Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
File: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer (raw, json)
Hash identifier: jMqfmm4bq99txjSZINEK5zMNyyGeJIP0A5WyfpDB6ZQ=
Subject key identifier: AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA253E17C313AD90ABF71957FC6771
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 49478
IP: 91.234.164.0/22
IP: 194.150.254.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:25:3e:17:c3:13:ad:90:ab:f7:19:57:fc:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:42:a4:d8:7f:18:1a:2e:3f:56:b7:21:b3:
70:bd:9c:c2:f7:a4:7b:c1:dc:2b:f5:ca:3b:ef:e9:
5a:be:6f:45:3e:5e:99:49:9a:29:12:59:6b:32:42:
13:4e:76:ac:ea:f7:db:42:4a:d5:d2:1b:6c:a6:4e:
bc:b5:7e:e9:2e:f1:44:83:b9:f1:20:94:57:c9:28:
90:fd:af:10:26:84:33:e3:f4:48:c9:cf:40:26:31:
44:af:75:16:f5:55:73:1f:d5:0d:5e:82:56:c2:47:
de:4d:37:65:a2:35:80:6a:91:55:01:69:f3:15:14:
ca:e0:54:1a:83:e0:1d:d0:30:57:c6:0c:18:c9:27:
93:f0:33:8f:75:58:61:b5:de:68:80:65:60:f5:df:
3e:0b:94:55:33:cc:12:4a:1d:3c:50:61:09:ef:52:
49:ca:f3:a4:1d:1d:2b:99:a6:f3:b7:1a:2d:0e:df:
b3:74:e4:b7:8d:87:d7:ed:b6:1b:0a:28:20:b0:01:
8f:45:44:f5:10:80:ea:05:46:4c:15:3f:36:2a:3d:
d2:25:d7:4b:77:6b:84:ce:91:be:a9:26:9f:6b:3c:
7d:40:00:eb:20:06:ac:72:31:53:f8:cb:83:de:b3:
4a:09:0a:9b:cb:c7:ff:2a:6c:66:2d:b8:27:9c:90:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.164.0/22
194.150.254.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49478
Signature Algorithm: sha256WithRSAEncryption
57:13:e4:cd:38:a5:02:1d:14:08:53:33:01:11:58:11:f4:35:
67:4c:13:aa:3e:cd:75:00:d4:60:ba:cb:e8:0e:e6:a4:4b:65:
e4:73:fe:0a:5c:de:1b:ac:3c:f7:3b:4f:17:fb:b6:f8:f3:11:
8a:19:1e:44:e0:52:3d:ba:6e:06:3c:28:0f:b3:b5:d4:14:08:
52:a6:1b:41:d8:50:1b:a4:ec:04:c2:83:b7:98:93:32:7f:1d:
06:d7:de:6f:5a:11:5e:ce:49:b3:1e:cb:9c:1f:65:5a:6e:64:
be:d0:c7:9d:7b:48:70:8d:fa:cd:59:d3:2d:91:31:61:55:e9:
93:69:86:e0:29:ef:1c:2e:83:25:bf:a7:4d:c5:2a:9a:f1:1d:
a1:f2:a6:c7:f5:37:64:b8:6a:78:60:40:d9:14:50:84:78:5b:
7a:2d:22:43:fd:1b:d1:05:bf:fc:96:06:7c:db:df:13:31:6f:
a9:a6:29:26:8f:c3:83:84:ed:5b:2f:95:3f:4e:a0:b8:ee:aa:
2c:ee:ca:fe:42:2c:b2:ea:a9:ac:1f:b2:d9:30:64:39:f7:9a:
72:61:3a:c6:33:6f:e2:b6:d3:17:21:08:c1:f4:69:ea:af:31:
9d:61:c4:d4:d2:e5:ad:fa:af:30:25:c2:b7:cd:5a:3d:b1:ad:
dd:11:d2:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:04 2026 by rpki-client