Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer (raw, json)
Hash identifier: ygduCbHMFbIrmzU0B4w9fI1KjnKwqP2hMV86v7Jy4Zo=
Subject key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF125443E4946953A9936CD21E9D1BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:21:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214844
IP: 193.186.160.0/24
IP: 2a14:56c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:25:44:3e:49:46:95:3a:99:36:cd:21:e9:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:c8:23:62:e1:9b:c7:7e:3e:30:83:ae:29:
f0:34:d0:e3:33:d5:2b:36:7f:eb:25:18:77:46:13:
fb:2e:7b:3a:fd:71:75:5a:7b:cd:ca:3a:fd:ac:fb:
69:88:70:7a:14:36:eb:9d:a8:6d:f0:3b:f1:a2:3d:
04:a2:d9:6a:9f:e0:0e:8f:9a:b0:4a:7b:8f:44:3f:
51:4c:aa:f5:ba:b9:6f:62:e1:46:f8:f8:5b:be:75:
a7:e0:4c:62:e0:d9:8d:12:91:33:7c:26:40:e8:49:
eb:0f:ff:64:ac:ee:f4:85:d8:98:a6:03:c4:07:6d:
98:11:9d:f5:88:1e:0d:ea:d0:c2:d3:3a:6b:cb:f5:
5e:ed:76:93:57:41:96:68:1f:80:9b:d8:9a:a3:4a:
05:7b:ad:ed:5a:e3:e7:3a:e5:85:e3:05:5b:8f:d1:
a5:e8:7e:09:b4:e8:77:fb:59:7f:01:3a:d3:3f:d2:
91:1f:4e:6b:11:d1:d4:f0:b4:b4:ad:a4:b1:6d:7d:
aa:65:d9:44:4a:6c:ca:30:36:de:dc:c2:d2:91:e7:
2a:e6:39:05:fd:ca:e7:6c:36:39:62:0f:a0:1f:f7:
65:08:6b:0f:c7:da:40:b3:79:01:a1:3b:d3:24:b0:
84:c3:f1:66:77:2b:fc:61:84:d1:47:45:fd:03:0f:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.160.0/24
IPv6:
2a14:56c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214844
Signature Algorithm: sha256WithRSAEncryption
55:59:95:ce:96:8b:9b:bb:c2:08:32:a3:af:4e:f0:55:f1:59:
a8:41:99:60:f2:a1:c6:b5:d0:ba:c3:62:d8:ad:12:3f:9a:27:
fc:7c:42:f3:b1:af:86:17:c1:e2:60:67:d5:90:09:66:ba:e3:
65:23:c4:c9:2e:b8:99:ce:20:a7:f4:05:67:b5:94:1d:f6:4b:
8a:99:83:2b:1f:a2:00:9d:ab:0e:3d:1c:8f:af:22:4a:77:c4:
63:63:7d:6e:7a:7b:62:42:ed:72:ef:ad:05:cb:8c:92:51:3e:
52:92:dc:a0:39:bf:86:8c:2f:ee:00:54:01:e2:bf:ef:b3:e5:
bc:4b:ce:58:4d:65:95:ba:1c:4a:97:f4:e9:10:6b:2c:d8:c6:
77:cb:25:01:6f:47:13:18:4a:a8:ca:99:3c:26:02:3b:94:0c:
f2:95:3f:ba:ba:0b:49:35:94:19:44:1e:ac:bd:d4:48:d6:96:
fe:d5:c4:cf:89:9c:10:b0:86:7c:21:81:52:e9:9d:83:34:71:
dd:61:78:60:e6:fc:09:c2:cd:df:81:9f:8d:de:98:14:22:b0:
67:e3:7e:0f:db:c1:f2:32:2f:ae:24:90:8a:43:a7:44:ae:24:
44:5b:83:d5:fe:84:3d:da:9a:e7:54:72:fe:c6:6b:52:8d:24:
08:c7:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:56:26 2026 by rpki-client