Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
File: qaHWsnXkY50IGRt8RqsjlCgod0Y.cer (raw, json)
Hash identifier: 2RIp2vr68vRQYWL5WNAJ3717SlxlOhmCRadSDlkZPX4=
Subject key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB7725AA00EB667AE05067C0D3E46C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44152
IP: 185.19.172.0/22
IP: 185.59.248.0/22
IP: 2a00:4720::/32
IP: 2a02:7060::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:77:25:aa:00:eb:66:7a:e0:50:67:c0:d3:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:a8:00:60:de:7b:b9:69:5f:52:94:55:96:
54:20:da:66:fc:a8:d4:9f:63:11:96:53:93:e4:d3:
19:7e:cc:95:6d:f6:fd:ef:e1:01:49:d9:b3:4d:67:
27:bc:00:3e:85:e7:94:c3:c9:37:18:a0:c0:88:46:
a7:53:4d:4e:84:9a:d3:bf:34:d9:c3:f9:c2:49:ae:
49:52:92:3c:fd:62:61:ab:6b:cd:cb:6d:79:25:a2:
44:ef:2d:bc:44:00:d0:4f:aa:c5:29:46:ac:63:fb:
e3:1a:79:20:8e:ba:3f:54:4a:d7:d8:47:a8:a4:63:
72:d9:e7:e6:10:9c:a3:2f:88:c0:1b:dc:7e:bb:ba:
d1:64:08:dc:74:6f:e2:39:17:7b:85:2d:87:0b:54:
10:8f:f6:61:5f:bb:38:9a:29:00:df:85:98:ce:99:
30:f3:a0:9b:fe:75:3a:44:bb:d9:91:6f:7f:91:0b:
68:6f:2a:69:cf:cc:db:a3:04:aa:b5:93:2c:f7:cc:
48:5c:05:54:b8:06:b7:6b:be:7f:68:e8:a1:1b:cc:
19:24:e5:84:8b:41:0c:33:7d:d0:e2:7f:44:c9:a7:
2f:6c:e5:25:bb:81:ea:39:15:9d:ca:19:4a:76:01:
29:b2:ee:ea:5f:33:1f:1c:62:a4:8d:27:42:13:25:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.172.0/22
185.59.248.0/22
IPv6:
2a00:4720::/32
2a02:7060::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44152
Signature Algorithm: sha256WithRSAEncryption
61:c1:a5:c6:35:5f:a1:b7:c8:78:e4:76:a4:d6:17:75:70:63:
63:1f:0e:79:97:3b:07:79:f2:04:4f:fa:33:de:ee:f8:d9:0f:
67:1e:71:6d:34:5b:a4:d9:82:10:d1:3e:d8:68:26:00:02:a8:
7a:cf:33:84:36:9a:e8:2e:d0:3c:aa:0a:fb:6d:6a:aa:4d:86:
98:fe:a0:0a:9c:57:b7:58:cf:31:00:35:4a:98:b7:4c:52:c6:
2e:de:5c:d2:0a:81:f2:4d:fa:28:66:a7:ba:ac:d3:f9:f7:81:
4f:d8:9d:e8:12:26:d5:ba:06:b6:cb:52:e9:8f:8c:a9:c8:db:
88:c4:20:3e:31:c8:c1:34:b1:8a:9f:28:df:2b:63:2c:d6:68:
ee:c5:c4:67:41:c1:11:37:56:8e:9f:95:6b:b5:89:b9:cc:10:
3b:19:5e:65:f7:cc:f9:83:ec:76:b3:f7:2a:4d:ac:cc:93:af:
81:2d:19:5e:54:e1:ee:9a:2d:45:ed:34:ed:1d:fd:f8:ba:4b:
d1:b1:a2:39:2b:98:0d:9a:34:59:22:3d:06:95:0c:b2:e5:36:
97:80:3e:cd:ee:c3:38:6c:f2:6c:d2:b3:0d:a0:4f:02:9d:30:
a3:ea:f4:1f:5c:7a:9c:3a:57:69:4e:05:f0:13:76:77:5f:7c:
32:ca:f0:ba
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZ8Y+3clqgDrZnrgUGfA0+RsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWExZDZiMjc1ZTQ2MzlkMDgxOTFiN2M0NmFiMjM5NDI4Mjg3NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaqoAGDee7lpX1KUVZZUINpm/KjU
n2MRllOT5NMZfsyVbfb97+EBSdmzTWcnvAA+heeUw8k3GKDAiEanU01OhJrTvzTZ
w/nCSa5JUpI8/WJhq2vNy215JaJE7y28RADQT6rFKUasY/vjGnkgjro/VErX2Eeo
pGNy2efmEJyjL4jAG9x+u7rRZAjcdG/iORd7hS2HC1QQj/ZhX7s4mikA34WYzpkw
86Cb/nU6RLvZkW9/kQtobyppz8zbowSqtZMs98xIXAVUuAa3a75/aOihG8wZJOWE
i0EMM33Q4n9EyacvbOUlu4HqORWdyhlKdgEpsu7qXzMfHGKkjSdCEyXzsQIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFKmh1rJ15GOdCBkbfEarI5QoKHdGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2Q0Zjgz
ZC1mYjUzLTQyNGYtODUxZC1jMGQwNjJhNzUzNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvZDRmODNk
LWZiNTMtNDI0Zi04NTFkLWMwZDA2MmE3NTM1NC8xL3FhSFdzblhrWTUwSUdSdDhS
cXNqbENnb2QwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuROsAwQCuTv4MBQEAgACMA4DBQAqAEcgAwUA
KgJwYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMArHgwDQYJKoZIhvcNAQELBQAD
ggEBAGHBpcY1X6G3yHjkdqTWF3VwY2MfDnmXOwd58gRP+jPe7vjZD2cecW00W6TZ
ghDRPthoJgACqHrPM4Q2mugu0DyqCvttaqpNhpj+oAqcV7dYzzEANUqYt0xSxi7e
XNIKgfJN+ihmp7qs0/n3gU/YnegSJtW6BrbLUumPjKnI24jEID4xyME0sYqfKN8r
YyzWaO7FxGdBwRE3Vo6flWu1ibnMEDsZXmX3zPmD7Haz9ypNrMyTr4EtGV5U4e6a
LUXtNO0d/fi6S9GxojkrmA2aNFkiPQaVDLLlNpeAPs3uwzhs8mzSsw2gTwKdMKPq
9B9cepw6V2lOBfATdndffDLK8Lo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:39 2026 by rpki-client