Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer
File: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer (raw, json)
Hash identifier: 6i0SPxp1aYufyH3vwfpF/sp9Y8kaptTdSr5j+AhRRVg=
Subject key identifier: 40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7759462DF420C1F6C90464B371B6C969
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201063
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:46:2d:f4:20:c1:f6:c9:04:64:b3:71:b6:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4007f1baed066bdbced1cf4355191bf8ac47db36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:ca:a2:4d:17:c5:9d:e6:55:0e:53:56:e1:
aa:3c:80:32:06:32:fd:a7:fd:14:75:fa:de:5b:9a:
d7:45:18:e6:a8:6c:09:da:02:46:aa:c7:eb:b3:3f:
7e:b1:20:cc:d4:ff:8b:78:64:3f:dd:04:af:a4:1a:
4d:60:64:d1:e6:90:e9:e2:08:96:5e:c6:80:e3:58:
fa:6b:cb:4e:bc:d0:58:43:e0:9c:a0:65:08:bd:10:
e5:84:5d:6a:f9:49:95:f5:5f:e8:bc:2f:14:bc:c3:
4d:8c:ba:90:c0:6e:a1:11:df:8f:d0:56:76:09:d8:
02:56:13:84:99:d7:c8:a2:e7:4e:47:a0:c6:23:89:
23:9c:99:4d:3f:5f:59:d9:9e:3d:39:5e:a0:ea:ae:
f6:3b:d1:83:5d:f2:25:89:ab:06:a1:35:e4:ff:c9:
fd:cc:0d:a7:40:a2:99:1f:56:68:06:81:c2:ed:ee:
c7:ba:27:0c:69:e3:59:1c:bc:43:1f:27:76:e1:18:
ee:36:32:dd:2c:2d:46:bb:0b:61:84:a1:f2:95:cd:
3e:4b:17:23:08:e0:b4:0d:89:ed:fb:20:02:69:c0:
7a:0b:77:dd:3e:c8:82:58:7c:e8:4c:7d:9c:06:f5:
6c:b5:e0:6d:b9:cc:35:f6:81:b4:af:c4:1f:e4:b7:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201063
Signature Algorithm: sha256WithRSAEncryption
52:51:5e:e9:23:24:6d:02:81:d6:fe:b4:1f:4a:82:3d:97:3d:
40:a0:d6:65:69:56:f4:68:13:d5:4e:3c:6f:82:fe:57:95:b5:
6a:c9:29:c2:da:d5:59:a9:4a:f4:25:c1:5b:14:30:75:49:cf:
29:99:4a:48:69:d1:02:51:5b:91:bf:4a:1c:3c:34:b2:c9:be:
d6:43:8d:94:df:55:e2:6a:32:c7:a0:19:95:b5:cc:b7:12:1f:
93:98:8f:06:2b:86:2d:77:78:f3:3d:22:3c:83:63:dd:7e:e5:
40:01:01:bb:29:9e:b5:e7:40:f8:86:5d:c4:78:4f:09:8e:bf:
ce:13:e0:23:1d:3d:25:2e:8e:98:03:61:94:30:d7:bf:c5:22:
ce:b7:e9:1f:7a:8e:53:6a:14:84:0d:00:22:65:5d:4e:25:64:
cd:b1:65:ac:d6:b0:d2:02:8d:8b:18:41:d7:99:37:f8:40:2d:
09:3b:f6:e3:70:83:32:ca:41:49:2d:58:7a:34:56:15:0e:32:
99:ad:61:03:16:7f:fd:56:a4:1e:f7:42:ff:c0:6e:9f:bb:d7:
b0:cb:45:d5:ff:f9:29:23:f6:50:cb:eb:f2:3b:a4:83:ff:64:
2d:ff:e7:0c:05:89:3f:1a:d0:3f:9b:e7:ce:1d:62:cf:2d:52:
c2:e9:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:33 2026 by rpki-client