Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.cer (raw, json)
Hash identifier: wLr641w8lqituw3yd/vw6P7cMhlNhsQ09NWoYABLy0Q=
Subject key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5AE080034EF5828C64A9E2F1AE7140
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 15516
IP: 62.61.128.0/19
IP: 77.75.160.0/21
IP: 79.98.192.0/21
IP: 81.161.128.0/18
IP: 82.147.224.0/19
IP: 82.211.224.0/19
IP: 85.24.0.0/17
IP: 87.72.0.0/15
IP: 91.100.0.0/15
IP: 195.135.216.0/22
IP: 2001:14d0::/29
IP: 2a01:558::/32
IP: 2a07:8900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:e0:80:03:4e:f5:82:8c:64:a9:e2:f1:ae:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:c8:b0:e6:fb:b2:4d:27:6b:a0:74:cd:84:
b7:4a:c7:a8:0c:3c:cb:fa:e9:62:e9:a7:8c:4e:93:
fd:76:6e:ea:39:bf:13:e2:dc:fa:f6:d8:18:82:dd:
d1:63:22:c9:0a:33:0f:0c:83:47:7b:37:f5:5a:fa:
28:d6:66:72:7d:63:b4:e3:99:8f:1e:34:e1:f5:a5:
11:36:15:2a:84:90:29:2d:32:7a:da:b1:7c:d5:8c:
ee:ba:46:e1:3c:f2:9b:37:4e:ba:e4:94:3d:f4:86:
54:2a:94:bd:bb:ad:41:d4:a4:30:07:31:6c:ed:3f:
98:2a:46:14:d5:6a:3d:74:bf:76:98:eb:da:09:a3:
3c:8d:93:14:cb:d8:94:47:59:72:a6:b5:e1:0e:52:
61:de:4a:63:47:a6:12:8c:77:cb:4e:4a:b8:5a:a2:
40:56:30:a5:a8:e3:0c:38:3a:2a:35:2c:ac:3b:98:
18:6d:49:80:ed:8c:ad:a7:8f:26:d3:43:ab:01:47:
05:34:44:5a:bf:14:ca:a4:fc:cb:ba:00:24:e0:7a:
b9:b5:a7:b2:b5:cb:33:6d:30:2a:c7:ef:f5:dc:b2:
1d:ff:c4:5c:0b:5f:0b:a3:d8:e9:58:bd:bd:32:d1:
97:42:e7:26:7e:67:3a:24:cf:88:23:8b:2e:58:14:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.128.0/19
77.75.160.0/21
79.98.192.0/21
81.161.128.0/18
82.147.224.0/19
82.211.224.0/19
85.24.0.0/17
87.72.0.0/15
91.100.0.0/15
195.135.216.0/22
IPv6:
2001:14d0::/29
2a01:558::/32
2a07:8900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15516
Signature Algorithm: sha256WithRSAEncryption
61:37:c7:14:cf:a9:1e:2e:b9:fd:40:01:ae:2c:1b:ab:0f:32:
80:4c:23:24:09:59:69:77:fb:a7:83:f6:47:00:ba:ff:69:79:
1f:fd:dd:66:d9:af:b1:c3:60:59:d0:b2:86:90:35:9f:b8:c5:
3e:01:df:36:f0:51:09:23:8d:dd:41:a4:db:b0:e6:8b:c2:e4:
b9:78:b0:a1:ec:04:cf:0d:b0:82:c9:1f:25:73:95:70:69:d9:
74:a7:0e:5d:b5:86:52:47:e8:35:9c:ad:af:a0:7c:b9:c4:1e:
ea:87:3e:84:5a:ed:71:22:b5:d4:67:54:a2:fa:d0:6e:e4:9e:
26:e5:86:8c:0a:4d:26:68:3a:97:69:93:b6:1d:c7:f7:74:19:
19:64:ac:81:a3:86:ea:7b:62:2a:ca:78:8e:40:54:e1:85:9b:
80:79:30:ab:6c:18:2e:f6:55:d8:9e:6b:57:e8:64:63:9d:03:
34:52:7e:5b:d9:60:44:6b:57:b1:b1:ac:a8:1a:b9:c1:91:28:
51:42:b4:bb:65:f3:d6:10:9c:cf:2b:75:7b:c6:ac:0d:1c:03:
ab:62:17:b3:1e:4d:cb:a3:88:61:e1:7e:0e:29:58:2a:7c:93:
50:43:1c:07:8c:12:d6:ec:18:27:79:bb:e9:dc:60:a7:88:ad:
42:fc:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:43:19 2026 by rpki-client