Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
File: KqWx1eAQafqWlumUTlGRCLfB5NE.cer (raw, json)
Hash identifier: nsH2BMcZV31J+qDxgncHQO20FXlb6YWCMvECCGS83wo=
Subject key identifier: 2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA19C6A89CDD64F41671F523F122CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209041
IP: 81.21.224.0/22
IP: 2a0d:26c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:19:c6:a8:9c:dd:64:f4:16:71:f5:23:f1:22:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:fd:d3:e2:28:09:a0:59:c8:26:c5:4d:b8:
86:40:12:7f:5a:4f:39:38:f2:b0:23:2b:1d:a5:d2:
39:17:3c:eb:3c:54:7e:55:24:c1:ee:18:71:e4:20:
c2:e4:b9:16:76:37:8c:5e:24:d5:ed:9b:71:53:64:
3b:30:61:4f:cf:9f:0b:f0:75:ad:d9:b1:b3:11:01:
f0:16:c9:f4:8c:72:20:b3:ee:e3:db:28:54:19:ed:
7c:d7:26:36:67:bb:24:d9:36:5b:22:ba:6f:6f:19:
b3:98:cd:e0:a2:52:a0:1f:6f:92:7d:47:1a:90:82:
cc:3e:d2:15:08:7c:a0:26:da:d7:79:02:cd:ed:8c:
c4:e2:aa:46:9a:a0:18:3e:c4:70:b8:c0:a5:38:75:
31:87:a4:51:11:88:28:15:f1:8b:b6:4d:ad:37:e8:
8b:fa:57:d2:3c:8e:98:5e:82:f0:a7:88:60:38:5f:
23:48:4f:42:a8:38:94:32:ed:b6:82:6c:3c:94:22:
41:58:2e:bb:f1:32:37:54:d1:77:97:21:0c:11:20:
8a:b4:4f:4a:78:ac:61:35:90:eb:73:b6:38:50:4b:
41:24:27:b4:f3:da:16:9d:f8:ea:d5:c8:56:71:2d:
c1:04:b8:59:ba:df:90:79:a3:a6:26:75:9c:5b:c7:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.224.0/22
IPv6:
2a0d:26c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209041
Signature Algorithm: sha256WithRSAEncryption
01:d8:97:9a:05:92:9c:c6:7a:fe:78:4d:da:85:9e:5d:5d:d7:
0b:f7:d2:24:76:6d:db:ba:2f:1f:9c:8b:90:e3:c6:a4:37:0f:
16:c3:84:7c:63:d6:f1:53:68:fd:20:9a:fe:c7:a7:dd:71:1a:
2d:bc:0d:74:af:50:93:55:bd:4c:89:f0:5b:2b:30:2c:49:cf:
83:14:ec:99:0f:40:43:24:1f:d4:82:50:9b:12:91:08:e7:42:
61:a0:2d:0d:54:53:67:9d:8e:f8:eb:83:41:a5:59:65:10:4a:
05:3a:22:49:09:05:f1:92:61:d3:0f:1e:f2:be:40:1a:09:cf:
2f:1f:36:e5:14:54:4b:08:85:2c:e3:49:d6:c5:57:29:f3:40:
73:10:ff:01:30:d2:71:f1:25:18:1b:91:68:a5:2a:a4:3b:cf:
41:f5:9c:01:53:9f:40:77:17:0a:81:ae:62:8f:31:9b:67:a7:
1f:4e:f1:b5:51:e7:0c:1e:d9:e3:f9:cf:20:a8:66:02:73:e8:
51:3a:38:c2:4f:9e:00:27:5c:e0:d1:d7:5c:b4:b0:3b:ec:de:
ad:e9:21:e3:a7:bd:4f:0d:cc:28:17:99:10:98:82:60:98:5c:
57:90:a4:63:ab:a9:26:f9:18:3b:e9:f3:7b:4c:bd:7d:0f:73:
16:f3:49:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:41:45 2026 by rpki-client