Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
File: jqJrRYrUHUfSYadtjF3A_I0aniw.cer (raw, json)
Hash identifier: KAtCANyO++Mocfns7sKS3UCYuVAdmo1o+5sfkCEiDbU=
Subject key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E3736394623573FDFBD0EDF6194D2DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:18:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215962
IP: 194.150.165.0/24
IP: 2a14:1600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:36:39:46:23:57:3f:df:bd:0e:df:61:94:d2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:48:5a:26:a7:47:28:88:e8:ca:67:e6:a4:
5e:54:d9:1e:13:7c:b2:e1:e3:1a:95:df:60:7c:eb:
e1:54:c5:20:eb:9e:69:5a:40:72:9b:41:4a:45:af:
ed:fe:f0:26:c0:b1:98:da:09:f4:a7:b8:4d:22:37:
b2:7a:77:54:97:d1:33:8c:0b:f9:f7:70:7d:0f:f0:
e4:ca:5c:df:14:9c:7b:ea:e6:16:70:27:7d:a3:7a:
d0:e2:32:98:ff:e3:2c:68:09:bd:5b:0e:e2:6f:55:
6c:1b:cf:5f:21:3a:fa:c3:35:eb:bc:a3:4c:85:a6:
17:3d:3e:d5:c3:45:1c:1e:cf:35:76:9d:97:a5:6e:
48:ea:59:92:78:2e:31:8f:a9:60:c4:19:bc:9f:4b:
39:7c:f4:4a:9a:9e:e5:28:a1:6b:11:0f:0c:2f:10:
a3:97:15:13:7a:32:87:cb:bc:7f:77:c0:07:24:a6:
07:e2:36:38:b6:ba:90:e5:ac:ed:ba:64:d2:fe:19:
fd:5c:5b:1e:58:22:18:f0:fe:50:db:7d:3a:af:22:
a2:51:f2:fa:81:6c:c1:41:6e:87:19:75:35:11:53:
f8:4a:57:e3:fa:c0:76:87:68:d0:f1:3d:5f:50:87:
91:08:b1:c1:4c:36:13:4e:6e:a9:82:e9:77:d7:d4:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.165.0/24
IPv6:
2a14:1600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215962
Signature Algorithm: sha256WithRSAEncryption
ab:75:67:d5:0f:ec:3a:3e:5c:20:f5:13:83:28:41:bc:3b:8d:
7f:df:a7:45:7d:e2:80:0d:30:8a:1c:cd:4b:a0:3e:28:76:cc:
78:27:ca:3b:3b:a7:5c:e6:05:cf:b0:74:cd:89:8f:f3:53:28:
4c:45:64:0c:67:87:80:ca:fa:96:d0:1e:0d:47:70:06:c7:12:
7c:df:22:ed:53:73:c6:16:1c:8c:a5:04:a3:d8:05:59:09:81:
d5:86:e1:52:53:f3:90:b6:12:86:5e:c7:b9:46:12:5b:57:6f:
e3:c1:b6:8a:03:7a:31:d3:f9:50:e8:06:0c:2e:e0:9a:7c:bd:
5b:06:f2:55:dd:c0:4d:87:1a:ab:5e:ca:22:87:4b:d9:bc:d0:
20:6c:84:dd:ac:85:63:67:2d:1f:7e:87:b0:6b:a8:6d:3e:36:
da:b4:44:8d:d9:91:64:8f:4e:22:e5:65:f8:34:e3:d6:93:41:
ba:42:6d:28:b5:64:72:49:6f:b3:63:70:33:0d:87:3a:ae:9f:
e4:87:45:b8:94:1c:2b:54:08:01:e3:e7:a3:75:f6:7b:66:b1:
1b:3c:cb:71:9a:45:e2:ce:6a:e4:df:ec:1d:c3:96:78:96:33:
c2:61:0e:2b:93:c7:31:c0:a6:d6:47:1a:08:7a:13:f1:96:3e:
5e:16:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:02 2026 by rpki-client