Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
File: qXjDZVxaYJcS51UQDZiJKuHI5es.cer (raw, json)
Hash identifier: CVd2medhfZtWJc9Hy97CYZyWsi9naer5oOIyd6VyjtM=
Subject key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED45D91DFD76EFD96A26387CB694F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:19:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209110
IP: 5.182.40.0/22
IP: 2a0e:d800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:45:d9:1d:fd:76:ef:d9:6a:26:38:7c:b6:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:26:ee:fa:a6:3d:0f:c8:d8:dc:b6:c1:fd:
b0:d7:2a:ac:26:86:64:9d:60:15:4d:de:9c:50:c0:
55:aa:39:fc:6e:d9:29:94:cc:3b:1a:8c:e4:e5:33:
83:56:ca:08:9a:d3:73:5b:1f:09:62:60:61:18:6c:
e1:41:8d:5c:61:60:4c:55:22:a8:de:04:69:bf:c3:
9e:36:42:8c:cc:db:52:f1:ec:b6:16:c4:c2:0d:f3:
05:9d:9e:e7:61:1f:74:50:c3:8a:4c:80:3b:e9:4c:
4f:34:7d:04:85:c1:2f:01:3a:4d:b9:e4:1b:82:31:
b8:75:bd:04:cd:89:3a:2f:49:26:d7:6d:36:0f:70:
a7:df:72:49:74:21:06:46:9b:99:9e:cd:1c:48:e8:
3c:7f:03:92:26:b3:1f:12:98:73:11:9b:d7:72:2b:
6f:82:d9:8b:77:7c:28:75:dd:08:5f:d9:61:d3:c3:
f2:5f:fa:d8:6b:99:81:cf:0a:87:14:fa:8e:49:c1:
83:8a:48:f9:8d:aa:89:ae:d3:ed:34:20:35:fe:14:
ec:16:c4:6e:bf:84:03:12:55:01:e8:f8:c2:28:51:
05:f4:e9:ae:19:3b:ac:8b:83:c3:c2:c1:0e:82:f6:
0a:2f:00:ac:e5:f9:61:00:a2:9f:44:85:2f:9d:a5:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.40.0/22
IPv6:
2a0e:d800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209110
Signature Algorithm: sha256WithRSAEncryption
8f:91:30:81:e8:15:9a:59:5d:ba:4b:fa:8e:b4:b4:b0:60:27:
af:01:cd:01:13:51:27:71:c3:a1:ee:bd:b7:d2:7d:5e:94:31:
1b:b8:f8:5a:d3:62:16:b9:a7:39:fc:95:b1:2f:4e:c8:71:8b:
48:25:0c:67:1e:8d:58:fc:80:6b:05:b2:b0:e3:70:a8:7b:a2:
da:34:71:ee:a8:1a:c3:6c:84:0e:c5:de:48:aa:19:01:2b:f0:
72:0c:24:63:66:14:38:f8:bb:a1:27:37:17:80:e7:a2:be:32:
ca:d2:8e:7e:25:43:3f:b1:a0:33:b8:4d:57:c3:26:01:f9:c5:
af:b4:1d:a4:57:42:10:ad:f3:62:81:92:70:89:56:1f:79:4e:
3e:43:96:9f:4f:33:59:b5:77:f9:b1:56:a7:3a:84:ef:29:73:
0d:27:ea:a7:8a:fd:59:11:e6:1e:d1:42:5d:8d:04:2c:a0:39:
19:06:03:9b:3d:3f:dc:f7:a1:dc:fa:fe:27:72:69:9e:95:ee:
8c:6f:94:c5:62:0a:7e:6b:50:e1:3d:1e:c2:8f:47:e2:bb:30:
2b:48:a2:20:b0:01:8a:c5:c7:6c:a7:2c:e4:1d:bd:bd:25:19:
ff:7d:54:c9:cd:69:de:52:72:ee:cb:f6:37:dc:dd:04:bb:66:
90:0c:61:84
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt57UXZHf1279lqJjh8tpT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTc4YzM2NTVjNWE2MDk3MTJlNzU1MTAwZDk4ODkyYWUxYzhlNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcom7vqmPQ/I2Ny2wf2w1yqsJoZk
nWAVTd6cUMBVqjn8btkplMw7Gozk5TODVsoImtNzWx8JYmBhGGzhQY1cYWBMVSKo
3gRpv8OeNkKMzNtS8ey2FsTCDfMFnZ7nYR90UMOKTIA76UxPNH0EhcEvATpNueQb
gjG4db0EzYk6L0km1202D3Cn33JJdCEGRpuZns0cSOg8fwOSJrMfEphzEZvXcitv
gtmLd3wodd0IX9lh08PyX/rYa5mBzwqHFPqOScGDikj5jaqJrtPtNCA1/hTsFsRu
v4QDElUB6PjCKFEF9OmuGTusi4PDwsEOgvYKLwCs5flhAKKfRIUvnaVzRQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFKl4w2VcWmCXEudVEA2YiSrhyOXrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2RhNjE0
Yi1kZDE5LTQxZTAtYTdjNC02NmZkMjNlZWMzNGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZGE2MTRi
LWRkMTktNDFlMC1hN2M0LTY2ZmQyM2VlYzM0ZC8xL3FYakRaVnhhWUpjUzUxVVFE
WmlKS3VISTVlcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCBbYoMA0EAgACMAcDBQMqDtgAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMw1jANBgkqhkiG9w0BAQsFAAOCAQEAj5EwgegVmlld
ukv6jrS0sGAnrwHNARNRJ3HDoe69t9J9XpQxG7j4WtNiFrmnOfyVsS9OyHGLSCUM
Zx6NWPyAawWysONwqHui2jRx7qgaw2yEDsXeSKoZASvwcgwkY2YUOPi7oSc3F4Dn
or4yytKOfiVDP7GgM7hNV8MmAfnFr7QdpFdCEK3zYoGScIlWH3lOPkOWn08zWbV3
+bFWpzqE7ylzDSfqp4r9WRHmHtFCXY0ELKA5GQYDmz0/3Peh3Pr+J3JpnpXujG+U
xWIKfmtQ4T0ewo9H4rswK0iiILABisXHbKcs5B29vSUZ/31Uyc1p3lJy7sv2N9zd
BLtmkAxhhA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:08 2026 by rpki-client