Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer
File: QQSvokfAz2tt091yE_kF8WvsnsY.cer (raw, json)
Hash identifier: GckkXAr3DfKJV+x+/81d0DHQZVlqgRoKzeX754ji2ys=
Subject key identifier: 41:04:AF:A2:47:C0:CF:6B:6D:D3:DD:72:13:F9:05:F1:6B:EC:9E:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F26D686D4CC29D938B852F8C6CDD2DE9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jul 2026 07:17:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35152
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:d6:86:d4:cc:29:d9:38:b8:52:f8:c6:cd:d2:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 3 07:17:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4104afa247c0cf6b6dd3dd7213f905f16bec9ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:94:7f:a1:1f:4e:15:a4:57:bb:2f:34:5c:
10:83:76:79:f1:96:1b:6b:22:65:5c:42:a1:93:0a:
6a:47:33:1b:66:5c:75:7c:ec:d1:61:a7:f6:58:4b:
90:75:b6:f8:11:f1:68:37:45:47:95:3b:e7:04:67:
36:f1:42:33:3d:1f:8e:1c:85:e4:8b:89:8f:10:21:
a0:a5:fa:fa:c2:8f:1a:5f:cf:74:7d:23:38:40:0d:
df:29:5c:c0:94:9d:21:7e:8c:89:f2:25:dd:3c:53:
3c:1e:53:cf:95:fb:41:b4:d7:b7:f8:69:a5:ac:08:
66:54:9e:50:3b:2c:59:4d:6e:02:be:f0:11:b9:0c:
43:8f:2d:ed:0a:9e:cf:df:3e:60:74:49:e7:7e:ba:
ca:cb:c4:a1:fe:3e:81:6b:10:02:59:b2:8a:1f:79:
8d:7e:70:5c:c7:8f:19:49:a4:0c:2a:72:02:c3:b6:
5f:8b:75:9c:0d:43:e9:8f:40:34:40:e8:77:fd:47:
cd:fd:a5:5c:28:63:5a:96:ef:cc:8b:2c:f8:31:9d:
f8:10:3b:16:42:6e:4a:7b:1b:23:32:97:58:35:3b:
a4:a2:61:5b:ad:76:d4:31:47:99:99:c2:19:4b:ce:
26:71:a0:1e:a1:8f:a2:70:d0:a1:71:e5:71:39:40:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:04:AF:A2:47:C0:CF:6B:6D:D3:DD:72:13:F9:05:F1:6B:EC:9E:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35152
Signature Algorithm: sha256WithRSAEncryption
5d:1f:93:1f:fb:44:a6:4d:22:36:d7:c5:11:bf:0d:f5:a4:ab:
12:ad:d5:00:67:a6:3e:80:5e:6b:e9:69:b0:28:48:0f:d7:89:
54:6b:27:83:bf:6c:6b:1b:fb:3c:c7:94:6f:91:a6:74:75:31:
ef:31:fb:f3:7f:06:01:4a:3d:a5:78:bf:b9:5b:d3:9a:45:92:
1e:5c:1b:65:67:ff:da:17:27:b9:a2:cf:73:1b:f2:8c:c7:64:
e7:84:7c:52:21:5b:29:19:d1:67:c0:f0:59:82:93:ca:47:65:
a1:2d:22:f0:db:4b:61:9f:32:c0:92:06:03:b6:65:08:ca:86:
81:75:53:9d:bf:21:e3:43:52:b3:f1:82:1e:f5:2a:a0:c7:3f:
90:4c:49:34:46:d5:e0:57:4d:20:29:ea:cf:ea:4c:19:3f:bf:
42:b3:61:a5:bd:3e:08:78:88:09:8f:a9:47:d1:99:a2:9b:e0:
de:e0:35:fa:ec:8d:8f:83:3e:20:bd:60:af:c7:7f:4f:fa:5f:
ac:09:e9:94:03:3f:03:0d:6f:41:36:c4:22:ed:0f:fb:02:c2:
7a:8d:90:e1:23:88:d9:0b:32:41:d9:9f:e7:da:c8:71:2c:bc:
70:f5:f8:f7:7a:05:38:dd:f5:e0:7c:6a:17:af:3d:30:d9:76:
08:ff:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:15 2026 by rpki-client