Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.cer (raw, json)
Hash identifier: wAvCm05rPMtvFe+H3k3auPOBtH6U1Wdg5HJJDjxSUsk=
Subject key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79105D5D1E39491C25622FBB120AEB39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.92.145.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:5d:5d:1e:39:49:1c:25:62:2f:bb:12:0a:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:69:ef:e3:86:e0:d7:19:d1:e7:e0:2b:c1:
59:e6:22:e3:58:4f:ee:bf:b7:b4:cf:49:fe:83:4c:
c3:64:1a:77:9e:30:6d:99:1a:db:91:68:1b:84:4f:
79:97:b6:79:87:96:5a:19:61:56:41:58:8a:07:78:
84:6d:6a:75:06:82:92:f1:74:cf:10:49:cf:c7:1b:
79:31:cd:9a:c1:7f:2f:5b:f8:a4:90:6e:17:45:07:
00:ff:b9:74:8e:8b:90:21:8e:b5:20:9b:bb:85:85:
26:79:ae:fd:98:de:31:3c:ee:0d:90:16:ae:ce:54:
66:b6:3e:7a:4d:c2:e6:45:d0:79:91:db:40:e1:e9:
fa:f9:3b:a9:f1:8c:3c:d4:87:a6:57:34:78:5a:bf:
78:7a:e9:5b:0c:88:aa:47:4e:0f:20:1b:49:8b:dc:
9b:2c:82:be:59:b6:da:d8:74:fc:8b:10:05:6e:52:
06:e9:2c:8b:92:67:d9:ad:ed:67:f6:57:90:f3:0c:
85:27:3b:a2:37:61:e5:55:5b:35:fa:fa:22:5e:9f:
21:63:90:7c:28:ab:f4:bd:8f:04:df:ce:32:4d:1e:
37:bc:bd:e7:b7:51:7a:56:1d:a0:78:f5:ff:80:77:
a0:8f:d4:91:7e:da:c1:d4:81:63:43:f4:ed:a5:79:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:35:d1:5e:5b:a1:98:8f:3a:20:2c:20:78:8a:6b:12:08:f0:
72:97:e2:98:1b:0c:e4:1a:c6:6c:b8:f7:1a:85:95:5c:31:d3:
58:92:52:aa:57:d5:f5:29:66:f5:04:6c:e1:24:d0:5f:76:70:
26:1e:30:e1:72:09:23:e7:cb:6b:2c:d1:70:ae:e6:af:6d:0e:
4a:f7:3e:9e:de:35:f4:78:d9:47:da:0b:a0:ff:78:85:ca:4d:
47:4e:04:37:09:6f:ad:ba:b5:96:21:9a:0c:58:07:6f:38:f1:
75:ae:27:0b:40:1e:fa:19:37:83:cb:08:24:b7:86:55:3e:d5:
9e:14:9a:32:6a:35:0a:ba:d1:87:ff:3c:96:1a:39:46:fe:53:
2e:89:34:b4:e4:b5:9e:68:c8:e3:71:d7:97:4b:8c:4a:14:e6:
a8:0b:a5:52:c5:e5:7e:a9:96:5b:cf:3b:c5:18:d4:45:87:6b:
95:d5:d6:27:5e:e6:c8:aa:eb:87:0b:69:2d:d6:b9:87:7a:77:
5a:ed:90:ce:40:42:07:27:f3:be:c8:90:41:54:b1:96:8c:2a:
89:ba:12:56:d9:84:8a:60:3b:30:df:a2:13:b4:8d:ce:04:4a:
1d:43:ef:a4:55:fe:80:8e:a4:7f:7f:11:c0:cf:e0:83:63:9e:
be:4a:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:25:02 2026 by rpki-client