Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
File: Q664_1W9RlALJ9uc8d7CVidrK2o.cer (raw, json)
Hash identifier: n9Nz2zyr35pDPTz/gf7yOyApgyFrDxN7DbPGseTZk78=
Subject key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E6336673B22A72609C40A0C21329A447F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 May 2026 07:36:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204589
IP: 91.212.14.0/24
IP: 185.150.156.0 -- 185.150.158.255
IP: 185.246.30.0/23
IP: 2a01:f840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:36:67:3b:22:a7:26:09:c4:0a:0c:21:32:9a:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 26 07:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:3c:3d:e3:6c:07:45:5b:00:0f:5e:57:59:
d4:ae:ca:34:05:98:c1:3b:00:5c:25:b0:44:5e:b3:
e0:a6:9b:82:9e:70:25:60:91:99:b1:91:b6:6b:5d:
ad:54:84:34:a9:f1:20:02:58:73:32:93:09:95:5d:
f8:3d:24:fe:c4:a4:65:80:6d:10:ea:a9:f1:71:a2:
2c:bd:6b:58:5b:15:d0:12:be:67:83:2b:9b:9c:c2:
97:c1:b4:f9:8e:c3:ad:6e:3b:4c:d5:fd:57:54:fc:
ab:4f:d5:a3:df:99:65:27:6a:e7:61:75:d6:ae:a5:
c1:74:90:1d:7b:08:99:82:72:30:18:66:90:ec:5c:
ef:14:4d:ec:07:f6:0d:17:ff:11:bf:f5:c8:53:c6:
81:c2:bb:a6:9d:68:82:a4:b7:b8:37:58:64:3e:b1:
86:63:5a:2f:37:fc:97:65:d0:4a:9d:6f:b4:4f:f5:
ca:5b:16:ee:9b:60:66:75:ab:5c:61:cb:f5:cb:f5:
90:eb:3a:f4:7d:28:04:f9:99:75:11:b2:a6:db:fd:
eb:e8:2b:0b:cd:30:32:7e:00:f5:f4:1a:59:64:8a:
1e:76:34:00:a9:ca:92:14:27:1d:c4:85:c6:96:33:
10:06:5d:7b:cb:ad:be:b0:08:09:d0:eb:1b:0d:4a:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.14.0/24
185.150.156.0-185.150.158.255
185.246.30.0/23
IPv6:
2a01:f840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204589
Signature Algorithm: sha256WithRSAEncryption
5d:7b:6d:48:f3:63:05:84:ca:e1:68:ef:d0:d9:6b:dc:5f:f5:
7e:b2:a0:33:11:11:15:4b:80:f4:77:c0:f6:ec:ab:5b:1b:9d:
61:66:76:79:8b:1c:7a:60:61:cb:a6:47:98:62:50:fc:d5:ee:
72:c2:48:25:38:ad:cd:2d:70:b9:96:b1:5f:fe:82:84:62:88:
97:cc:f6:97:2e:ee:84:33:57:2f:a7:b9:fb:e0:7d:28:ce:1d:
b6:da:34:6a:df:5b:07:dd:55:9c:9a:2d:5f:2b:de:d2:1f:91:
ed:2a:26:52:01:4c:91:71:b4:f8:ca:40:62:d9:fb:85:ed:e2:
fc:be:da:67:f5:72:bc:c6:55:56:89:9d:75:e1:39:e6:53:4e:
6b:91:ec:e3:d0:7b:58:6c:3a:de:c9:c7:ef:73:6d:80:95:ff:
84:51:9e:32:db:ef:45:4a:10:55:d5:f1:fd:f2:9d:39:a3:03:
eb:6c:28:cf:5b:d7:dc:f5:17:05:c1:65:4d:2a:fa:20:27:c5:
b0:78:26:e7:1a:b2:33:c7:c0:eb:9a:cf:ee:a6:1f:21:e1:14:
e4:24:54:d2:e8:65:d7:db:2f:04:7d:b6:e8:31:ea:3a:54:17:
7d:63:da:8e:32:6e:77:1e:ad:97:6a:e6:28:5f:e0:46:dd:91:
c3:9e:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:05 2026 by rpki-client