Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
File: qnXo86HZziwBs21atvwvdScw6-o.cer (raw, json)
Hash identifier: AAy+P4S/5z/A11xjz7IjcLW4EVV5DG8MU5C0V4mf1DM=
Subject key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F7FC8F53CBB73C483C522C1BB0E68ADA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 13:48:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212949
IP: 91.213.185.0/24
IP: 150.251.80.0/20
IP: 2a12:52c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:c8:f5:3c:bb:73:c4:83:c5:22:c1:bb:0e:68:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 20 13:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:33:6d:e4:74:92:46:fe:d0:95:d1:24:4f:
d7:0e:f4:e0:1c:18:cf:5b:ad:34:71:85:12:05:57:
df:c2:9e:0c:78:97:bd:5c:a3:35:a4:bf:93:69:0b:
dd:74:12:c5:3d:1c:67:9d:17:ae:d8:61:de:45:fa:
30:cb:cd:4d:69:75:e9:fa:4e:02:a4:9b:8f:0f:b4:
94:34:54:12:b2:b6:03:ab:0e:13:99:81:b0:a7:6c:
de:b4:84:02:29:0a:f0:a6:0f:80:c2:75:c0:b4:eb:
e8:a4:be:e5:94:d7:54:cb:11:bb:ea:25:e5:66:8e:
83:c5:50:bc:e6:9a:1d:79:b1:b9:88:db:2d:68:01:
4d:b7:bd:4f:05:83:bd:3a:03:c0:a2:fd:ee:a0:88:
77:d6:d3:19:61:d5:a5:47:8d:48:3d:f6:43:54:c8:
d7:f4:e0:d6:98:39:b4:62:36:16:e1:36:5d:57:13:
3a:0d:ca:01:52:c6:c3:04:9b:2b:f9:ac:03:75:b9:
6e:7c:fe:bf:6c:d8:91:09:34:cd:6c:a9:4a:9c:d3:
9e:a5:2b:37:a5:73:1f:80:89:09:c8:1e:b9:7a:5b:
f6:de:c9:e5:e6:1e:57:2d:63:95:0b:28:76:a4:e7:
d9:bc:1b:32:3d:10:6e:9e:c7:23:95:b0:a6:3c:8d:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.185.0/24
150.251.80.0/20
IPv6:
2a12:52c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212949
Signature Algorithm: sha256WithRSAEncryption
33:e5:3d:4d:d9:d3:f6:c9:5e:f0:fd:33:73:99:68:b6:3c:7f:
b3:88:50:d7:ee:d1:12:2a:6e:f8:a0:26:a0:19:f1:16:f1:31:
e7:88:ff:73:30:e8:b3:78:de:f3:38:b5:be:31:36:aa:b4:0d:
86:f9:ce:b2:ed:47:17:14:68:4a:9a:02:75:e1:98:7a:9a:3f:
13:b4:ca:01:6b:c0:6e:29:34:3b:2d:72:77:66:e2:a2:a6:2d:
00:c9:4d:ca:e2:2c:87:a6:13:be:ec:3f:13:65:ba:bc:57:12:
12:12:05:da:ae:ac:44:c5:09:d4:80:b6:9b:bc:07:79:f3:f1:
ed:22:5d:45:3a:1a:fa:1f:d7:13:55:34:a3:51:24:ab:eb:bb:
8b:ff:bc:44:6f:0c:da:e9:ad:96:09:90:5a:ed:8f:6f:2f:60:
9f:cb:fb:dc:75:db:c8:66:a7:f9:e3:b0:51:34:63:5e:2b:27:
99:b5:03:64:65:f8:95:6a:b6:26:88:d6:70:ad:90:4f:c2:8d:
71:43:1b:d0:28:85:15:22:29:6b:12:09:1d:dc:6b:2f:3a:71:
67:4a:31:7e:d8:2a:ce:e1:4e:a4:ab:6a:2f:5c:5c:31:5a:59:
c6:c9:6b:14:d8:2f:43:74:18:91:c3:8d:b7:fe:e8:15:0c:07:
f6:1a:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:06:53 2026 by rpki-client