Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
File: QUZdOIpCMlXUiDLQc2m2vHcD6io.cer (raw, json)
Hash identifier: 8PWJWNJfy5fy7KquzoubWRBjpCFbxbT1tNn9Z+sZIaQ=
Subject key identifier: 41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199ECCEF04C01368A3FE169CF690C9E76B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Oct 2025 11:36:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42352
IP: 91.194.250.0/23
IP: 91.218.212.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:ce:f0:4c:01:36:8a:3f:e1:69:cf:69:0c:9e:76:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 16 11:36:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41465d388a423255d48832d07369b6bc7703ea2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:0e:74:e8:f1:50:dc:4e:9d:4c:b1:ac:47:
6a:06:7b:3c:44:a2:60:33:2d:31:e8:b6:3b:f1:b9:
8d:c8:d7:5d:34:04:d8:91:fa:fe:59:f2:11:bf:9d:
ab:91:bb:80:06:e9:66:65:3b:b8:57:87:dc:1b:05:
79:2b:17:8d:06:b6:25:8c:f9:1a:41:5f:76:ec:7a:
1f:68:d0:a1:a2:0d:7e:9f:df:4c:2f:be:6e:ce:46:
19:51:50:11:81:cf:74:5b:04:5d:ff:d3:0d:1c:15:
25:7f:c9:8d:03:90:5b:ee:bc:ea:a5:54:73:0a:39:
83:fe:63:9b:aa:54:0f:11:6b:35:e8:43:ba:22:ee:
a0:40:eb:a0:9f:6f:df:c8:e7:96:8b:de:9d:d4:aa:
ec:98:5b:e8:25:4f:e4:1b:94:da:7d:b5:a7:0e:55:
d9:38:85:d2:52:44:2d:60:6a:56:b6:cc:54:a7:fe:
3a:35:f0:03:30:27:4e:fd:2c:52:19:07:5f:1e:8e:
53:4b:da:ff:db:4c:45:f7:85:61:80:0a:93:9d:bd:
66:9a:74:d2:5b:91:0f:5a:99:0a:da:88:53:45:13:
ff:ec:ab:43:f9:ef:66:1a:10:9d:8a:b6:d4:4e:47:
2c:56:59:4d:4d:2d:68:24:d4:45:3c:d0:47:e8:c7:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.250.0/23
91.218.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42352
Signature Algorithm: sha256WithRSAEncryption
3e:14:b7:e9:1a:fc:d7:79:e1:db:05:42:0f:86:e1:48:a8:5f:
d4:86:97:d1:8f:d7:a1:e8:3d:de:e9:8e:ee:e0:4e:d6:0e:5b:
68:03:21:33:cb:3c:2c:8e:7d:c5:86:ac:64:dc:93:17:25:8b:
d1:71:a3:c8:0c:cc:1f:f2:b4:24:78:1e:90:24:98:03:f4:ed:
76:d7:53:79:0b:3a:e6:bd:f3:6b:5a:c4:67:c3:73:36:13:4a:
3e:b4:48:10:b7:a0:ca:1b:30:82:45:4e:1d:d4:6d:89:84:14:
fa:80:2a:79:cb:3f:a3:73:1a:9f:43:af:2c:ea:e6:eb:2c:f4:
5e:05:af:62:99:07:2f:5f:0c:ae:11:40:da:51:89:2a:d4:9d:
4f:01:e6:bc:59:d7:06:b9:54:5f:b3:81:63:94:cd:c4:30:da:
8b:08:21:f4:b9:59:e4:39:42:58:3a:b1:08:ca:4d:92:33:7f:
51:fb:15:ed:16:0e:ac:a0:2d:99:b3:94:f1:f6:e4:30:3c:e6:
4f:0b:0d:16:13:03:04:03:51:66:d2:07:79:62:15:5c:fc:4c:
e6:f3:b4:22:12:dd:e5:48:99:61:f4:2c:ff:99:f1:08:1b:fc:
e6:7f:c7:25:eb:4f:41:dc:73:b4:df:9f:de:78:57:ba:e3:25:
1c:e1:a9:0c
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZnszvBMATaKP+Fpz2kMnna3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMDE2MTEzNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTQ2NWQzODhhNDIzMjU1ZDQ4ODMyZDA3MzY5YjZiYzc3MDNlYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JUOdOjxUNxOnUyxrEdqBns8RKJg
My0x6LY78bmNyNddNATYkfr+WfIRv52rkbuABulmZTu4V4fcGwV5KxeNBrYljPka
QV927HofaNChog1+n99ML75uzkYZUVARgc90WwRd/9MNHBUlf8mNA5Bb7rzqpVRz
CjmD/mObqlQPEWs16EO6Iu6gQOugn2/fyOeWi96d1KrsmFvoJU/kG5TafbWnDlXZ
OIXSUkQtYGpWtsxUp/46NfADMCdO/SxSGQdfHo5TS9r/20xF94VhgAqTnb1mmnTS
W5EPWpkK2ohTRRP/7KtD+e9mGhCdirbUTkcsVllNTS1oJNRFPNBH6Mcf1wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFEFGXTiKQjJV1Igy0HNptrx3A+oqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzNiMGU3
Mi0wNDNjLTRkZmItYjYzNi0xNWE1MzA2YzJlZmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvM2IwZTcy
LTA0M2MtNGRmYi1iNjM2LTE1YTUzMDZjMmVmZC8xL1FVWmRPSXBDTWxYVWlETFFj
Mm0ydkhjRDZpby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQBW8L6AwQCW9rUMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwClcDANBgkqhkiG9w0BAQsFAAOCAQEAPhS36Rr813nh2wVCD4bhSKhf
1IaX0Y/Xoeg93umO7uBO1g5baAMhM8s8LI59xYasZNyTFyWL0XGjyAzMH/K0JHge
kCSYA/TtdtdTeQs65r3za1rEZ8NzNhNKPrRIELegyhswgkVOHdRtiYQU+oAqecs/
o3Man0OvLOrm6yz0XgWvYpkHL18MrhFA2lGJKtSdTwHmvFnXBrlUX7OBY5TNxDDa
iwgh9LlZ5DlCWDqxCMpNkjN/UfsV7RYOrKAtmbOU8fbkMDzmTwsNFhMDBANRZtIH
eWIVXPxM5vO0IhLd5UiZYfQs/5nxCBv85n/HJetPQdxztN+f3nhXuuMlHOGpDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:57 2025 by rpki-client