Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
File: JQou0RQnyhZIM4Ur1JydtT1j5js.cer (raw, json)
Hash identifier: KGbGYdvw+6LEvUG7tvQSSRRfCack3/dyXweMu4gyvyY=
Subject key identifier: 25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA56F2707FDFD5621CBC19FF5B3CBBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212969
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:6f:27:07:fd:fd:56:21:cb:c1:9f:f5:b3:cb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=250a2ed11427ca164833852bd49c9db53d63e63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:12:5a:19:e8:cc:1d:78:95:e4:79:b5:0c:
76:df:80:7f:9b:7d:a0:7b:2e:b1:65:b0:18:92:82:
72:66:5a:68:ab:46:fb:72:ad:9b:61:5f:6c:16:69:
ac:df:b1:b1:3a:e4:2e:39:24:a9:5b:7b:ea:74:0c:
63:ec:d3:06:77:66:25:d8:a4:f2:02:3d:03:63:4a:
8c:5d:95:46:dc:d1:d3:18:5a:d9:a0:4e:2c:a9:37:
06:d3:0b:d0:16:d5:53:87:b8:6c:9f:e1:28:5c:65:
15:1b:0e:09:cc:51:dd:9b:51:02:33:fd:b4:7a:9e:
b7:76:f6:9f:8c:ad:ba:11:e9:d5:b5:8e:d5:1f:18:
ff:01:93:ef:e8:c8:61:60:5a:12:3a:a2:53:6a:b9:
93:a0:02:c7:ec:45:8f:4d:5a:d2:ee:0a:b8:92:ce:
cd:ca:4a:7b:6e:df:32:e7:aa:07:47:a1:7e:08:e6:
5a:b1:e8:95:35:c7:40:d5:42:1e:e9:c1:3b:2d:5f:
bc:c5:7c:f6:e9:d4:ae:89:9e:2f:b0:d2:fe:01:58:
7c:c9:46:a7:02:c6:ac:47:51:4e:dc:39:a2:27:a4:
1b:0d:52:82:9d:20:b5:65:5d:c3:6e:f8:f7:54:62:
be:9a:d7:2e:f1:b4:e0:3e:75:42:01:40:9d:d9:89:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212969
Signature Algorithm: sha256WithRSAEncryption
5f:fa:ed:00:0e:13:42:1e:22:3c:51:6f:4f:28:62:98:82:49:
6f:01:7a:ae:39:11:16:d2:79:bd:c2:3c:fc:c5:2a:d9:56:9a:
86:f5:a9:ab:42:0c:61:a3:44:a6:1d:8b:ef:44:c3:f7:d5:9e:
7a:05:3b:55:1c:d7:ec:8e:9f:cc:6e:75:93:bc:15:a2:9d:20:
ff:72:a9:41:91:ae:77:11:7c:93:45:8a:be:68:cc:0e:a6:f5:
6a:7b:0c:e3:62:b6:d3:b7:f8:68:bf:37:b7:31:b2:e8:c2:57:
10:ef:ca:19:c3:2f:fb:5b:49:59:67:4d:8e:69:e5:c8:8d:46:
1f:e5:de:44:2a:be:b5:3c:22:c1:72:72:ca:ca:cb:17:57:90:
7e:a2:d1:a9:12:02:fa:b8:50:75:a6:0a:5c:09:3f:f2:9f:02:
5d:68:fe:24:02:ca:64:f0:0a:c3:b5:06:e8:19:29:4e:6b:12:
80:d7:af:d0:41:10:5b:0f:32:d4:c0:f5:c5:ed:22:cf:9a:21:
c9:10:6e:a9:c9:a8:43:03:05:e5:08:a5:c6:cf:19:d7:a3:a4:
00:b8:80:ec:5f:c0:06:23:89:b6:72:05:cf:98:62:e1:f8:b8:
1e:ef:7e:84:79:96:65:5f:15:0d:4c:c6:a7:2a:10:70:c2:1c:
19:80:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:05 2026 by rpki-client