Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
File: qwGK2gxETq14L6SLw3_Q-I__pXY.cer (raw, json)
Hash identifier: tAtzLjQ0LnKWaGz90akzIHVJXK8QPelfZ30RXKdhido=
Subject key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F3E11BCE9E15896980234A9F41BE9B8E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jul 2026 19:32:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209534
IP: 2a13:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:11:bc:e9:e1:58:96:98:02:34:a9:f4:1b:e9:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 19:32:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:96:e5:14:ed:b1:fd:d2:07:3e:67:26:17:
e2:ca:e2:a0:7f:7c:f2:52:bc:e3:9e:17:9e:2a:71:
8b:91:e4:b3:b4:a7:bb:41:f0:c0:51:5c:7d:7a:a3:
dd:b0:11:ac:74:8e:1b:46:1f:04:11:06:ef:ea:aa:
30:1a:c0:77:7c:a8:0c:87:b7:53:a8:17:3b:8c:c9:
d0:3a:3f:aa:fe:57:9b:81:7b:26:90:f6:8a:75:27:
52:44:48:de:71:be:71:2b:95:ad:3b:0c:06:95:98:
39:64:2c:eb:0f:cd:6a:95:c7:38:c2:4f:3f:c6:d0:
40:58:b2:c8:00:91:4c:c9:bc:a9:3b:12:fd:e2:68:
94:31:6b:93:ca:21:89:56:eb:9a:33:99:86:3c:df:
78:82:cf:f8:a7:bb:01:fc:5f:3c:ff:58:b0:aa:ea:
bd:be:82:af:4d:18:c3:25:11:99:99:af:3a:e2:7e:
d0:17:28:fd:60:b3:98:a2:a9:3f:aa:7a:6e:66:8d:
e5:50:39:1c:0c:6e:84:63:94:2f:25:9f:04:da:c7:
75:be:66:6b:19:65:3e:23:2c:5f:f0:b7:7e:b5:82:
c2:f6:e4:ad:89:6c:4f:a6:43:22:8b:de:b0:4f:dd:
a2:d6:70:d3:07:32:23:16:fc:26:40:62:50:57:db:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209534
Signature Algorithm: sha256WithRSAEncryption
34:46:76:4d:7d:04:f6:7e:4f:97:b7:60:b8:78:ce:38:23:36:
97:4f:53:90:74:53:6a:d9:1e:c7:50:cf:02:aa:02:3a:f6:d4:
fc:c4:0c:9c:db:07:e8:38:37:a9:1d:ea:17:e9:e8:c0:44:e0:
a1:6d:fd:7f:db:38:54:7b:c1:a2:ff:27:46:0d:15:d3:11:9d:
82:43:a9:a2:17:20:3a:14:53:1b:15:6c:a2:d0:d8:b5:58:27:
59:30:42:56:27:92:b6:78:fb:14:c5:36:e3:d9:12:dc:41:00:
20:a9:8f:d7:4f:0b:18:ad:5b:2b:50:fc:7d:07:45:f1:b9:27:
33:75:be:92:92:0c:a5:18:64:34:b7:e2:43:9d:f7:02:75:f4:
f6:35:50:28:da:5d:fc:20:28:3a:37:06:9c:41:c1:e4:d4:dd:
1b:a8:99:cb:da:4b:c0:51:f2:e5:1b:90:5e:c8:25:f5:b1:48:
1c:6f:ed:6a:52:7a:7c:46:54:9e:95:4b:13:e6:c1:e6:01:6c:
99:53:b7:73:84:af:ce:bf:ce:53:79:fe:aa:4e:24:23:b8:a0:
7d:22:78:65:26:c6:b8:2b:81:c8:96:ca:71:64:9b:ed:67:58:
b7:50:ac:2c:ef:a6:13:50:dd:63:7e:87:4f:81:65:93:ed:f4:
67:f9:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:09 2026 by rpki-client