:a140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204264
213287
Signature Algorithm: sha256WithRSAEncryption
82:21:3a:7e:ed:97:3f:8e:a4:56:41:c8:5c:1b:50:81:bc:a2:
d2:ce:ac:d0:39:1b:11:60:39:4a:3f:75:e2:49:89:e5:54:5c:
67:51:df:18:5b:89:16:20:b4:c1:7c:f8:c6:96:4d:e5:be:43:
b5:03:05:b8:36:de:53:fc:8f:aa:14:12:90:04:9a:ac:2a:16:
bd:f0:ec:81:27:11:80:8e:d4:52:07:c0:f8:30:6a:fd:39:ce:
e8:8a:d7:01:46:94:15:53:ab:29:3b:cb:8d:b6:ef:0f:51:36:
f7:80:09:fe:41:85:f6:9b:2d:22:13:fa:35:58:91:90:63:db:
ac:33:7c:4b:64:38:47:9d:a4:08:2c:55:48:90:93:0b:3d:3e:
70:85:a1:4b:ad:e4:bc:8c:84:e6:74:aa:cd:60:9d:00:90:dc:
f2:b7:07:57:dd:8f:7f:ef:4e:5d:f2:07:2f:2a:51:65:a0:92:
ca:d2:f5:14:2b:52:4b:2c:5e:de:b4:60:04:3a:d7:05:22:9b:
be:9c:6b:d7:cd:2c:63:35:08:67:80:8a:37:9e:74:ba:52:fe:
ea:7c:c8:24:0c:26:3d:62:cf:e6:4b:63:87:2f:da:63:9b:17:
43:df:e5:01:4f:1b:79:92:13:eb:b3:a6:5c:9c:e3:a4:e0:f9:
7a:f2:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:17 2026 by rpki-client