Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
File: qABrMI2UNkxB70cIgEr9utcazzI.cer (raw, json)
Hash identifier: HukVyEx5gc6wcclA5XOcwaBLHvfgz4wYonijnZ4HW+Q=
Subject key identifier: A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C57F558DF26C39E987D27F54097DEB97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Sep 2026 19:44:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.210.8.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:7f:55:8d:f2:6c:39:e9:87:d2:7f:54:09:7d:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 21 19:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8006b308d94364c41ef4708804afdbad71acf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:be:26:ae:ce:3b:93:c2:92:b5:c2:57:98:
05:f3:ca:1c:60:fe:cc:be:af:8d:fc:25:ed:fb:73:
cd:93:07:07:88:79:4e:f7:a9:b7:60:6d:8a:98:2a:
46:45:6f:a1:90:cd:82:69:c6:c2:45:12:61:71:6b:
5b:ec:09:e6:55:70:b1:3d:84:38:2c:72:f1:8c:5d:
1e:c3:46:47:6b:d2:b1:cd:2b:48:96:9f:35:f5:56:
d5:f9:ce:2f:bb:3b:00:aa:6b:9a:68:17:a3:e2:e5:
59:06:d5:4f:fd:1f:62:1e:47:52:d8:07:64:54:08:
75:b7:6e:0c:5d:88:f0:48:8d:fd:e3:28:c1:95:26:
b2:54:71:8b:cf:b6:b2:1a:45:25:f9:d0:ed:68:2e:
2d:a0:18:92:a9:a3:4f:c9:b9:81:04:62:51:bb:2b:
f3:67:74:ae:5e:f9:46:b2:e9:75:d8:d1:d9:e8:e9:
ed:be:af:94:00:b3:67:e5:5d:61:88:a8:72:e1:b7:
a4:37:7e:33:90:81:9e:21:72:65:23:25:b6:50:66:
3c:29:5f:4f:c5:c1:f5:f8:28:92:75:4d:0a:22:76:
97:0c:fb:31:31:1e:91:5e:8b:db:56:06:d9:1f:2b:
80:3a:0e:c5:a8:64:56:7c:56:3f:22:c3:06:b3:7c:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:52:18:85:12:cd:2e:9b:66:30:93:55:c6:73:37:e8:ac:b1:
25:5b:f8:17:8b:81:02:d6:db:99:75:46:35:f2:45:02:f2:ce:
69:32:1d:e7:f4:da:c0:f0:1e:41:bf:ae:7d:56:c7:f3:23:cd:
22:36:ff:b5:be:d3:2c:ba:6b:54:65:3e:cb:01:71:e8:77:1f:
0b:32:17:88:eb:cb:7e:7a:5b:71:3d:0a:69:65:be:02:7a:d7:
47:38:4f:e8:68:f6:2a:46:4b:52:2c:b1:ce:62:d2:de:a8:ed:
62:15:ea:de:fc:2f:a3:98:87:cd:74:7a:64:f4:57:64:0f:42:
4e:74:5a:59:24:93:e3:f5:a7:d6:d9:5c:4e:0e:4f:76:0d:70:
0a:05:1e:1b:5f:22:14:26:ec:7d:b7:88:d0:a3:35:04:e5:21:
a5:39:c0:29:06:9e:c5:a9:bf:c2:9e:dd:c1:29:0c:dd:51:d9:
d0:46:3f:f8:d9:80:98:43:b8:1e:55:ee:b9:23:de:0e:61:b1:
93:85:12:40:88:b4:44:20:80:ef:06:8b:80:43:5b:e1:6a:22:
ac:2c:b2:3c:e1:70:d3:50:cc:f4:d9:2e:cb:a1:1e:90:f5:3d:
4b:00:27:72:cd:02:88:89:b5:a1:a4:78:df:7a:bf:de:31:e2:
8e:a4:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:59:30 2026 by rpki-client