Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
File: qQhIeg1_TGIo0NzBKaKoMg242_E.cer (raw, json)
Hash identifier: u2dUiIWebeKBDgaV99QoQviWLk741kNQ5D892jLWzI0=
Subject key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A080F2C0FE120B8ACAA1224989F043FA3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Sep 2026 12:16:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212683
IP: 2a0d:f900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:f2:c0:fe:12:0b:8a:ca:a1:22:49:89:f0:43:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 8 12:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:c0:73:d5:7e:c4:c8:08:0a:f4:db:28:d2:
1c:3c:3d:73:1e:3b:aa:f8:7e:8e:93:6e:05:49:fe:
21:53:28:1d:6e:4f:08:f2:1a:e1:ae:fb:7c:ee:03:
68:91:6b:09:65:1c:4c:07:d4:45:ba:8c:09:a4:35:
8f:a4:67:32:bc:0b:8c:38:31:6e:6f:6a:97:e0:2e:
84:fc:12:5e:83:e2:bf:06:88:8a:36:0c:d6:eb:4e:
f7:8a:ad:b2:f7:2a:f9:66:2b:26:d8:4d:c9:9f:25:
07:89:b6:3e:b5:7d:bc:8b:e5:07:09:74:6f:71:91:
c6:86:fd:10:ba:76:4c:94:c7:bc:0b:38:fe:9f:de:
d9:d9:7b:ef:71:e1:3b:e0:7f:bc:f2:82:b7:d4:1d:
5b:dc:62:bd:8b:cf:27:86:c4:d8:bc:8d:76:fc:e2:
7f:ab:59:30:e0:52:96:d5:4a:55:8d:2b:b8:8c:db:
2b:c9:35:5f:b0:56:27:cc:4a:44:65:35:49:f6:9a:
22:f1:c0:24:77:6e:91:ab:e1:78:e6:82:f6:48:bf:
7b:d0:43:73:00:0d:0d:03:45:f2:60:86:38:0a:c0:
da:42:4a:9b:8d:13:86:30:fe:3d:f1:c8:5f:99:96:
75:c7:77:5e:8a:7f:14:cc:65:e0:7f:e1:0f:c7:a4:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212683
Signature Algorithm: sha256WithRSAEncryption
71:56:34:32:2c:06:39:a9:6f:96:5e:b4:a9:ef:ad:a9:10:58:
6a:7c:fd:a2:92:78:86:ab:62:70:c4:1e:2c:1f:eb:33:7e:7e:
f8:d3:db:47:c7:e7:ae:bf:ec:9a:98:0b:7f:e7:3e:b2:14:98:
cd:6d:c3:b6:dd:b1:5e:0f:e8:d8:63:3c:fd:1b:56:c0:a3:ae:
2d:c7:73:4c:7b:44:27:4e:bc:b8:fa:0a:11:67:64:63:04:89:
1d:f2:17:e6:20:98:10:12:f8:86:5c:cc:41:d7:96:08:a0:54:
a7:12:68:14:81:06:cc:77:52:41:8b:8b:a3:5f:55:18:47:3e:
ce:02:20:87:5f:a5:7b:c2:e4:29:db:c1:83:ca:fe:3a:63:f6:
09:39:5c:06:7f:1d:82:17:4d:14:df:b2:8d:91:61:46:2e:e2:
e4:85:bc:1c:4a:e4:c2:31:cf:d6:d2:73:de:c4:c0:fc:75:6d:
52:1d:af:20:f5:86:58:5f:28:4b:3b:42:f8:1f:47:5e:21:dc:
03:92:a9:0f:cf:a0:ce:b3:15:df:91:b7:07:07:15:e8:22:e8:
68:ab:d9:2e:16:13:19:66:1a:83:03:fb:d8:f3:32:9b:a8:c3:
ab:cc:0a:9f:30:91:5c:9b:85:ec:ba:cd:fe:61:bc:d9:d5:af:
40:35:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:31:56 2026 by rpki-client