Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DQVrrGsi_R7QgSxMc_8JpZpAmm4.cer
File: DQVrrGsi_R7QgSxMc_8JpZpAmm4.cer (raw, json)
Hash identifier: GA5RJ3XbUCmngqXkQE4GTi+vefoJ4I/mSjk/nTKhuxk=
Subject key identifier: 0D:05:6B:AC:6B:22:FD:1E:D0:81:2C:4C:73:FF:09:A5:9A:40:9A:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D9BA54BCAAE99002C222BEA40743B38F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 17 Apr 2026 13:33:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213279
IP: 194.62.114.0/24
IP: 2a14:b400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:a5:4b:ca:ae:99:00:2c:22:2b:ea:40:74:3b:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 13:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d056bac6b22fd1ed0812c4c73ff09a59a409a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:06:91:4e:f6:bd:09:16:5d:31:ba:88:b4:
69:11:46:29:fe:ef:fe:ba:30:69:fe:14:63:7c:dd:
df:48:ac:c9:2e:fb:cd:2b:83:ff:51:28:eb:95:e0:
2a:63:59:3c:33:ed:ba:4a:0a:d0:28:01:db:15:7e:
17:3a:55:01:fd:13:b4:48:af:07:59:f5:23:ac:3e:
e6:8c:ba:bf:e7:7b:5e:99:8c:2d:73:24:d2:61:4e:
4e:15:2b:ae:f6:6a:92:0b:f5:fd:bc:d6:76:7a:fa:
23:31:0e:c7:66:04:d9:ca:fd:52:18:1e:f4:88:4a:
94:fd:85:4d:71:99:89:81:dd:fe:46:46:89:b7:a6:
e4:ce:75:6c:13:53:1a:ba:36:01:c8:42:06:cc:a4:
86:23:c3:03:81:88:64:83:c3:13:d7:14:b5:9e:1e:
99:ba:58:8e:14:95:c7:9a:e2:73:4c:bc:36:e7:d5:
29:13:b8:8c:c2:79:7c:55:6c:54:35:24:76:16:e2:
1c:8c:cf:8b:bd:df:0a:62:12:1a:31:14:8c:00:dc:
7a:26:a8:68:f2:f9:09:1f:9e:6f:cd:a5:ce:9c:44:
99:54:f6:82:9e:6f:fa:93:18:c0:a9:43:db:ac:21:
cb:93:ed:6b:ee:e5:58:d7:f3:44:bf:b1:fc:7c:4f:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:05:6B:AC:6B:22:FD:1E:D0:81:2C:4C:73:FF:09:A5:9A:40:9A:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/0/0D056BAC6B22FD1ED0812C4C73FF09A59A409A6E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.114.0/24
IPv6:
2a14:b400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213279
Signature Algorithm: sha256WithRSAEncryption
98:b1:ba:e5:aa:0c:16:ff:56:d2:e2:d1:b7:46:e2:a4:81:ce:
e9:8b:54:c0:96:df:d4:aa:b8:04:67:29:cc:59:32:b5:89:bd:
de:5b:ba:d8:a0:f5:d4:7b:45:c5:01:6a:fe:e1:d3:9b:46:96:
dd:7c:87:d7:fe:0c:49:d5:00:44:09:b1:ee:09:61:5c:33:1c:
7a:14:17:22:b6:8b:55:a0:58:32:0f:69:19:78:eb:62:3d:44:
c2:35:58:37:ad:c9:7b:1d:ac:17:08:ad:59:8a:0e:a6:77:9b:
e1:44:d3:92:c3:ae:be:fa:fa:7e:4a:4d:49:c3:6b:29:19:07:
b3:7f:6c:00:8f:d5:db:4e:41:46:dd:34:8e:73:ca:91:de:6b:
49:c6:49:8f:12:5e:91:48:79:82:7e:13:0a:d9:17:6d:94:bf:
a7:45:55:e8:5e:86:20:62:41:ae:2d:56:40:75:d8:c4:d1:5e:
27:9f:0a:0c:cb:20:0e:c4:40:f4:6e:b7:0a:e7:77:0e:0c:fb:
0e:ef:cd:78:91:0d:f8:14:aa:f2:93:fd:9e:c3:3c:c5:5f:95:
f7:91:47:5a:83:96:0d:04:ee:b1:8c:b4:19:98:7d:e8:cc:fd:
6b:68:3e:a1:b9:4e:65:3c:9b:6c:8e:17:d8:bf:ec:da:bc:6b:
fd:d4:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:25 2026 by rpki-client