Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
File: qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer (raw, json)
Hash identifier: eO5QEg92qvCdFtB7cIcHZuMCvG1aAkGpgl0ghek4Gaw=
Subject key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCAED6D9C126D50399E9379CCCF1509
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:20:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198183
IP: 130.255.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:ed:6d:9c:12:6d:50:39:9e:93:79:cc:cf:15:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa358cc061e36be03a4ed92ad671780f06589be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:4e:94:ef:67:2f:bc:18:99:ab:6c:9c:08:
cf:06:cd:43:3c:94:31:d9:7e:aa:aa:69:ae:52:0a:
d9:20:f3:2c:76:06:b4:c5:9e:61:f3:1b:ac:4f:d3:
4d:31:89:14:32:30:17:d5:df:cf:53:d6:12:db:b8:
89:b9:27:8b:e3:46:20:43:fa:73:25:cb:5f:65:06:
0b:17:a5:dd:81:15:8e:13:b2:04:2e:57:2c:e4:63:
ab:d5:93:2d:20:da:2a:de:80:ae:d9:a8:de:f8:6b:
be:ca:7a:41:b0:47:9c:34:ce:a7:3d:c6:49:38:85:
fe:66:d1:4c:5f:ac:f2:b7:4c:98:9c:ee:ab:7c:f8:
d3:0d:f1:ad:9c:64:55:23:e5:e0:fe:ce:30:5c:f4:
7d:d1:0e:e4:1b:5f:6d:c3:2a:ac:20:4a:36:81:4e:
3f:98:f6:94:0a:f2:23:f9:44:f0:d0:cd:69:54:1e:
ed:dc:55:62:6c:a4:28:12:16:73:a9:1a:e9:cb:36:
0e:27:ce:ab:9b:bb:2d:78:02:3b:bd:6e:8d:e4:9f:
ec:b4:8f:3f:0e:0f:87:0b:1c:9a:6c:f0:b2:9b:71:
dd:27:61:a2:32:cc:94:ec:93:e0:62:8a:8f:9d:6a:
ac:c2:79:80:8a:56:5e:a8:f2:60:ec:3a:b7:d6:fc:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198183
Signature Algorithm: sha256WithRSAEncryption
6f:39:2d:66:5f:a4:ec:d5:72:12:18:76:59:2a:ab:fa:f2:b7:
a3:cc:74:5d:ed:5f:74:4b:d0:c3:21:99:90:61:25:e2:aa:3f:
20:f3:45:0e:b3:24:fd:f7:92:a3:74:c6:88:7a:8f:65:04:21:
19:9c:18:34:89:58:e3:58:3f:79:59:0e:c4:7c:68:c7:65:95:
e5:94:f8:e7:06:6e:2e:96:e1:1b:9d:06:17:a9:0c:2a:94:9a:
9d:6c:c0:32:d4:e5:07:95:34:97:14:fd:35:88:25:a0:f7:a7:
bb:34:81:76:26:fc:6d:3d:06:98:24:d2:d4:aa:74:64:81:33:
d0:0c:5d:95:8e:ec:5f:e4:d0:7d:00:88:c2:8c:7b:6d:6a:a8:
e7:8b:d4:10:fc:c7:9f:33:85:20:7e:75:ef:a1:cb:bd:32:ff:
88:f6:09:11:13:92:ec:4e:68:e4:fb:13:38:05:b8:4b:6b:ed:
5b:77:ed:ef:5d:53:31:ce:45:8e:72:88:68:1a:55:a5:28:1c:
3a:f4:a8:c9:55:08:e6:1b:ef:ef:08:f7:5f:5f:88:7b:66:86:
37:c6:7f:4a:34:9b:f7:62:94:b2:b3:31:79:b5:77:db:83:2a:
c3:8f:2a:ec:82:3b:ff:62:4c:16:9f:05:90:d2:bf:37:a9:89:
63:e7:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:27 2026 by rpki-client