Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer
File: WQu-q0iEKkGvrEkh0TV4OLb-bIc.cer (raw, json)
Hash identifier: 5w52qU6LfeNDuvzDHdSqbjv2TF45XieuPMlHt5Vw1Tk=
Subject key identifier: 59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C7618AA6B46222DA1D54E2514845B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207756
IP: 195.93.154.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:61:8a:a6:b4:62:22:da:1d:54:e2:51:48:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=590bbeab48842a41afac4921d1357838b6fe6c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:f7:fd:e1:69:aa:a6:13:14:d7:9a:08:50:
66:6a:e4:48:c1:78:ce:1c:8b:d8:fe:9e:66:1c:29:
2b:63:40:b1:05:94:4b:2e:d8:dd:4f:8f:7e:87:b4:
8d:4c:e1:47:46:32:78:cf:a9:ab:d3:1a:45:f9:82:
83:23:37:68:c5:cc:85:ae:cf:6b:9e:ad:f4:a6:1b:
d0:90:f5:d3:7b:53:1e:f7:59:0c:d1:35:3b:6c:11:
01:f0:9f:f0:7a:5a:2b:54:91:1b:58:a6:8a:03:68:
bd:81:92:8a:3c:f0:05:18:8c:4b:62:3a:ff:19:d6:
12:42:dd:79:69:94:61:ac:35:cf:4c:9d:b3:82:2f:
95:4a:78:29:ef:50:ac:23:0e:56:ce:e4:d4:05:05:
56:c2:ed:cc:c9:8a:b6:d5:e4:b7:1a:cc:b2:57:11:
9e:ff:b7:23:e9:ca:6e:6c:91:61:f7:c1:d4:fd:6b:
3d:84:98:14:e4:ad:6c:73:bf:e7:9b:bf:76:c5:61:
3d:b9:d2:e8:6e:9d:d6:cf:5a:12:1b:3e:a6:21:9a:
6a:90:3f:b4:5f:a0:35:5e:82:07:97:f9:6e:c8:9e:
b6:30:47:a0:66:b6:a3:5e:5d:8d:ea:df:2d:05:f0:
eb:05:dd:ca:f9:c2:12:87:c4:9c:1a:da:49:92:5b:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:BE:AB:48:84:2A:41:AF:AC:49:21:D1:35:78:38:B6:FE:6C:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d7d583-2d4a-4abd-923e-23a58f3d61d7/1/WQu-q0iEKkGvrEkh0TV4OLb-bIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.154.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207756
Signature Algorithm: sha256WithRSAEncryption
6d:6b:d8:71:67:21:fa:54:4b:9f:37:0b:ec:f3:bc:bf:38:ec:
4b:a5:a1:55:b7:87:1b:48:00:5d:97:8a:a0:11:fa:b5:81:22:
68:22:91:c0:3e:5f:82:df:33:ee:0b:f8:90:9c:28:e7:d1:60:
14:7c:6f:a6:c0:31:7e:b8:4a:ec:ad:ba:37:f2:7b:85:ed:ef:
e1:7a:2e:6c:19:5e:1f:7b:00:0f:8d:59:11:c9:6f:38:15:92:
b3:a8:3e:bc:37:1f:63:ff:e0:b8:18:80:56:8a:22:bd:12:d4:
0a:b5:85:b7:dd:dc:14:e2:d9:9b:8a:66:bd:eb:df:b8:82:07:
ca:57:d4:7b:22:47:27:ab:e4:b6:b3:13:b2:f1:9b:fd:58:b8:
26:ed:34:15:4a:de:db:3d:20:bf:c2:4b:a3:11:91:d8:16:c4:
cd:8c:d5:99:14:8d:60:bb:2d:a4:8b:4f:62:4d:57:94:f5:44:
7b:a4:01:f2:ee:94:00:0d:df:53:fc:6e:04:53:52:41:5d:c0:
34:3a:59:e8:42:d8:f7:89:62:02:63:93:5b:0f:4a:91:3a:15:
3a:4e:d7:00:04:22:77:37:75:0d:bc:40:2a:85:fd:ac:89:27:
66:d3:df:9f:e1:d1:f4:c5:33:d0:b8:05:27:02:14:5a:e2:63:
dc:37:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:50:37 2026 by rpki-client