Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QaHs1T08kyiV6pxQmSxxGHKO1rk.cer
File: QaHs1T08kyiV6pxQmSxxGHKO1rk.cer (raw, json)
Hash identifier: a2DRO4W1SwqHSk8bEkxmfFze63qzM5VJHMCRntxhv6g=
Subject key identifier: 41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B797DDA1FF29C6B7A60A09ABC806A3645
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 12:17:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209627
IP: 139.28.248.0/22
IP: 2a07:b540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:da:1f:f2:9c:6b:7a:60:a0:9a:bc:80:6a:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a1ecd53d3c932895ea9c50992c7118728ed6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:20:e5:cb:86:31:c3:06:f4:00:5e:ac:56:
3c:99:ea:dc:df:65:06:cb:bc:e3:6d:0d:36:fb:41:
f0:de:85:8e:bb:53:76:25:d3:d5:29:02:a2:bc:63:
58:b1:f7:0d:14:cf:6b:20:a2:74:c4:cd:cc:a7:a9:
ad:95:0d:a4:35:54:c4:d5:d1:76:e2:2c:41:49:af:
53:c9:38:2b:8e:fc:9b:87:d3:65:0e:a4:48:2e:9f:
3e:67:d6:fa:1a:db:d6:2c:7d:0b:9c:d5:00:ac:2e:
8f:94:0b:ad:0b:33:99:52:36:8a:06:70:83:d3:97:
8c:69:70:be:af:4b:67:c8:2e:6a:9f:28:4f:18:66:
d6:6a:bb:6c:a6:7f:a8:38:f4:0d:54:61:5a:fc:52:
26:6d:7c:bf:b7:e2:5a:87:9e:0d:ff:9f:bb:2c:2d:
a8:26:0f:36:6a:f8:69:80:c8:63:a5:51:60:52:41:
e0:68:8f:b9:29:9a:01:4f:f8:2d:d0:76:77:11:95:
d2:f1:d5:90:0a:b2:59:cc:0a:c1:c1:0d:5d:27:c6:
20:d9:15:05:69:f2:bc:dd:4c:e5:01:40:5b:5a:04:
a3:18:65:8c:db:37:cf:69:67:ce:c0:89:ef:04:9d:
2a:e2:f2:a6:67:12:08:40:01:9b:36:31:8b:ad:89:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:EC:D5:3D:3C:93:28:95:EA:9C:50:99:2C:71:18:72:8E:D6:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5954e7-3e0c-4c3a-92d0-49c89ce28882/1/QaHs1T08kyiV6pxQmSxxGHKO1rk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.248.0/22
IPv6:
2a07:b540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209627
Signature Algorithm: sha256WithRSAEncryption
02:e0:ce:ad:49:95:92:33:ca:96:f5:43:0d:40:f9:58:38:fd:
7c:eb:39:be:8b:be:d1:f5:2d:be:e1:ac:b6:50:9f:96:30:13:
4f:f6:4b:b7:c4:23:43:74:6c:a8:08:2d:15:c7:e6:51:46:a6:
c4:16:3b:af:96:eb:76:68:a2:1f:44:58:b5:b5:a1:19:34:03:
40:3d:84:28:67:bf:dc:3c:b6:56:20:0a:95:67:cb:81:49:65:
5a:7e:11:ab:04:52:84:98:56:ad:86:6a:53:fe:15:db:2a:59:
18:6b:e3:2e:3f:59:52:83:90:73:2d:1d:ce:2d:90:10:b5:83:
05:bb:74:c7:00:3e:4c:d1:64:b4:d8:36:83:09:03:00:13:75:
41:4c:32:75:a4:36:b1:d7:10:9f:65:eb:40:89:c3:a4:8d:cb:
91:91:ef:bd:35:43:fd:c8:a8:7a:f6:90:b0:36:54:0e:97:6c:
c3:5c:bc:06:b6:3f:7f:c1:07:d0:a8:7b:78:b8:4b:5b:64:1b:
64:06:77:d0:6a:57:95:4e:aa:4f:ca:3c:d0:2c:97:77:41:f1:
68:f9:6c:4e:d2:4b:f2:b8:80:49:ff:67:4d:a6:a3:82:9d:a9:
77:33:ba:31:c9:8a:35:96:05:7e:e3:5b:e4:99:80:aa:ec:83:
3e:44:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:52 2026 by rpki-client