Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
File: iqtMDPIcGj1upBBoy-kIvjiORQo.cer (raw, json)
Hash identifier: +h8bHUwli//HwLsjDi4NXZxZXfk+4xGzpxhnSC3+aEY=
Subject key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1CFA41590CBAB72C24FB4E8F597604753
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Nov 2026 12:03:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35793
AS: 202885
IP: 45.11.128.0/22
IP: 45.95.100.0/22
IP: 80.247.192.0/22
IP: 91.221.208.0/23
IP: 185.151.160.0/22
IP: 185.174.140.0/22
IP: 195.253.252.0/22
IP: 2a07:7940::/29
IP: 2a0e:6b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:a4:15:90:cb:ab:72:c2:4f:b4:e8:f5:97:60:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 12:03:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:ee:b8:ec:73:f9:67:04:94:2c:1f:8e:87:
a4:3d:94:d5:86:65:3b:18:04:41:68:7d:e1:da:95:
48:72:33:3f:8e:ec:50:7f:ab:85:60:27:db:0c:4c:
a9:48:76:bc:a9:dd:1f:d6:27:d9:35:ed:e0:51:53:
64:69:dd:98:18:c7:9c:2b:19:cb:bd:78:27:e4:e2:
0d:58:2e:9b:7a:34:ff:3c:6d:0e:5c:7c:0f:b9:10:
f4:5f:bb:60:b1:bf:8c:67:56:ea:23:f3:2f:6f:77:
4e:43:1b:fe:d9:0c:bd:f7:36:36:24:2e:2b:36:98:
9c:e2:2a:ca:be:63:1d:39:bf:20:64:7e:d0:87:44:
04:9c:52:6a:55:62:af:34:11:5d:67:45:78:7b:b9:
8a:e6:04:4a:a9:d5:0f:9e:47:73:1f:67:5d:e8:2b:
3c:4b:56:8d:9b:75:c3:59:8a:be:38:69:63:ba:6f:
72:68:19:64:e6:d4:08:24:19:63:9c:8a:54:98:fc:
e0:85:89:38:de:02:62:6a:9b:b6:e3:04:9e:76:d6:
ca:00:78:b3:dc:9c:3d:39:e2:1f:5b:4b:7e:31:9c:
99:01:af:6b:9e:30:02:05:78:e7:62:a9:7d:de:e4:
95:79:2b:da:27:68:e2:2d:d7:4c:cc:cd:79:b2:89:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.128.0/22
45.95.100.0/22
80.247.192.0/22
91.221.208.0/23
185.151.160.0/22
185.174.140.0/22
195.253.252.0/22
IPv6:
2a07:7940::/29
2a0e:6b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35793
202885
Signature Algorithm: sha256WithRSAEncryption
48:83:5c:62:d0:c2:57:bd:6f:e8:fd:70:bf:27:0f:3d:81:d1:
b1:97:df:95:37:02:82:67:4b:69:0d:74:3b:5d:37:3b:b7:da:
72:67:6f:9c:59:83:31:ec:5f:ec:00:4c:fd:30:39:3a:4a:5d:
f7:6a:d2:ce:43:90:31:fa:27:2c:0c:94:df:72:70:2d:18:04:
32:b3:3f:ff:48:a5:19:b2:f9:20:67:59:a8:34:9c:29:e6:12:
d8:cd:38:f8:76:97:08:00:3f:3e:a0:18:ec:6f:94:d9:80:5e:
cb:f0:9e:56:84:73:27:86:2e:9f:23:ef:d2:77:dd:5e:26:ce:
e2:53:3f:51:6f:9e:a1:64:a3:52:c0:4a:71:55:7d:c8:69:f6:
02:26:bf:42:d0:aa:c2:07:98:50:bf:92:03:9b:26:b1:fa:69:
e8:5a:2c:c6:ca:d0:76:5a:cb:ed:05:97:c2:e8:62:d2:94:3c:
9d:5a:af:ef:ee:8b:73:7b:4d:7d:fc:a0:bd:ed:3f:f3:fa:91:
39:8a:63:b7:71:96:40:74:18:41:9c:2c:78:d3:79:db:15:7b:
d3:20:f4:44:9d:40:6b:19:31:ae:09:35:d5:39:44:19:30:a4:
30:15:6f:51:ae:3d:6e:e8:2c:2b:24:96:d7:14:be:a3:75:06:
2d:e0:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:28:31 2026 by rpki-client