Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
File: QNiN23rtct6j_41pztZTGlJ5Sqc.cer (raw, json)
Hash identifier: aoUnCAil1tJQky0NcFlliU+tJ6G5VkDuJW0a88B23Tc=
Subject key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79106F74C0AE7FF486FA10FAEF39DA53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211786
IP: 193.108.200.0/24
IP: 2a10:92c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:6f:74:c0:ae:7f:f4:86:fa:10:fa:ef:39:da:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:91:24:9b:0a:86:f6:63:f8:45:e2:0b:73:
c5:56:27:ee:98:40:b1:24:72:d2:5e:00:17:1c:e5:
a4:8c:b2:7f:39:61:b4:a6:b8:78:89:4d:20:11:aa:
22:08:9f:47:6a:0b:f1:6e:b9:2e:f5:91:62:a1:a8:
0e:6a:3d:82:6a:27:f9:29:f1:a6:a3:72:cf:aa:56:
29:1d:28:3d:e6:7b:3f:8e:d2:a8:35:10:b0:28:3b:
11:09:51:2e:d4:2e:0f:25:bc:1f:84:e3:31:2b:56:
37:6f:a0:8e:d9:8d:d9:a7:eb:cc:80:62:c7:b9:d7:
fa:d7:da:29:b5:19:91:8a:1e:41:a8:be:f8:f1:27:
57:0f:63:22:46:4e:b6:db:db:67:57:13:f8:0f:60:
24:97:a5:87:d5:e0:44:85:7d:67:a6:8a:54:e9:ea:
c1:25:1c:ca:61:67:34:e6:41:e8:f8:a3:64:0a:c1:
fb:f3:fe:08:0e:b0:3c:6f:3a:82:37:33:54:0d:85:
a6:63:a1:95:aa:e5:bb:a6:e3:c0:b0:56:5a:e6:c7:
24:76:4c:6f:50:e9:79:a6:e1:99:24:bb:20:90:a5:
3c:bb:4b:78:ae:ad:ea:92:9d:22:18:09:d2:6d:55:
42:7d:8f:82:2f:ad:f6:ef:fb:27:89:47:5a:45:00:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.200.0/24
IPv6:
2a10:92c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211786
Signature Algorithm: sha256WithRSAEncryption
6d:f8:1f:ab:b2:e3:f7:58:7d:02:96:6e:90:7e:b5:54:99:60:
f9:77:fa:89:8d:f6:54:8b:95:ce:8c:a6:05:92:0d:d7:32:23:
d4:8d:5d:18:51:3b:94:2f:42:5b:a0:a7:f3:bc:fd:fc:f3:38:
65:ae:c6:86:81:0b:8f:13:7f:80:0f:79:95:9a:d5:50:a4:83:
cb:33:1c:cd:05:78:42:24:7a:57:0c:c4:83:8e:eb:ce:0e:c2:
68:7b:19:3f:d6:75:74:a2:f8:f5:56:de:16:12:91:a9:89:58:
71:31:62:76:2e:f6:06:31:af:ca:4d:cd:21:ab:9b:16:8b:6c:
70:67:cc:09:32:f6:c9:43:e1:92:25:1b:e9:4c:41:e1:f4:bb:
0d:95:33:fb:7c:b8:6e:fb:a0:fe:93:6e:f9:69:13:84:be:ac:
24:d3:4a:fd:22:45:06:2c:9d:33:06:1f:3e:fa:4e:24:16:09:
b7:ba:39:6e:24:e3:f3:1e:22:87:fa:a1:7e:6f:67:a7:3a:41:
56:db:3f:ad:46:47:4e:89:bb:fa:07:d9:32:5c:31:b8:53:e9:
f4:d0:20:ad:c1:64:06:ea:a0:6f:1b:2d:be:1c:ff:58:37:e3:
f7:04:92:e0:fb:fc:8c:57:c8:68:d6:ac:35:36:1b:03:0d:5c:
57:4b:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:44 2026 by rpki-client