Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
File: QaKq1CT4s2whxBBOzeTwqUwU6rU.cer (raw, json)
Hash identifier: 8LuGrv17t26pqRGOr2P5CtM/XzENaeoC7zhz52cWojo=
Subject key identifier: 41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C7F09F30DC37256585135E54B537B502
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 07:07:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.35.192.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:f0:9f:30:dc:37:25:65:85:13:5e:54:b5:37:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 07:07:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:a5:4a:a0:f1:77:71:7a:df:c7:ca:20:bc:
b4:99:a1:aa:a1:2d:9d:4e:7a:e4:e3:4f:4a:30:16:
3d:0a:5c:0c:b2:b8:9b:b1:c8:3f:65:51:0f:58:0b:
c4:1f:56:cc:59:e6:42:0d:fc:ba:6a:ec:a4:51:44:
1b:00:43:9e:01:bf:bf:c6:f8:8f:1f:4f:37:34:25:
6c:44:81:21:75:01:14:af:75:a9:0d:31:7d:3d:5a:
6d:02:01:64:72:a3:83:76:10:13:06:63:29:34:5f:
08:9b:1a:2c:6d:d1:9e:d5:ac:0a:cd:14:5c:00:18:
a5:a8:76:dd:d3:01:48:32:41:d6:27:1f:65:bb:23:
cc:ad:49:be:dd:e8:29:4a:b7:d4:1d:39:21:b5:fe:
27:66:d7:33:27:5b:c3:ef:bc:73:86:ac:75:9f:8b:
da:90:48:13:89:e4:70:f2:b1:be:37:bf:65:b5:6f:
09:ab:e6:0c:5e:eb:90:0f:7d:15:d9:3d:56:f7:2f:
00:dc:eb:9c:33:97:5e:f5:ab:b3:99:ae:e6:e0:a8:
c0:3a:c7:0d:dc:0d:a6:33:62:5d:9c:8c:10:de:40:
b6:8d:bd:9a:e0:f9:49:dd:15:17:a3:3d:f4:89:1e:
c7:64:99:c8:57:22:d5:a7:2f:e9:18:3d:10:10:1e:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:2b:95:19:db:3c:89:05:80:fb:6e:d8:e7:95:ae:da:3e:ed:
4f:0f:e2:9a:20:c5:53:3c:8a:b5:84:db:65:4f:f4:a0:7a:b8:
f7:15:a9:32:14:5a:aa:b4:99:6a:7b:20:64:75:ab:87:f3:62:
4c:b2:fb:5a:4c:a3:03:e2:b4:c7:5d:d8:b2:84:89:72:80:07:
72:be:b9:e1:41:55:97:ce:51:d9:96:e1:d8:1c:c7:86:f1:6b:
e3:0f:7d:cc:5c:63:da:91:cf:8c:cb:05:55:a7:b3:e2:ce:c7:
62:a6:f9:06:95:0f:d5:1f:06:9a:0b:d1:ac:5c:25:14:f0:42:
18:95:ed:e1:4f:e5:7d:b7:ab:a8:e5:25:40:f6:fa:6a:69:a2:
53:b8:9e:1f:f9:a0:16:55:71:39:93:ec:1a:2c:60:4a:1c:05:
c3:3f:0b:b5:38:62:1a:4d:d0:fd:17:ac:98:7e:d3:78:b6:54:
70:3e:2e:0c:df:1f:a4:3c:d1:89:eb:0c:81:86:6e:f1:7c:84:
70:f4:07:5c:46:be:6d:47:a9:49:ee:c2:e3:18:65:da:69:65:
57:51:a0:bf:ee:ca:7c:64:dc:44:55:c3:3c:76:e8:10:b7:f5:
3e:c0:47:c3:1b:b1:b4:8f:4e:fa:df:bd:d3:55:a3:6e:ec:15:
70:5b:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:44:57 2026 by rpki-client