Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cjqC_hu-hvGmyHW40q9RkBYkGks.cer
File: cjqC_hu-hvGmyHW40q9RkBYkGks.cer (raw, json)
Hash identifier: TP0hAcCnZ0r82x33ImhFp4lVIrKklApove7A5aBzc6Y=
Subject key identifier: 72:3A:82:FE:1B:BE:86:F1:A6:C8:75:B8:D2:AF:51:90:16:24:1A:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F14276754FB7CC2AB0B93866EA7AD5C02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 29 Jun 2026 16:12:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219327
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:27:67:54:fb:7c:c2:ab:0b:93:86:6e:a7:ad:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 29 16:12:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=723a82fe1bbe86f1a6c875b8d2af519016241a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:ed:77:e5:30:e4:d4:85:95:14:76:e1:73:
6f:70:5a:4b:73:15:45:54:10:9d:a5:db:e2:44:43:
bc:2d:a1:d8:a1:1b:f7:b9:95:e9:fd:2c:1d:cd:48:
07:df:2f:65:c9:b7:77:01:32:ab:d7:2b:98:3c:82:
78:42:9f:96:6f:1e:d3:bd:72:67:5e:4d:98:89:00:
c7:63:1c:d6:59:09:01:7b:42:35:e1:ff:c4:83:b0:
e4:87:9a:da:d6:47:d4:de:3f:4d:b4:2a:97:4f:2d:
dc:2a:11:65:5c:42:f7:77:fe:ff:6e:48:a8:24:16:
b4:20:fb:45:b4:56:a2:6c:aa:4b:58:f9:f0:00:5d:
33:9c:cd:f5:75:aa:fc:81:15:a2:e7:bc:00:27:d6:
c2:93:fc:17:68:0e:55:f1:81:0c:38:b4:ef:15:45:
cc:46:b3:49:c1:5c:59:4d:25:57:fa:82:dd:41:21:
6f:0e:d3:fe:44:ff:03:49:a6:87:e5:65:8e:9f:b6:
c7:17:b4:28:91:f6:45:65:bd:bd:f7:4b:ea:bb:d0:
fd:79:5c:bb:04:54:62:da:22:a5:e3:50:cc:40:87:
28:02:87:68:5a:55:a4:fd:6c:f7:a5:e1:ff:55:14:
bd:1b:f7:7a:61:2d:41:35:33:db:74:02:4f:ea:58:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:82:FE:1B:BE:86:F1:A6:C8:75:B8:D2:AF:51:90:16:24:1A:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2807b1-c795-4783-9331-28ae3e548219/1/cjqC_hu-hvGmyHW40q9RkBYkGks.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219327
Signature Algorithm: sha256WithRSAEncryption
89:3e:9a:c0:a7:80:d7:19:af:b3:8d:b5:f9:58:55:3e:a8:9d:
73:77:b1:95:b0:35:a7:04:db:9b:d6:88:cc:6c:5d:c1:2f:b5:
63:84:83:ee:ab:b5:40:af:5f:b6:39:ec:3b:be:4b:9a:d8:d9:
39:04:92:aa:21:43:fa:57:9b:0f:29:39:02:dc:29:15:b9:14:
46:56:89:8e:28:93:c5:4c:af:da:c6:bf:c9:df:04:84:9c:c2:
cb:72:34:96:1b:95:c4:ea:31:66:c9:93:eb:c1:93:f8:65:10:
e6:73:4e:9b:b7:2b:2c:fa:a8:d1:ef:b6:9c:1f:fd:6e:ef:bb:
53:f1:e8:d1:d7:d4:a6:3e:02:2f:7a:32:dd:99:bc:18:b0:e3:
7c:a0:56:23:70:35:44:91:1c:14:69:d4:b4:0f:37:35:2b:d4:
ff:70:1b:9a:10:05:20:1b:77:02:b5:3e:72:cb:bc:0f:39:70:
3e:be:09:d4:1b:1e:57:c9:75:f0:e4:ae:4c:ec:d1:f2:fd:97:
33:48:a7:94:f9:cd:87:ff:94:36:51:68:a0:cc:eb:2d:f0:69:
d4:29:5b:ad:9e:63:d5:8f:74:97:4c:9a:cf:97:0e:ad:f4:0a:
6b:89:e3:0d:13:03:73:72:4f:1f:51:c5:f0:2a:91:ba:9f:d5:
74:58:8d:a0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZ8UJ2dU+3zCqwuThm6nrVwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjI5MTYxMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjNhODJmZTFiYmU4NmYxYTZjODc1YjhkMmFmNTE5MDE2MjQxYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41rtd+Uw5NSFlRR24XNvcFpLcxVF
VBCdpdviREO8LaHYoRv3uZXp/SwdzUgH3y9lybd3ATKr1yuYPIJ4Qp+Wbx7TvXJn
Xk2YiQDHYxzWWQkBe0I14f/Eg7Dkh5ra1kfU3j9NtCqXTy3cKhFlXEL3d/7/bkio
JBa0IPtFtFaibKpLWPnwAF0znM31dar8gRWi57wAJ9bCk/wXaA5V8YEMOLTvFUXM
RrNJwVxZTSVX+oLdQSFvDtP+RP8DSaaH5WWOn7bHF7QokfZFZb2990vqu9D9eVy7
BFRi2iKl41DMQIcoAodoWlWk/Wz3peH/VRS9G/d6YS1BNTPbdAJP6liNbwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHI6gv4bvobxpsh1uNKvUZAWJBpLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzI4MDdi
MS1jNzk1LTQ3ODMtOTMzMS0yOGFlM2U1NDgyMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMjgwN2Ix
LWM3OTUtNDc4My05MzMxLTI4YWUzZTU0ODIxOS8xL2NqcUNfaHUtaHZHbXlIVzQw
cTlSa0JZa0drcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNYvzANBgkqhkiG9w0BAQsFAAOCAQEAiT6awKeA1xmv
s421+VhVPqidc3exlbA1pwTbm9aIzGxdwS+1Y4SD7qu1QK9ftjnsO75LmtjZOQSS
qiFD+lebDyk5AtwpFbkURlaJjiiTxUyv2sa/yd8EhJzCy3I0lhuVxOoxZsmT68GT
+GUQ5nNOm7crLPqo0e+2nB/9bu+7U/Ho0dfUpj4CL3oy3Zm8GLDjfKBWI3A1RJEc
FGnUtA83NSvU/3AbmhAFIBt3ArU+csu8DzlwPr4J1BseV8l18OSuTOzR8v2XM0in
lPnNh/+UNlFooMzrLfBp1ClbrZ5j1Y90l0yaz5cOrfQKa4njDRMDc3JPH1HF8CqR
up/VdFiNoA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:26 2026 by rpki-client