Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
File: BQ867ltqqRtsCUJRHgGsuhnnijk.cer (raw, json)
Hash identifier: oQbY+1GGB4ziqh4B+vt8usABY3iqqoe9NL3yFj241b4=
Subject key identifier: 05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08BDBF5ADE9B7353C583542E4C77C7F35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Sep 2026 15:07:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218718
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:db:f5:ad:e9:b7:35:3c:58:35:42:e4:c7:7c:7f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 15:07:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:21:39:4b:1b:50:5a:24:14:a6:1a:bf:2d:
af:b0:b6:6f:31:25:73:07:74:e0:d4:bd:aa:43:5a:
f2:95:a8:63:13:f8:6b:f4:bf:d9:8c:a8:38:a5:7f:
2f:31:47:83:70:2c:d1:ca:4d:81:8c:28:7d:af:89:
48:c4:79:8d:7c:59:c7:d8:44:ae:b4:01:b1:78:89:
68:d1:81:1d:c0:de:24:a1:a6:e3:50:a5:58:d6:95:
20:25:84:22:f4:49:df:f2:19:39:ba:8e:96:28:aa:
5a:b6:9f:0d:e4:61:e2:5f:a6:87:9c:6c:5b:dd:74:
07:4e:f9:06:c7:22:85:ef:df:a0:92:aa:a8:12:b6:
d9:d3:07:bb:d9:cc:35:54:3b:b7:04:d1:34:82:9a:
35:01:7f:5f:40:b1:11:c6:b1:58:1f:2a:51:48:08:
b5:46:b0:7f:2e:18:3b:79:59:4c:07:0e:21:25:63:
1f:00:81:0e:4c:ab:97:f9:bb:09:fa:11:dc:ce:0a:
e4:9f:5b:85:f4:5a:6f:b8:9e:c5:d7:19:4a:58:90:
93:eb:62:d5:9b:2c:39:c1:cd:02:6e:b6:db:3d:67:
83:68:a3:3c:ac:df:7f:16:b1:3e:ac:e3:68:c6:94:
e2:39:72:c2:5a:f1:43:81:ae:24:04:62:f9:bc:86:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218718
Signature Algorithm: sha256WithRSAEncryption
7c:4e:71:98:47:01:33:48:76:cc:4c:4a:63:96:43:b1:29:6a:
e8:7f:01:48:9a:c8:1c:9d:11:79:6f:1f:be:a3:e8:12:93:08:
1c:ac:7a:26:8b:99:b7:d7:f7:be:50:79:71:d1:b3:58:6f:9b:
ce:53:f3:c0:9f:54:24:60:01:48:ca:06:40:50:d1:b5:62:02:
0a:13:e6:2a:cf:f4:96:5c:bf:17:3a:eb:e1:1c:a2:aa:12:cf:
d7:d9:0e:d6:3b:bc:59:e1:8b:17:33:42:32:b9:db:77:4e:2d:
61:70:df:3c:c8:58:6e:d4:91:f4:3a:03:97:ab:ac:c1:24:f9:
67:0d:6c:3a:67:60:9f:68:8b:eb:e6:10:17:5d:31:fd:9b:a1:
a3:90:70:fe:9d:ee:5d:8a:be:27:4e:be:f6:b8:3f:62:ff:d1:
bf:cb:fc:d0:4e:cf:bc:e5:6b:bf:b8:1e:95:f3:f4:e4:0b:19:
35:fc:3e:8e:48:56:e8:1b:84:5f:9c:25:bb:1a:09:bc:4b:99:
39:97:fa:ab:40:6d:dc:b7:a4:98:2e:75:4e:64:95:f8:fd:7b:
56:6b:65:4c:2f:48:e6:42:f0:0e:08:16:19:bf:db:5a:67:d2:
7a:5b:58:79:0f:51:79:13:93:03:96:dc:f4:84:d8:b9:03:f8:
d4:94:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:00 2026 by rpki-client