Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer (raw, json)
Hash identifier: Jj2zPingwgoO3NhIfivnlgtpE8J0J08k7C4+LsmLfNc=
Subject key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0854312A6F2C1722A85CD4163F4CA065D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Sep 2026 08:22:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43631
AS: 48012
IP: 91.208.234.0/24
IP: 193.46.91.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:43:12:a6:f2:c1:72:2a:85:cd:41:63:f4:ca:06:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 08:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:d4:05:28:d8:73:28:e3:4f:18:88:db:7c:
d1:42:3a:0f:16:3b:f1:cb:c2:fb:16:e9:6c:8c:2d:
46:11:f3:65:44:1f:93:c4:e4:3e:50:2e:c3:20:01:
5c:53:74:7f:48:26:5f:8d:b8:f5:0b:75:86:58:69:
75:42:98:48:02:6e:30:b0:5c:fd:33:0a:13:a1:37:
5a:26:12:36:b8:b6:20:69:0d:a5:0d:f3:7e:f7:dd:
81:ae:88:11:a9:37:79:f1:70:5e:0f:6a:5b:b0:21:
58:06:74:d1:85:74:18:a7:99:22:10:5c:66:43:04:
f8:b6:0d:f5:7f:d0:c7:65:c5:79:54:e4:77:f7:a6:
20:1a:41:cd:68:94:2d:c9:60:be:5e:74:96:7f:2a:
41:ab:2b:5b:0d:df:70:80:64:c7:27:5f:08:07:0d:
18:be:47:b9:43:88:3c:89:c2:90:c6:cf:43:c1:23:
13:53:1c:18:e8:b1:c2:ac:ae:3b:67:d1:ae:dd:42:
f8:8e:9a:4c:d5:6d:f2:2a:7f:69:4e:6b:f8:0a:c4:
7b:6b:99:37:ff:19:55:31:6c:1d:d8:1d:c0:ae:89:
71:24:5a:7d:43:85:b1:26:2d:de:12:6a:93:a8:1c:
8f:84:d2:32:e0:df:d6:3d:1d:7c:1b:6c:52:84:9b:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.234.0/24
193.46.91.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43631
48012
Signature Algorithm: sha256WithRSAEncryption
4b:49:1e:76:a4:94:e0:e6:4f:ca:e5:79:a9:97:14:ad:af:ce:
65:ac:f5:de:65:1b:f3:16:c3:98:ff:61:86:1f:e8:b8:ce:9e:
47:ea:79:88:ad:8a:77:34:1b:cc:2a:3f:d3:51:95:14:c8:0b:
49:e2:9b:f1:a8:16:82:d0:af:6c:fe:0e:fe:f5:b1:b9:e9:69:
a0:3c:a2:27:7b:f2:76:c6:77:50:e3:7c:2e:90:b5:88:92:e3:
4b:d6:17:7b:26:c7:b6:3e:cf:b5:f4:94:76:01:e7:ba:f6:7d:
a6:67:78:df:ef:ce:05:c6:d2:c7:e9:8d:44:f8:60:2a:3a:8b:
c9:91:6c:10:5d:ad:9c:e4:72:01:8c:a0:2e:f6:13:1a:51:e1:
65:1f:06:7d:7d:56:f3:71:4b:fa:d0:b4:fa:25:51:7c:2a:b3:
3b:62:b6:11:86:03:31:13:62:8d:6e:a3:45:9d:61:a8:58:91:
0d:ec:78:a9:3d:a8:82:42:0c:c5:81:be:ab:12:9e:fe:c2:f4:
cc:a3:23:de:4a:26:83:e2:56:2b:28:27:a5:53:fc:72:25:dd:
8f:71:40:ba:12:41:e2:ae:1b:cd:2a:9b:48:05:5c:52:10:ce:
b5:e4:b3:bb:87:00:fa:76:bc:c0:95:3b:02:4f:34:d0:81:6c:
15:44:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:41:53 2026 by rpki-client