Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZTZ3em51VD_NJfkNoP2iA1AMyM.cer
File: QZTZ3em51VD_NJfkNoP2iA1AMyM.cer (raw, json)
Hash identifier: LkX5mkXZpX0sOMUoIQqTsqNELVr86sUWXQwFeZOxWdg=
Subject key identifier: 41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7834C17DB7DFB44C32CDB89DABCFD6E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:01 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 62218
IP: 185.43.92.0/22
IP: 2a01:6c20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c1:7d:b7:df:b4:4c:32:cd:b8:9d:ab:cf:d6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4194d9dde9b9d550ff3497e43683f6880d403323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:b5:0e:10:13:57:71:c7:ef:90:9e:9e:85:
39:4a:a8:4c:ac:0b:3c:7c:7a:fa:eb:31:c4:f6:4d:
4c:12:86:e0:57:0b:08:1d:ca:21:ea:f1:4a:d8:52:
21:dd:4c:3d:18:8d:62:ca:a6:d9:6a:17:0b:eb:d3:
b9:bc:0b:81:e4:b6:2a:66:a7:3b:47:fc:39:e4:f6:
58:59:61:a0:14:42:10:96:b9:0d:29:24:44:4f:cb:
fa:61:48:85:16:35:ed:23:ef:2c:f3:b1:c3:3c:a1:
eb:a2:09:a7:42:e9:bd:92:dd:b8:b9:43:5d:46:5f:
ff:60:59:42:13:0f:35:3d:c2:b2:85:7b:1f:e5:f2:
30:6f:b3:66:54:dc:67:dc:c5:bb:0e:f5:33:49:94:
4e:52:ed:c6:2a:d8:51:0b:a4:f5:91:6d:f9:35:1b:
66:2f:3a:c3:af:3a:f2:8d:77:c0:d7:4a:5d:00:be:
41:4c:27:70:3f:d3:38:46:f5:e2:0b:6e:86:75:a9:
f5:78:7f:7e:c8:18:bb:a5:8c:26:11:7c:da:4c:d3:
e4:20:9d:ba:48:5b:99:bb:9e:14:2f:5e:00:63:b7:
2a:6c:76:15:94:ef:90:58:5c:3e:89:b0:45:4c:8a:
09:49:b3:d5:41:af:19:49:a2:fb:49:2c:dd:61:ae:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:D9:DD:E9:B9:D5:50:FF:34:97:E4:36:83:F6:88:0D:40:33:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4a6a09-3853-454b-ae09-ffa7514fad2e/1/QZTZ3em51VD_NJfkNoP2iA1AMyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.92.0/22
IPv6:
2a01:6c20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62218
Signature Algorithm: sha256WithRSAEncryption
89:21:d8:35:e0:32:9c:40:9a:0d:b0:2e:08:7b:5d:c1:ba:a3:
bd:5f:41:6b:10:a6:db:2c:4b:d3:bc:a2:a3:e0:c0:79:31:c9:
9d:9a:31:6e:3e:74:30:f4:63:e0:a6:f6:70:e4:46:7c:d4:e1:
61:0a:d2:22:b9:f3:31:d2:29:fb:e6:90:b2:63:d4:73:e4:cf:
01:31:7f:5a:36:54:a0:0c:96:36:9f:b1:ae:a9:69:0a:55:47:
9e:97:97:a8:5c:12:55:1b:d0:67:8b:1f:4e:34:6c:d2:5e:5b:
1a:89:99:15:18:6c:82:2d:b7:28:f2:ae:45:07:58:5e:61:f0:
6b:64:e1:06:9b:eb:44:a9:88:c9:2a:1d:a5:7a:46:6c:2f:5a:
50:c8:7c:a9:df:5c:ae:be:5c:d0:1f:1c:9c:f7:aa:f8:84:1a:
42:89:b3:3f:1b:f4:06:e2:ad:54:9d:0a:88:b7:3b:ef:45:e6:
3d:ad:e3:8f:d6:f8:24:0a:2d:12:c5:7a:b5:d2:23:bb:ab:d8:
67:aa:f8:74:5e:ea:f4:df:bc:19:37:7c:7b:48:91:01:9c:91:
8e:f8:64:56:14:e2:fe:11:50:dc:cf:10:64:91:1c:29:ab:66:
da:b3:3f:41:73:b1:82:fb:5f:ad:b7:d0:11:03:06:6a:51:0a:
18:c2:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:05:17 2026 by rpki-client