Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.cer (raw, json)
Hash identifier: lmwJPslTHpdnKOZagO9i+Y7qLJEyb+ty4VkZn35zFoQ=
Subject key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EAAC380E23B686DD65B6F2544F11A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 30841
IP: 193.22.31.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ac:38:0e:23:b6:86:dd:65:b6:f2:54:4f:11:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:cf:74:21:01:f5:66:c7:e5:c7:3f:7a:04:
fa:45:63:c4:66:e7:b5:e1:cb:81:67:11:65:cd:1e:
03:4d:3b:64:e2:dc:94:bc:20:b7:0e:6a:53:e5:c3:
87:af:df:3f:e6:ed:de:92:fd:91:4f:c6:2c:0d:c6:
85:67:62:2a:92:1a:37:41:96:20:c1:35:60:b6:ea:
2f:6a:a7:09:86:08:03:24:a3:26:80:fc:45:7f:8e:
54:8c:b8:81:2a:0a:01:30:6d:79:45:df:f9:e6:da:
c0:9b:c8:30:9f:47:4b:13:61:df:aa:2f:fb:59:4e:
92:8c:0b:0f:80:bb:0f:18:d0:59:a9:aa:ec:29:3a:
3c:65:9c:4f:3b:d9:4e:f7:22:af:58:d9:0e:98:f6:
43:7d:95:76:8f:6b:23:3e:6d:ab:d9:aa:ec:c0:53:
e8:b9:fd:44:5a:34:38:99:8c:74:a8:b5:56:9f:29:
48:c7:d4:63:4c:49:38:40:a6:67:75:63:4d:c4:b0:
37:2c:10:a9:59:ee:49:f0:8c:f9:ac:55:f3:1d:af:
c0:d9:57:12:e6:e5:c0:a2:e5:5f:d6:0f:7b:c3:91:
4f:0a:0f:78:b1:24:d7:5a:06:8a:9f:1d:e2:fa:d5:
fd:35:0a:64:c2:0d:0c:74:3b:f8:56:74:98:99:c8:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.31.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30841
Signature Algorithm: sha256WithRSAEncryption
63:46:2f:39:23:27:9f:3b:b2:0e:a3:aa:70:41:53:e6:ad:01:
05:de:5b:32:48:97:b1:65:12:91:d7:f3:43:10:a4:55:f7:5d:
3d:3b:73:5c:52:37:6c:43:c6:8e:ea:a9:5e:ae:97:3f:23:b4:
30:f8:3d:2a:ea:96:62:de:a1:95:18:c8:70:d5:c9:95:ca:cc:
84:a0:ac:40:a8:cc:22:ab:45:8a:4f:28:7b:2c:8f:c2:9f:b6:
e2:d0:d0:c8:1e:ff:d7:bf:68:d6:51:2c:fc:5c:1c:39:74:59:
9e:d0:41:fe:36:52:15:9d:e2:56:59:b8:a1:c8:6d:ee:cf:e9:
37:a5:f0:9d:6b:c8:bd:1e:5c:35:7b:46:1f:85:a8:31:20:e2:
28:ae:60:08:9a:9a:29:7d:af:a0:18:81:fe:29:11:80:27:c1:
e2:af:d6:f7:e6:c2:30:2d:a6:1b:54:d8:3c:af:d8:f2:a0:67:
22:57:82:c7:7c:d1:3a:f4:5a:e3:17:41:f3:06:94:00:b0:63:
3d:98:ef:6e:70:8f:9d:0b:c2:f1:9c:dd:ef:c0:50:5c:ca:41:
4c:0a:de:e7:0d:89:ba:e8:f8:80:c7:21:eb:c5:59:ef:f3:77:
31:21:7e:d3:57:43:2e:44:80:4f:87:cc:91:66:2e:17:30:48:
bf:4e:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:58:26 2026 by rpki-client