Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
File: qUn5FWBAKb68AE3q1y0RvAcV37s.cer (raw, json)
Hash identifier: nxfrLNxCcPQnj2eHUbbFFmvAfCCuUmGEKgn9sfVInhI=
Subject key identifier: A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A018CE7455110913CE24FD7F736C494286
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Aug 2026 06:56:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 163.117.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:ce:74:55:11:09:13:ce:24:fd:7f:73:6c:49:42:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 19 06:56:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a949f915604029bebc004dead72d11bc0715dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:f9:e5:9c:7c:6d:b1:8d:4c:34:86:68:c6:
31:9a:9c:fb:7f:99:ba:ac:cf:bd:47:6f:9f:28:66:
32:74:1a:6d:27:e0:ae:ca:98:1a:9e:01:00:26:ec:
0e:ae:c0:aa:01:3f:b2:f6:30:fd:e5:f9:b4:04:af:
a6:33:b5:88:44:8c:bc:c6:1d:e0:61:3a:11:56:49:
03:10:80:c9:0b:77:71:0f:61:d7:f8:8d:ee:aa:07:
a7:c5:1b:51:ec:17:e7:10:70:81:01:f3:7a:b8:cf:
af:4e:ce:e8:68:29:55:88:2c:a5:6b:df:43:34:5b:
55:ec:08:98:7e:ab:48:e8:8c:57:07:fc:c8:82:33:
2f:f3:45:cf:65:0f:fd:29:9d:20:08:44:d2:1c:7b:
85:69:c9:8c:52:8e:38:f0:0d:b2:8e:ff:72:8d:7d:
7f:3b:33:07:a0:d9:74:7b:f9:de:89:8b:78:48:ba:
d4:6a:0d:c8:3f:31:ab:a3:24:7e:98:39:e1:a2:a5:
05:9b:ca:8f:93:5f:32:dd:54:a8:4a:ac:c1:33:e9:
35:cb:b2:69:fa:e8:b8:29:25:ec:18:b6:bc:76:9a:
8a:b4:9d:48:3c:ba:95:9b:d0:98:1b:56:02:ab:7b:
35:2d:96:c0:8d:08:e2:08:b4:01:b0:ee:31:1c:82:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:4f:ad:fb:b7:cf:19:7a:98:fd:97:70:13:e1:52:fc:1e:e1:
8e:36:72:77:22:2f:f6:d4:03:de:65:c1:36:7f:eb:2a:98:0a:
a7:48:65:3c:75:3b:d0:25:8c:9c:84:b8:07:c7:34:e9:cf:9b:
01:be:2d:69:12:5a:64:ed:3a:eb:36:fb:80:26:cf:e6:bf:38:
c1:cd:b0:fc:9d:00:bb:c0:f3:e8:ed:67:36:89:81:a8:19:e2:
3e:2f:39:f6:a2:04:58:60:92:61:2a:c6:8d:f4:a7:2e:22:32:
8c:35:12:bb:20:32:81:e1:10:6e:66:1c:87:5a:9c:ee:64:5e:
f0:20:d8:52:da:35:69:58:b7:30:fd:ed:92:bf:14:9c:be:4e:
3e:83:fc:b8:47:14:a8:47:40:70:19:50:6f:01:38:a6:34:cb:
a2:68:67:27:90:de:83:ed:04:3a:7b:7f:e4:fa:1e:5a:f8:92:
75:65:d5:52:c7:6f:31:c5:fb:91:df:fc:ab:9f:9c:5c:22:8b:
cf:6c:5c:22:0d:f4:1f:25:01:ca:c6:87:9f:df:8c:72:ca:a9:
86:e9:04:ad:f1:8a:01:da:e5:5d:d9:af:8c:87:93:5a:1f:83:
3a:13:aa:27:55:40:af:8b:5b:30:47:ff:ef:ae:af:19:3e:42:
f2:c0:fe:ed
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAaAYznRVEQkTziT9f3NsSUKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwODE5MDY1NjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQ5ZjkxNTYwNDAyOWJlYmMwMDRkZWFkNzJkMTFiYzA3MTVkZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmz55Zx8bbGNTDSGaMYxmpz7f5m6
rM+9R2+fKGYydBptJ+CuypgangEAJuwOrsCqAT+y9jD95fm0BK+mM7WIRIy8xh3g
YToRVkkDEIDJC3dxD2HX+I3uqgenxRtR7BfnEHCBAfN6uM+vTs7oaClViCyla99D
NFtV7AiYfqtI6IxXB/zIgjMv80XPZQ/9KZ0gCETSHHuFacmMUo448A2yjv9yjX1/
OzMHoNl0e/neiYt4SLrUag3IPzGroyR+mDnhoqUFm8qPk18y3VSoSqzBM+k1y7Jp
+ui4KSXsGLa8dpqKtJ1IPLqVm9CYG1YCq3s1LZbAjQjiCLQBsO4xHIKgwwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFKlJ+RVgQCm+vABN6tctEbwHFd+7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4Lzk4ZjI5
OS03OWYzLTQ0YzktYmU0Ny0zY2EwYTNmYmRkNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvOThmMjk5
LTc5ZjMtNDRjOS1iZTQ3LTNjYTBhM2ZiZGQ3MC8xL3FVbjVGV0JBS2I2OEFFM3Ex
eTBSdkFjVjM3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAo3UwDQYJKoZIhvcNAQELBQADggEBAKtPrfu3
zxl6mP2XcBPhUvwe4Y42cnciL/bUA95lwTZ/6yqYCqdIZTx1O9AljJyEuAfHNOnP
mwG+LWkSWmTtOus2+4Amz+a/OMHNsPydALvA8+jtZzaJgagZ4j4vOfaiBFhgkmEq
xo30py4iMow1ErsgMoHhEG5mHIdanO5kXvAg2FLaNWlYtzD97ZK/FJy+Tj6D/LhH
FKhHQHAZUG8BOKY0y6JoZyeQ3oPtBDp7f+T6Hlr4knVl1VLHbzHF+5Hf/KufnFwi
i89sXCIN9B8lAcrGh5/fjHLKqYbpBK3xigHa5V3Zr4yHk1ofgzoTqidVQK+LWzBH
/++urxk+QvLA/u0=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:56:51 2026 by rpki-client