Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
File: qwGK2gxETq14L6SLw3_Q-I__pXY.cer (raw, json)
Hash identifier: qtahnGZE+xUvJ08H3qtKq8I83ns8OqmtZhePyWxrhjw=
Subject key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FFB1C2913593CB0DE9C6E98389030DA48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Aug 2026 12:32:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209534
IP: 136.148.132.0/22
IP: 2a13:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:1c:29:13:59:3c:b0:de:9c:6e:98:38:90:30:da:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 12:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:96:e5:14:ed:b1:fd:d2:07:3e:67:26:17:
e2:ca:e2:a0:7f:7c:f2:52:bc:e3:9e:17:9e:2a:71:
8b:91:e4:b3:b4:a7:bb:41:f0:c0:51:5c:7d:7a:a3:
dd:b0:11:ac:74:8e:1b:46:1f:04:11:06:ef:ea:aa:
30:1a:c0:77:7c:a8:0c:87:b7:53:a8:17:3b:8c:c9:
d0:3a:3f:aa:fe:57:9b:81:7b:26:90:f6:8a:75:27:
52:44:48:de:71:be:71:2b:95:ad:3b:0c:06:95:98:
39:64:2c:eb:0f:cd:6a:95:c7:38:c2:4f:3f:c6:d0:
40:58:b2:c8:00:91:4c:c9:bc:a9:3b:12:fd:e2:68:
94:31:6b:93:ca:21:89:56:eb:9a:33:99:86:3c:df:
78:82:cf:f8:a7:bb:01:fc:5f:3c:ff:58:b0:aa:ea:
bd:be:82:af:4d:18:c3:25:11:99:99:af:3a:e2:7e:
d0:17:28:fd:60:b3:98:a2:a9:3f:aa:7a:6e:66:8d:
e5:50:39:1c:0c:6e:84:63:94:2f:25:9f:04:da:c7:
75:be:66:6b:19:65:3e:23:2c:5f:f0:b7:7e:b5:82:
c2:f6:e4:ad:89:6c:4f:a6:43:22:8b:de:b0:4f:dd:
a2:d6:70:d3:07:32:23:16:fc:26:40:62:50:57:db:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.132.0/22
IPv6:
2a13:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209534
Signature Algorithm: sha256WithRSAEncryption
49:54:08:3b:e9:77:ea:67:db:53:13:16:0e:93:70:9a:09:d5:
69:1a:68:ce:84:e0:e6:02:6b:28:32:06:7a:68:d0:06:19:4a:
8d:1b:50:7b:65:e7:c8:de:90:76:ed:20:54:50:3a:dd:94:ec:
5b:e0:e0:6e:3d:f9:22:d9:e6:b6:14:a6:b4:fd:58:50:7c:08:
a9:8d:29:d5:5f:91:d3:1f:d0:15:0e:51:82:57:cb:69:88:67:
66:44:a0:84:f1:79:93:66:c0:41:ac:3f:6b:bb:54:fb:ab:1c:
82:c6:be:a2:73:8e:a5:e7:40:a8:4c:b5:e8:74:9e:33:e7:d3:
68:bd:97:78:de:9f:c5:07:8f:a9:b4:de:3f:4b:a5:de:c5:c8:
12:d0:1f:ab:c5:dd:bf:91:50:d1:83:1c:82:cd:2d:96:bc:69:
65:6b:ea:eb:32:b9:f5:91:e0:3d:dc:e5:5f:e9:61:8c:68:24:
0f:23:64:13:df:ac:40:da:54:15:c7:f3:03:6f:76:69:54:41:
18:a7:93:7a:db:57:98:7c:1e:68:44:d9:8f:3a:3b:51:74:45:
fb:0a:3e:cb:b1:51:00:4c:82:f3:f1:b1:ea:40:45:55:f6:4d:
29:8c:e9:8d:75:76:3c:c0:55:74:88:31:3b:75:4b:e7:d3:39:
be:0b:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:07:21 2026 by rpki-client