Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer (raw, json)
Hash identifier: K3dbH8dGXOoq+rs0toGSGsM6mOshQ0Q1M0RHVIFwgp8=
Subject key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED28CA7316EBEAC01A2D7BD223DA15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:19:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59953
IP: 91.109.232.0/21
IP: 185.78.8.0/22
IP: 185.248.220.0/22
IP: 2a0d:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:28:ca:73:16:eb:ea:c0:1a:2d:7b:d2:23:da:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:f5:8a:18:16:37:12:39:36:88:64:01:20:
d9:32:4f:ee:a4:e4:30:5b:8e:61:97:db:d7:ca:d2:
7b:4a:ef:c0:32:06:92:25:6f:d5:68:db:af:3a:3e:
10:ef:cd:0a:b4:44:e1:b0:e8:db:91:e0:63:04:df:
41:ea:1b:79:2e:09:d1:b5:64:87:e3:75:3f:e3:75:
5e:f3:5b:ec:e3:4b:b7:a0:02:4f:a6:ee:ef:79:f4:
f6:99:f5:23:d8:c4:f4:64:43:aa:f8:c0:4e:71:39:
27:d4:2d:35:b3:7b:ac:02:2e:25:93:65:54:ef:84:
6d:53:42:46:2a:ba:4d:ae:7b:96:de:06:e1:34:02:
b3:23:f2:d0:c1:4e:0e:aa:20:ed:3d:79:20:f8:d8:
e0:07:df:3c:bb:02:b7:09:05:79:a7:82:c8:4e:c8:
89:61:f0:7a:71:48:de:ef:e2:33:08:de:95:fd:6d:
33:23:5b:0d:3b:02:a9:7a:ae:35:2e:90:e0:ed:c4:
8d:9a:0b:d2:3f:1f:34:be:7e:0c:ac:f3:bf:ac:b2:
a0:66:61:04:94:51:ff:a0:1a:b2:e9:17:e5:f2:58:
80:67:3d:50:f9:ff:0c:c8:b9:f4:62:00:8f:a0:bd:
4f:94:40:36:a3:d0:b2:0f:69:0e:56:fd:92:97:45:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.232.0/21
185.78.8.0/22
185.248.220.0/22
IPv6:
2a0d:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59953
Signature Algorithm: sha256WithRSAEncryption
45:8b:af:2b:90:4f:e5:c0:bf:eb:ec:24:a8:b5:5a:36:e1:05:
e8:cc:71:e2:2e:bd:da:95:14:6d:18:ca:f6:ee:14:41:dc:4b:
e9:8a:04:c2:16:fb:ed:93:9e:dd:38:6e:6c:43:5a:ef:d0:4c:
9d:27:f8:75:24:d9:a9:2b:ca:a4:29:da:3b:a7:a0:f9:fd:83:
38:17:d1:a9:e9:d9:a7:b8:bb:c5:02:a9:1b:a8:05:78:c6:b4:
85:e8:d1:39:06:c4:0d:dc:16:b4:a0:20:38:17:5a:65:e6:9f:
3d:66:dd:47:8f:f7:da:86:f5:49:11:ff:19:86:e7:91:09:f0:
06:e6:6b:73:63:3a:e8:7e:97:06:42:8f:a3:af:5f:8e:9c:51:
6b:d4:6c:73:2a:db:5e:51:90:7f:f5:2f:bf:11:5c:fe:99:34:
c0:8f:eb:07:bb:fc:db:3d:fa:9d:12:46:ec:72:e8:6e:7b:a3:
68:c3:99:33:35:54:ac:bf:2f:47:36:45:16:27:0e:75:13:5e:
b8:ee:ee:d7:51:35:f1:7c:f8:65:c5:aa:47:70:bb:82:14:d8:
16:00:08:d5:20:2e:1f:7f:54:8b:2f:0b:bc:fe:73:c0:81:25:
61:89:b0:cd:f1:cc:0d:15:e9:54:6f:8f:81:72:e5:a2:b3:c2:
50:fc:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:34 2026 by rpki-client