Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
File: kqOPWtZym-9NSerlHAFGmCIewUY.cer (raw, json)
Hash identifier: 9ibGyTJo+GnaGGe4oZj8LIC4ZSSLtofYQpF74ej/OT4=
Subject key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9D121E57D32898E4F381EFF15C03D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 47719
IP: 185.61.48.0/22
IP: 2a04:ea80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:d1:21:e5:7d:32:89:8e:4f:38:1e:ff:15:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:72:c5:bb:ec:41:e7:9f:30:9e:4f:b2:02:
1d:9d:b7:98:9f:eb:6f:56:99:b3:2c:23:78:af:42:
b1:a7:3c:19:b9:af:9d:c8:82:23:5f:ac:01:64:fc:
6e:13:4c:23:87:d5:47:d0:0b:bc:6a:b7:a7:e2:c4:
1a:7d:b3:11:ff:8d:a1:b8:d2:af:34:13:4b:23:48:
ab:1b:bd:b6:19:2d:a5:dc:ac:2c:ac:80:b1:b8:5d:
d5:eb:a5:5b:1c:92:dd:42:78:f3:f7:44:f2:9f:eb:
95:63:75:55:57:d0:21:b1:aa:88:02:34:9f:08:5b:
72:5e:0b:a2:e1:31:75:25:7a:75:2c:ad:f4:64:f2:
4f:6a:30:df:cd:be:77:3a:64:09:3c:11:a2:26:e3:
fa:92:67:bc:2c:f8:bc:55:34:5d:e3:5d:5e:2b:4a:
9f:cd:25:09:07:2c:7d:9b:f3:c8:1a:31:c5:b1:a1:
e3:da:60:ed:80:de:d9:d2:19:aa:1a:b0:2d:19:80:
3e:c3:e1:1d:6a:88:ed:c3:ea:15:e1:a8:4d:76:47:
dd:60:bb:ef:15:b7:8d:af:90:10:8e:e0:a7:17:3b:
d4:e5:45:29:62:da:57:27:33:ab:e4:25:73:83:eb:
55:5f:7a:bf:a2:82:c2:a6:cb:39:14:a7:61:22:f4:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.48.0/22
IPv6:
2a04:ea80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47719
Signature Algorithm: sha256WithRSAEncryption
90:6e:e5:fe:ab:52:85:43:21:76:94:00:0d:61:6a:68:92:62:
bd:44:6e:7f:70:7d:e4:42:f9:bb:55:74:6f:d2:8d:09:78:85:
30:cf:a6:43:2f:04:28:0c:06:05:71:19:ef:43:97:b1:84:3f:
29:4a:fe:17:b7:15:fe:e7:de:b0:8e:48:e1:0c:71:8a:86:60:
04:d7:47:44:9e:87:26:ba:9f:d1:98:25:8c:6e:b5:3a:d0:b4:
22:68:46:4e:c4:8b:49:1a:1c:5c:a5:55:1e:fc:d3:40:ec:9a:
47:dc:81:2e:43:ae:34:46:e2:10:71:fa:ae:25:5f:b1:ed:e9:
2d:4d:cf:ee:55:a6:5d:1e:26:06:86:b1:f7:5e:ec:7b:56:f0:
e5:6b:ed:9b:cf:d8:c5:26:f3:ea:29:c9:90:a7:69:40:41:b4:
77:30:cf:14:9f:28:f3:3d:61:6d:69:1d:be:8e:05:4e:66:86:
a1:0c:45:82:23:64:1d:05:ad:9d:fa:92:9d:15:7c:06:09:26:
c3:be:2d:b8:79:88:2c:94:0a:c5:70:4b:ac:2a:d9:32:1f:14:
8a:1e:de:73:aa:0a:dc:58:9d:a0:42:fd:1f:f4:8b:a4:f3:b3:
f3:14:6e:5b:50:78:be:5e:0a:11:90:18:11:a7:48:38:9e:7c:
d9:dc:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:42 2026 by rpki-client