Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QgmOqdZxMLy5MokFv7uUR_VwFmI.cer
File: QgmOqdZxMLy5MokFv7uUR_VwFmI.cer (raw, json)
Hash identifier: KfCCVTt/dDVgqDDtxrt1M7vExC5oV0vgIs5RmXmh22k=
Subject key identifier: 42:09:8E:A9:D6:71:30:BC:B9:32:89:05:BF:BB:94:47:F5:70:16:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CBA6B5924A783896EAD244A2F25F73D36
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 19:55:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206831
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:6b:59:24:a7:83:89:6e:ad:24:4a:2f:25:f7:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 19:55:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42098ea9d67130bcb9328905bfbb9447f5701662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:ea:10:8e:e7:36:da:d5:09:68:4f:35:a7:
7c:ef:a9:7e:ac:7d:23:c6:40:3f:ab:a7:04:21:8b:
19:b2:a9:8a:e3:84:5e:74:7e:2e:d4:92:7d:e5:ae:
90:d3:c5:ae:ad:b6:e0:7e:56:8a:e4:a9:f8:41:60:
5a:61:b9:a2:f4:54:09:4b:77:e9:34:35:62:35:e0:
41:c9:89:9c:85:95:06:7c:61:67:d8:34:0b:fb:18:
3e:2c:ae:21:37:d4:1c:7d:d0:d2:bf:7f:bc:1a:af:
60:cc:1b:01:c7:2b:0d:02:ec:41:62:f3:8b:15:62:
d9:c2:e3:5f:bc:4d:38:f6:e1:ca:38:d3:15:2e:c3:
ec:a8:aa:41:f4:26:97:08:ad:41:46:f4:e2:81:6b:
d0:6e:f9:b0:de:84:7c:43:4e:45:c9:99:b6:cc:7d:
96:10:6a:35:03:d5:c2:bd:77:ce:5a:a3:1f:a7:c2:
ae:1f:33:6e:3b:4a:29:a4:23:59:6d:54:71:9e:2f:
81:6f:f2:9b:11:5d:b1:c2:c9:53:01:fe:da:b8:55:
62:5c:27:0d:2f:43:6d:b3:7f:d9:e1:1c:a2:74:f0:
f4:90:11:2b:a3:ac:18:f9:75:2b:db:e5:e7:50:bd:
47:36:5d:ed:bb:fa:25:5b:da:f5:a2:e1:fa:66:c3:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:8E:A9:D6:71:30:BC:B9:32:89:05:BF:BB:94:47:F5:70:16:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e65d9-4cb4-4647-8530-36d7a9eb5c6c/1/QgmOqdZxMLy5MokFv7uUR_VwFmI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206831
Signature Algorithm: sha256WithRSAEncryption
77:17:c1:ec:4f:f4:40:cd:4f:23:42:43:1b:98:38:ad:b6:70:
a4:b3:35:a4:90:9f:9c:99:f3:85:fe:8e:43:05:4c:73:bc:3f:
43:83:07:cd:eb:f7:bb:63:6d:6f:9e:06:97:21:42:df:42:bc:
3c:ad:fe:bc:72:d6:78:e5:96:0e:cb:0b:20:35:40:a0:16:1e:
d8:ee:93:1a:f0:b9:d8:f8:2a:bc:f6:e5:1b:49:c0:76:4e:3c:
95:ed:d4:f5:10:58:cb:d3:16:7d:2d:b6:97:c4:1d:7f:fa:46:
40:b3:76:c0:c1:53:2e:34:f3:36:cc:d0:b3:c3:5c:8b:59:f3:
54:95:91:28:1b:19:2f:de:b4:55:3d:56:fb:52:2f:9e:b9:e9:
ff:aa:35:6b:fc:44:25:58:04:77:f0:99:45:8d:ba:f2:21:2d:
a7:a6:50:bb:fd:55:94:c2:61:8a:fa:31:b5:cd:19:62:4e:be:
30:2c:da:e4:b7:ba:86:cf:19:b3:5c:11:36:a0:df:4c:bf:ef:
21:b1:2f:a1:23:f1:13:52:2b:17:27:4d:47:75:07:7c:67:d5:
83:c5:7e:d3:d8:66:61:eb:6e:d8:12:75:ba:c1:38:fc:44:80:
ed:9b:84:47:ec:bb:5c:68:ef:9e:96:e0:3d:b6:64:28:62:e1:
05:f2:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:09 2026 by rpki-client