Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
File: QSkmah4uyYN6UxNE-0zHVcK01Jk.cer (raw, json)
Hash identifier: T+ifFwmG1TjXtSXQYY8GrmsPBOgzOftnGNwLx+SKJZk=
Subject key identifier: 41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A009E7D1D272CB167E506B8ED87B4F9E06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 16 Aug 2026 09:29:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208636
IP: 185.253.88.0/22
IP: 2a0b:54c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:09:e7:d1:d2:72:cb:16:7e:50:6b:8e:d8:7b:4f:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 16 09:29:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:ab:6a:f7:97:4a:50:5a:a0:56:97:a0:3d:
69:41:55:cc:fb:25:85:80:dc:2d:c3:cf:af:d3:8c:
75:cc:ac:01:31:85:ad:98:9e:63:e9:04:54:22:41:
c2:60:95:40:98:c9:3a:02:18:98:ac:f9:10:5e:ec:
a0:b8:b8:70:39:f6:da:51:58:99:31:17:4c:c2:a8:
af:94:0d:ee:6a:b4:b4:08:d2:2c:41:53:2a:40:f6:
cf:ec:a7:c8:e3:1d:3d:6d:d1:e0:82:80:0e:e2:e2:
7e:8b:b8:03:90:c9:a1:bc:ea:98:3f:d4:41:87:d5:
d3:c6:77:36:d3:cc:fe:10:e1:ef:db:21:bf:2a:3b:
8c:7a:b3:25:00:19:7f:20:0e:ce:58:99:35:74:2b:
c2:ce:0b:e3:75:cf:8d:0f:67:b3:cc:43:2c:c9:73:
9c:fa:9b:8b:d5:83:10:49:ee:95:5a:70:a3:44:63:
6b:dc:a3:dc:ee:43:22:c6:6e:f2:ce:5b:0b:5a:9c:
28:df:66:25:ca:99:c2:e6:84:e3:cb:0b:73:8a:1b:
cb:22:c0:d8:e9:a9:ce:13:fc:5f:59:60:f0:1e:cd:
a5:87:11:4f:18:bb:45:b6:ad:f0:e3:75:12:68:83:
62:ac:d3:b5:7f:5f:ac:59:71:96:3e:f7:ac:66:c7:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.88.0/22
IPv6:
2a0b:54c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208636
Signature Algorithm: sha256WithRSAEncryption
32:db:15:2a:f4:c0:93:12:7b:d6:0b:6c:72:55:1f:06:17:2b:
b1:35:7d:15:87:75:e1:e5:74:82:aa:f4:41:1f:03:13:63:b7:
0f:9a:a4:f1:19:b2:77:03:6a:9d:12:a7:db:d5:04:22:96:43:
64:a2:95:7d:ff:39:bf:d2:80:a5:26:cc:ef:d1:4d:84:cc:d6:
15:d4:aa:20:ef:74:b1:e5:be:1c:8b:b4:b0:31:64:56:f1:d4:
6d:5f:8c:8a:91:77:aa:39:97:83:5d:4e:8a:b5:c3:8b:cf:2f:
a2:6f:1a:46:3b:5d:dc:f6:94:8b:57:05:1f:db:5c:85:58:60:
b0:0f:8d:ab:22:5c:d3:b3:bc:88:a4:39:20:4a:81:92:19:cc:
b9:11:0b:8f:41:e9:a7:09:53:45:a5:a5:a1:eb:b5:ec:ab:02:
60:73:f7:90:36:4c:7b:51:87:fb:6d:ba:6f:91:d0:2a:6b:7c:
25:87:81:65:48:f1:2a:12:c6:32:9f:32:f6:8b:72:b7:ab:ed:
46:4a:e8:bb:5c:b7:45:72:77:5b:d4:92:3b:88:1e:6f:29:f5:
13:bc:84:c1:eb:a9:9c:57:de:1a:8b:c3:88:dc:fc:38:05:c7:
f9:7a:66:84:28:c6:59:ad:4d:5f:fc:72:95:66:4d:b0:24:17:
f2:00:6d:c0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAaAJ59HScssWflBrjth7T54GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE2MDkyOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTI5MjY2YTFlMmVjOTgzN2E1MzEzNDRmYjRjYzc1NWMyYjRkNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5eraveXSlBaoFaXoD1pQVXM+yWF
gNwtw8+v04x1zKwBMYWtmJ5j6QRUIkHCYJVAmMk6AhiYrPkQXuyguLhwOfbaUViZ
MRdMwqivlA3uarS0CNIsQVMqQPbP7KfI4x09bdHggoAO4uJ+i7gDkMmhvOqYP9RB
h9XTxnc208z+EOHv2yG/KjuMerMlABl/IA7OWJk1dCvCzgvjdc+ND2ezzEMsyXOc
+puL1YMQSe6VWnCjRGNr3KPc7kMixm7yzlsLWpwo32YlypnC5oTjywtzihvLIsDY
6anOE/xfWWDwHs2lhxFPGLtFtq3w43USaINirNO1f1+sWXGWPvesZsdyuQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFEEpJmoeLsmDelMTRPtMx1XCtNSZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2IzOWZh
Yi1hZWM5LTRlNTYtYTc2Yi1mZDRlNDA3NWVjODcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvYjM5ZmFi
LWFlYzktNGU1Ni1hNzZiLWZkNGU0MDc1ZWM4Ny8xL1FTa21haDR1eVlONlV4TkUt
MHpIVmNLMDFKay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuf1YMA0EAgACMAcDBQMqC1TAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMu/DANBgkqhkiG9w0BAQsFAAOCAQEAMtsVKvTAkxJ7
1gtsclUfBhcrsTV9FYd14eV0gqr0QR8DE2O3D5qk8RmydwNqnRKn29UEIpZDZKKV
ff85v9KApSbM79FNhMzWFdSqIO90seW+HIu0sDFkVvHUbV+MipF3qjmXg11OirXD
i88vom8aRjtd3PaUi1cFH9tchVhgsA+NqyJc07O8iKQ5IEqBkhnMuRELj0HppwlT
RaWloeu17KsCYHP3kDZMe1GH+226b5HQKmt8JYeBZUjxKhLGMp8y9otyt6vtRkro
u1y3RXJ3W9SSO4gebyn1E7yEweupnFfeGovDiNz8OAXH+XpmhCjGWa1NX/xylWZN
sCQX8gBtwA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:13 2026 by rpki-client