Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
File: QpBWwzjRbJLN_aHlXQk2givFDNI.cer (raw, json)
Hash identifier: GWsMhGV4J/6Mxrj65OsbGmHc0yX5xz82jVvTaplaKIc=
Subject key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A352831C35572E3029815269901659
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57396
IP: 176.98.128.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:52:83:1c:35:57:2e:30:29:81:52:69:90:16:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:5f:6f:35:f0:e4:32:1c:12:b8:18:d3:25:
60:81:ea:8c:94:e4:94:30:3d:59:52:b1:b0:19:1c:
57:61:37:df:69:9f:f5:a7:a2:6e:3d:b8:e2:aa:5b:
82:4c:12:ae:37:b1:ea:a1:56:1f:6f:83:33:41:24:
f9:93:57:d6:ed:79:a3:dd:26:8c:18:06:e6:c2:c8:
2a:c7:cd:21:7b:89:b4:c6:b8:00:3c:9a:bc:e3:3b:
89:4f:bf:bb:8e:6e:ca:5a:1f:42:1e:ca:a5:a0:85:
ac:41:d3:bf:98:98:33:f1:ef:27:08:0f:5b:2b:62:
4b:ea:6d:63:23:99:b3:3d:b9:29:2f:07:cb:03:f3:
39:1e:31:e2:98:bf:43:07:52:6f:a4:34:ca:3b:1e:
32:16:5b:7e:69:62:ba:d2:7a:d7:3c:86:32:50:6e:
4d:26:4e:7e:d2:39:82:1c:e6:ee:a2:64:c2:ba:f9:
e7:f2:47:d3:ad:ae:8a:59:51:95:03:51:d2:08:c2:
75:68:37:f2:26:00:40:68:dc:a6:79:01:29:a3:4a:
1a:89:1a:c1:a5:44:74:93:7b:eb:9c:ea:28:fb:12:
a7:e4:a0:de:d9:5e:f7:b1:d8:27:89:17:e9:1b:4e:
b9:2b:6c:99:64:84:9e:09:42:dd:2a:72:5a:6a:0e:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.128.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57396
Signature Algorithm: sha256WithRSAEncryption
aa:60:a1:5b:6d:64:fa:62:d1:1d:3a:fb:ed:5e:1a:52:af:11:
82:e4:6c:e7:f1:d7:9d:f5:21:57:db:a5:72:d7:79:27:bc:dc:
a5:18:4d:2d:89:26:72:35:c8:dd:c8:22:a3:3d:f5:37:76:6c:
fa:f8:7c:ad:9f:4d:71:a5:00:13:4b:0d:f9:fb:f5:7f:3c:b6:
b4:a5:f4:ff:0e:8b:34:05:94:d7:1f:45:02:09:09:d0:dc:71:
fb:6d:7a:ab:b6:de:62:43:1c:0c:91:a7:ad:fa:45:8c:d0:b3:
67:ab:2e:3d:14:dc:3c:af:21:fd:3a:3c:06:de:93:12:50:53:
e9:74:4e:f4:27:24:fd:8f:d8:b0:a6:1b:77:46:4f:83:6c:9b:
af:5b:b1:90:8b:eb:06:c4:71:af:ec:07:0e:e1:73:b3:6e:c0:
01:15:12:ff:41:86:1c:69:c2:06:e3:b3:e6:ac:67:b7:13:1e:
17:5f:82:82:a1:60:20:0c:b4:88:e6:e5:2a:37:0c:1d:66:d6:
84:ce:dc:1c:f0:55:7b:d2:9b:a7:97:43:62:27:c9:a7:74:ad:
4e:08:fb:df:7c:62:e7:48:86:9f:59:1c:f3:31:4e:d0:6b:e9:
fd:b0:76:eb:c7:2b:a7:c3:c6:0d:02:f4:51:9c:5c:ff:dd:ef:
80:71:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:34 2026 by rpki-client