Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer (raw, json)
Hash identifier: xvyr/S6bUQf9G+KkBeYQlSOOwZU6nGLbNSblCDpr9+o=
Subject key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E38369BF8CAC0F125EE8E62719F78AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204796
IP: 185.240.0.0/22
IP: 195.158.252.0/23
IP: 195.190.11.0/24
IP: 2001:67c:11f8::/48
IP: 2a0c:6880::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:36:9b:f8:ca:c0:f1:25:ee:8e:62:71:9f:78:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:10:a7:a7:76:fe:93:25:94:51:65:72:5c:
18:0d:be:d8:2d:e7:8a:f3:ad:e8:25:21:4d:45:aa:
1f:52:25:44:3c:ee:b6:d2:61:4c:3e:55:aa:c3:ce:
d5:0b:df:2f:a1:d8:ca:22:71:1a:79:b9:70:40:e8:
e1:f9:49:c5:f8:5d:a6:b9:e1:02:f4:9a:73:35:05:
3d:81:c4:eb:83:7a:63:0e:f3:0c:2d:83:c2:b7:d8:
55:81:e3:ba:48:5c:df:77:fe:00:7b:d0:76:58:4c:
53:88:d4:30:5f:4c:c1:6a:12:f2:e0:df:24:cd:d9:
33:83:2c:98:12:d7:02:5f:6a:a5:4e:77:19:75:bd:
0a:88:87:d9:29:bb:18:e0:fc:91:3c:10:96:42:49:
3a:94:3d:89:82:30:b2:82:0c:8b:12:e5:f8:df:48:
90:0c:46:b5:c0:9b:a3:7d:60:0b:6a:9c:07:3a:0d:
73:51:1b:4a:d8:c3:fb:48:de:de:fe:8e:29:85:26:
a8:6d:47:4b:42:c1:e6:ee:fd:ca:aa:49:94:d4:2e:
86:26:c9:a2:70:26:09:f2:ad:11:cd:de:58:01:fc:
82:d4:ae:d4:17:e3:5a:f4:87:85:fd:c6:f1:eb:59:
94:de:19:c2:09:a2:bd:5e:03:02:3f:ef:9e:79:ac:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.0.0/22
195.158.252.0/23
195.190.11.0/24
IPv6:
2001:67c:11f8::/48
2a0c:6880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204796
Signature Algorithm: sha256WithRSAEncryption
01:a2:97:f8:6e:2e:62:cc:9b:85:9f:1e:8c:9f:2c:50:a3:f3:
33:65:30:00:d0:2b:a6:73:d9:1a:25:69:8e:da:4c:bf:c5:27:
b5:46:5b:fb:c9:b0:7f:22:5c:11:46:bb:41:68:fd:fb:e2:95:
92:7f:04:3c:5d:ae:ff:48:6f:ab:08:a0:a2:7b:3f:1f:95:96:
a7:8e:b1:09:62:9b:0f:e6:d1:83:da:82:26:92:a6:9d:9a:be:
45:fd:7c:c2:a9:11:d1:ab:33:5d:b0:2b:41:85:81:72:35:ff:
6e:56:1d:af:5c:28:f0:b6:bb:6a:c9:b2:51:ff:07:f8:ca:c8:
8d:17:84:a6:5f:45:d8:57:8e:22:a8:27:c0:5b:75:ee:2c:9f:
e2:45:d5:b4:5d:41:c8:a1:4d:29:7b:f5:34:d5:1c:a3:90:12:
39:b7:00:30:3f:d8:86:c5:64:cb:c1:37:6a:b6:6f:2d:c1:e2:
bb:55:c0:7c:45:35:08:9d:5e:9d:1c:e1:3c:a8:7a:96:01:1d:
7e:64:e7:28:32:fe:b7:5f:6a:82:cf:5a:11:55:95:4c:a3:0d:
67:a1:33:ed:a7:0b:fe:fe:92:2e:ee:03:eb:dc:ec:b9:34:e6:
f6:c2:e2:aa:7f:31:60:27:52:0e:76:65:af:e8:a7:ab:bb:8c:
4d:35:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:24 2026 by rpki-client