Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer (raw, json)
Hash identifier: 2vbpl+9FEsJ6xoQknrs08mTI/oPm/or3F7Aon+qFQVA=
Subject key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB18040678D32DA532F993400B7817153
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 12:27:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.8.93.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:80:40:67:8d:32:da:53:2f:99:34:00:b7:81:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 12:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:b0:f5:4e:60:95:08:f1:0c:52:e6:88:2a:
2a:cf:0d:25:1c:42:94:15:3b:ca:58:89:44:78:37:
ee:f8:19:c8:a6:3a:65:ff:f1:a8:87:26:f4:b9:67:
7c:83:bd:ed:49:c8:42:de:ca:93:bb:96:2e:3d:59:
57:dd:70:fd:d1:15:8a:5f:7e:a0:b4:5e:7d:5b:84:
30:7f:1d:8a:90:49:c6:bb:56:1b:2e:a3:74:61:a2:
c8:bb:d3:74:f2:32:35:49:2c:85:c5:2c:84:fe:91:
57:4a:52:81:d0:2b:ec:5b:50:15:cd:9a:22:b9:04:
24:21:df:71:e2:a3:b9:70:31:17:99:c5:68:58:d5:
4d:27:56:eb:b1:67:94:ff:cc:82:07:b0:5d:d8:86:
4a:1c:25:c0:81:bf:92:f1:cd:28:3e:5c:eb:d2:91:
f0:2b:a8:1c:9c:f5:64:cd:f9:38:fe:19:32:b4:8f:
9e:dc:f0:30:56:70:79:df:a9:c5:b5:04:21:0d:98:
d5:f6:c1:84:a8:3a:9e:7e:cd:15:d5:ea:36:79:cf:
b9:93:05:03:62:81:3a:c0:58:89:48:88:af:aa:ea:
0b:48:d5:df:63:6d:b0:21:7d:00:2e:a8:ec:5d:b8:
f2:65:cb:ab:03:6b:7c:7c:bd:12:94:c3:af:4b:35:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
64:11:43:2d:7e:2a:79:68:88:51:a2:c3:95:ec:a4:03:62:04:
8c:4e:ac:cf:18:18:69:bc:75:58:3b:30:7f:e6:f4:67:10:af:
a0:0b:37:9d:e0:40:0f:e0:aa:75:53:7c:74:eb:7a:ba:a5:e8:
bd:c9:a8:24:99:cd:e1:45:62:b0:2f:17:1e:23:16:a8:81:c0:
1e:51:9f:6a:d5:f2:f6:6e:e1:4e:f6:8d:26:d6:2e:92:29:50:
fe:bf:96:9f:44:3c:3c:f5:02:c4:d0:9d:43:a8:2d:f7:98:57:
e6:32:2a:c9:16:b5:f8:2a:d1:df:12:e6:68:34:cc:84:dc:0d:
69:38:75:35:13:d2:bd:04:e9:17:67:79:e2:33:02:91:93:5a:
60:5b:1f:29:e5:10:64:f1:7c:82:62:c2:dd:45:02:0a:9d:87:
4d:95:d9:06:8c:f2:51:59:61:f7:cf:fd:4b:ea:a2:68:d4:00:
bd:7e:09:00:04:59:80:5a:7b:02:a4:cc:ee:f0:50:64:95:4c:
89:83:e1:b0:81:46:25:a8:1e:0d:37:26:69:e5:be:a2:d6:2b:
22:31:73:37:07:5d:fd:c8:91:77:13:75:5a:c5:42:98:c8:f4:
2d:98:8e:f2:7d:7d:51:15:09:b9:84:ff:1b:f2:e4:ce:47:13:
9f:43:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:51 2026 by rpki-client