Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
File: Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer (raw, json)
Hash identifier: oG2AxX8QrU9MUETBWY2gI4z3l5DdWomsbGgBNOFaq3M=
Subject key identifier: 43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A01F1AC28D562D9B63AFC47713520B743C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 20 Aug 2026 12:17:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 24621
IP: 193.110.172.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:1a:c2:8d:56:2d:9b:63:af:c4:77:13:52:0b:74:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 20 12:17:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43ba531af57679e0211bd6941b5c188f00a0c25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:df:a7:bc:5c:cc:4b:0f:38:e2:7a:ea:3d:
85:9f:96:75:15:4f:00:6f:a1:22:0c:43:bf:b1:0f:
e0:b9:58:f3:44:86:9d:a3:f3:0e:81:f2:21:1a:2a:
ab:d6:35:8f:5f:65:48:3a:b2:ae:ff:71:68:68:0b:
ca:13:77:0d:85:b5:2d:f5:1e:a7:73:fb:92:14:9e:
fd:a2:b6:c1:ad:0b:e1:4f:7f:d8:63:dd:54:dd:e4:
5e:60:ae:91:70:9a:20:94:03:8b:95:82:21:7e:20:
8d:f4:80:e6:d0:f9:8f:39:0d:fe:4b:7c:94:51:36:
db:9a:ea:1b:f8:d4:3c:82:b7:06:c4:de:23:f4:8c:
d3:31:bb:17:19:06:3b:35:67:69:51:fd:3e:59:1d:
0c:b8:b9:e7:b5:03:b5:71:3f:94:fe:7f:f4:67:7e:
2d:18:29:81:3d:c9:50:da:53:c2:fa:7a:37:cc:d0:
4a:ae:82:e9:30:dd:01:e1:3e:61:01:2f:8d:e3:44:
18:9a:01:4d:e6:75:fd:90:47:a4:50:0c:4d:71:0e:
73:5e:d5:21:71:b4:8d:f7:d1:ce:3d:25:ed:6e:2c:
03:70:af:e8:3f:4d:44:22:48:85:d5:9d:84:4d:f1:
ae:91:78:41:b6:e1:2e:48:6b:1c:41:f5:d7:0d:f1:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.172.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24621
Signature Algorithm: sha256WithRSAEncryption
53:ae:6a:33:47:46:75:4a:65:be:84:08:6a:09:61:ca:a6:3d:
61:68:d9:7d:c5:ba:ed:0d:ca:a3:53:86:07:77:1f:fa:19:8d:
9d:c9:43:4f:ec:e2:63:20:73:97:28:1c:5d:27:33:44:af:62:
49:db:8c:56:11:cf:20:6f:6f:42:ca:f1:b4:2c:b3:10:b8:db:
2d:db:94:b2:29:ce:f4:f6:7a:a8:15:7e:4e:6d:f0:7b:17:01:
5e:f0:ff:12:10:19:b9:b4:77:8a:9e:16:3e:46:43:f6:ea:f4:
14:7e:9f:f6:68:c1:39:47:e0:09:52:69:9a:2e:31:b3:c4:d9:
c6:23:ff:e6:7c:06:69:f9:e8:04:64:1c:72:42:4d:08:31:90:
ae:5e:5b:c8:3b:b8:c7:e0:62:ca:12:bb:06:58:d4:04:88:70:
54:b7:0d:04:9f:ed:8b:eb:5e:a6:c1:f3:b5:e4:7d:49:48:aa:
88:dc:51:17:44:b9:6f:d1:00:85:e2:f5:e4:18:47:07:a4:ab:
44:1c:cc:7b:08:b6:ac:c4:98:9e:f9:12:d9:a1:26:10:1b:a9:
ba:88:3f:38:fb:6d:d9:53:b3:9f:e9:f4:1b:49:06:7a:62:c0:
f6:33:8f:b9:90:15:4e:70:10:df:9b:fc:3f:fd:5d:59:02:34:
87:ea:0c:c9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAaAfGsKNVi2bY6/EdxNSC3Q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODIwMTIxNzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2JhNTMxYWY1NzY3OWUwMjExYmQ2OTQxYjVjMTg4ZjAwYTBjMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3fp7xczEsPOOJ66j2Fn5Z1FU8A
b6EiDEO/sQ/guVjzRIado/MOgfIhGiqr1jWPX2VIOrKu/3FoaAvKE3cNhbUt9R6n
c/uSFJ79orbBrQvhT3/YY91U3eReYK6RcJoglAOLlYIhfiCN9IDm0PmPOQ3+S3yU
UTbbmuob+NQ8grcGxN4j9IzTMbsXGQY7NWdpUf0+WR0MuLnntQO1cT+U/n/0Z34t
GCmBPclQ2lPC+no3zNBKroLpMN0B4T5hAS+N40QYmgFN5nX9kEekUAxNcQ5zXtUh
cbSN99HOPSXtbiwDcK/oP01EIkiF1Z2ETfGukXhBtuEuSGscQfXXDfG6qQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFEO6Uxr1dnngIRvWlBtcGI8AoMJaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzA1YzNm
YS00YzAxLTQ0ZTgtOGQ4OC00NmRlNjFmZjRjZWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvMDVjM2Zh
LTRjMDEtNDRlOC04ZDg4LTQ2ZGU2MWZmNGNlZi8xL1E3cFRHdlYyZWVBaEc5YVVH
MXdZandDZ3dsby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwW6sMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AmAtMA0GCSqGSIb3DQEBCwUAA4IBAQBTrmozR0Z1SmW+hAhqCWHKpj1haNl9xbrt
DcqjU4YHdx/6GY2dyUNP7OJjIHOXKBxdJzNEr2JJ24xWEc8gb29CyvG0LLMQuNst
25SyKc709nqoFX5ObfB7FwFe8P8SEBm5tHeKnhY+RkP26vQUfp/2aME5R+AJUmma
LjGzxNnGI//mfAZp+egEZBxyQk0IMZCuXlvIO7jH4GLKErsGWNQEiHBUtw0En+2L
616mwfO15H1JSKqI3FEXRLlv0QCF4vXkGEcHpKtEHMx7CLasxJie+RLZoSYQG6m6
iD84+23ZU7Of6fQbSQZ6YsD2M4+5kBVOcBDfm/w//V1ZAjSH6gzJ
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:19:19 2026 by rpki-client