Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer (raw, json)
Hash identifier: TtPmt2PTI3p4k66qssEgzXGXJbfyXZgigbYqV8GE8KA=
Subject key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78351D3B96FADB4A531D06EFF61561BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202223
IP: 185.49.164.0/22
IP: 2a01:a0e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:1d:3b:96:fa:db:4a:53:1d:06:ef:f6:15:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:f5:37:eb:57:dc:d8:29:c1:62:d9:88:89:
05:4a:1c:c8:10:c0:01:5b:73:43:63:7b:73:6b:a6:
8e:bf:7c:77:da:5d:51:de:c7:4e:45:e1:04:4c:ef:
61:1d:ec:f2:26:4a:75:c5:8e:c6:3a:0b:24:fc:d3:
55:3c:71:65:c7:49:fe:7c:0e:22:09:98:c0:6c:be:
c7:be:a2:d9:51:71:c5:15:01:be:49:9c:2a:27:c0:
c0:4e:33:c5:eb:7a:a1:13:47:f7:cb:2a:ce:a0:e3:
92:f6:9b:db:52:8a:ea:32:36:77:6e:2a:cc:74:46:
49:69:5d:1f:7f:5c:bc:db:18:66:b2:44:d3:fc:f7:
84:10:01:3c:3c:87:fa:78:af:0f:84:f9:8f:2b:cd:
50:b2:aa:19:da:7f:3e:ec:b3:a8:49:07:8c:c1:ef:
7f:37:eb:99:ab:4f:12:70:a8:0f:35:eb:61:63:45:
6a:28:bb:fb:b6:4f:6f:88:78:2e:ca:5f:b8:46:ba:
77:a4:53:27:4e:2f:23:cf:9a:e5:70:06:d5:8b:a2:
70:09:dd:6d:f7:5c:ff:91:b3:86:8f:eb:e3:08:c5:
09:16:58:16:b1:14:54:0d:3e:70:3e:ec:f6:37:f8:
48:22:fa:ca:d7:cd:f8:f3:08:62:0d:0d:d7:53:13:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.164.0/22
IPv6:
2a01:a0e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202223
Signature Algorithm: sha256WithRSAEncryption
16:01:05:84:44:62:68:77:37:ca:07:87:af:fa:86:ff:5e:e1:
d5:58:bc:e1:b5:b8:5d:94:43:5b:f8:23:b8:f2:39:28:25:d7:
db:e2:43:44:2f:b6:96:8a:61:52:b2:02:61:be:89:d8:75:9f:
d7:c4:4d:f2:97:8b:57:16:96:6a:f1:3a:5a:55:e8:1d:d6:4b:
cd:16:bb:f3:92:00:db:72:63:2c:d1:3d:76:e4:d6:b5:14:a8:
4e:87:c5:75:3f:6c:53:20:ba:08:d8:6e:2e:ed:e0:56:7b:5a:
92:cd:11:12:85:91:3d:9c:83:a9:3b:15:b0:9f:97:6b:2b:49:
78:5f:6d:ec:7e:e2:43:c7:01:5f:e2:ac:17:94:0b:5e:61:dc:
ce:29:26:9d:38:ae:23:0e:eb:f0:9b:98:e7:a0:7c:5f:4d:f8:
84:dc:09:09:a6:9f:53:e1:cd:04:dd:3c:50:64:72:1b:34:4a:
40:b6:aa:f8:43:ac:a5:7f:44:28:fe:a3:3b:08:a3:53:ff:5f:
89:ab:3e:27:8e:f1:12:3b:f8:42:fd:66:ee:2e:39:77:ce:2b:
86:ce:17:36:a1:98:dc:72:d1:37:4c:6f:c9:b6:57:c4:0b:da:
38:b8:29:fc:63:70:46:90:c6:10:d6:ea:71:d4:ea:b8:5c:74:
02:37:c7:1d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt4NR07lvrbSlMdBu/2FWG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGZhYzZhMzJmZTRiYWE3ZDg5YjkxZWM1MTY1YTNkOTY2ODhlMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZz1N+tX3NgpwWLZiIkFShzIEMAB
W3NDY3tza6aOv3x32l1R3sdOReEETO9hHezyJkp1xY7GOgsk/NNVPHFlx0n+fA4i
CZjAbL7HvqLZUXHFFQG+SZwqJ8DATjPF63qhE0f3yyrOoOOS9pvbUorqMjZ3birM
dEZJaV0ff1y82xhmskTT/PeEEAE8PIf6eK8PhPmPK81QsqoZ2n8+7LOoSQeMwe9/
N+uZq08ScKgPNethY0VqKLv7tk9viHguyl+4Rrp3pFMnTi8jz5rlcAbVi6JwCd1t
91z/kbOGj+vjCMUJFlgWsRRUDT5wPuz2N/hIIvrK18348whiDQ3XUxPUDQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFED6xqMv5Lqn2JuR7FFlo9lmiOFEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzYyOWNi
Mi0yYjRkLTQ3NDgtYmIxMS1jOWZlMGJhMjg2NDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNjI5Y2Iy
LTJiNGQtNDc0OC1iYjExLWM5ZmUwYmEyODY0Ny8xL1FQckdveV9rdXFmWW01SHNV
V1dqMldhSTRVUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTGkMA0EAgACMAcDBQAqAaDgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMV7zANBgkqhkiG9w0BAQsFAAOCAQEAFgEFhERiaHc3
ygeHr/qG/17h1Vi84bW4XZRDW/gjuPI5KCXX2+JDRC+2lophUrICYb6J2HWf18RN
8peLVxaWavE6WlXoHdZLzRa785IA23JjLNE9duTWtRSoTofFdT9sUyC6CNhuLu3g
Vntaks0REoWRPZyDqTsVsJ+XaytJeF9t7H7iQ8cBX+KsF5QLXmHczikmnTiuIw7r
8JuY56B8X034hNwJCaafU+HNBN08UGRyGzRKQLaq+EOspX9EKP6jOwijU/9fias+
J47xEjv4Qv1m7i45d84rhs4XNqGY3HLRN0xvybZXxAvaOLgp/GNwRpDGENbqcdTq
uFx0AjfHHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:17 2026 by rpki-client