Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.cer (raw, json)
Hash identifier: LKyB3fzJF8DqXHl8eFXOjy+O1bl5Xj2WMITAZjgcZJ0=
Subject key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D866465C95061DA6948F8F917B4B8F80A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Apr 2026 10:30:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42156
AS: 42282
AS: 50470
IP: 45.83.172.0/22
IP: 45.143.60.0/22
IP: 69.48.159.0/24
IP: 185.161.188.0/24
IP: 185.251.180.0/24
IP: 2a0e:8480::/29
IP: 2a0e:e2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:64:65:c9:50:61:da:69:48:f8:f9:17:b4:b8:f8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 10:30:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:40:7b:7a:4f:b5:16:10:bc:ca:ce:c0:00:
ac:c7:67:9a:87:6c:3d:0d:87:34:9b:3e:60:a9:e8:
7a:9e:41:89:ab:14:2f:94:c9:44:4e:bd:c3:79:6b:
47:79:8c:18:1e:9e:b7:63:c6:d8:58:ef:26:3c:2a:
1f:6e:b8:ab:a8:b6:fe:fe:1e:fe:59:87:de:d9:86:
db:35:a4:ca:09:b5:2e:30:d5:21:7d:7a:ee:a3:90:
76:40:71:c3:8d:41:66:9c:6a:37:79:6e:e9:9b:b1:
a3:de:23:a5:d7:2e:44:3b:63:fc:84:8b:fe:30:b2:
e5:6c:3a:28:f6:82:49:58:f0:29:7b:ce:41:5a:ba:
d6:fd:d7:d8:71:2e:5b:ee:fe:16:59:57:01:78:41:
5e:40:72:80:a3:6d:91:c3:b7:56:26:ac:c8:16:81:
6f:9b:c0:ba:c7:a0:75:b3:39:c4:a7:d9:a8:4d:78:
8b:73:dd:ba:1c:30:ef:c9:58:c3:72:e3:1e:26:d1:
53:70:96:22:8d:e5:a3:f7:d9:a4:5b:c3:35:cb:53:
5c:0b:5a:3d:6b:a5:29:5f:cc:af:ca:da:2b:14:47:
b7:30:b6:db:71:83:9d:3c:e1:eb:fe:f3:b2:d3:90:
71:99:46:45:1b:db:b8:c3:c6:1f:ad:af:5b:50:da:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
45.143.60.0/22
69.48.159.0/24
185.161.188.0/24
185.251.180.0/24
IPv6:
2a0e:8480::/29
2a0e:e2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42156
42282
50470
Signature Algorithm: sha256WithRSAEncryption
5b:1a:19:d2:19:2f:e5:4a:4f:df:50:23:3c:8f:55:d0:f2:0b:
51:55:e2:a1:30:bd:cd:a2:b0:a2:b9:aa:29:f7:a5:ff:6c:83:
47:ff:93:b6:b6:97:b5:a3:a6:df:02:0b:7e:90:7e:7d:28:11:
f4:83:02:84:25:82:c1:ff:51:03:e5:e1:87:17:98:54:0c:57:
77:bd:84:58:77:05:45:24:c8:a2:ba:60:da:eb:84:7a:05:be:
91:7a:12:dc:f3:3e:01:68:1e:d3:df:eb:5d:03:76:6e:8a:ef:
55:44:f0:a4:5c:ef:1f:68:74:31:87:78:d0:2e:35:1b:8a:29:
07:3e:9c:73:6d:c4:64:f3:68:5e:6a:32:49:be:31:5e:b0:83:
1c:23:89:06:e5:80:e1:7b:91:71:43:6b:ce:30:06:11:c4:49:
36:7b:19:55:e9:45:d3:ef:d5:27:aa:f7:66:db:89:93:70:13:
24:77:2f:56:ed:6c:fa:a1:28:86:94:9a:78:05:71:34:cd:9a:
4b:85:4e:4a:15:b1:51:94:c3:0a:4d:3b:5c:45:55:0c:ca:ec:
aa:19:96:a3:04:2c:6a:4c:21:1a:4e:a5:ff:76:ac:fc:b7:fb:
21:63:44:fd:40:de:e8:63:33:7e:2a:ad:6d:c3:72:47:59:d4:
de:00:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:22:28 2026 by rpki-client