Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
File: rQi0bfZb4nNiokb0hsKtxovi2F8.cer (raw, json)
Hash identifier: lYQ1aRYoESQeDz71tkwNlauIz5xe5t4+wwvFKJ/drIo=
Subject key identifier: AD:08:B4:6D:F6:5B:E2:73:62:A2:46:F4:86:C2:AD:C6:8B:E2:D8:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA3DF672D7E33DB919E2F1E8A1E83B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 39767
AS: 51983
AS: 61427
IP: 78.158.72.0 -- 78.158.95.255
IP: 185.90.140.0/22
IP: 194.88.6.0/23
IP: 194.88.12.0/23
IP: 194.104.123.0/24
IP: 2a05:e200::/29
IP: 2a13:6500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:3d:f6:72:d7:e3:3d:b9:19:e2:f1:e8:a1:e8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad08b46df65be27362a246f486c2adc68be2d85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:e9:b4:2b:d2:03:ae:d8:70:70:a4:d9:3a:
09:44:fb:c7:e3:92:f9:6e:61:f8:2e:d6:27:90:ae:
76:b9:47:22:f9:b4:ad:75:c3:6b:d9:31:14:75:96:
07:03:f7:8a:04:1e:ef:51:c3:22:c5:44:c9:a8:90:
eb:eb:46:68:71:2c:73:c3:6d:79:be:ad:0f:3b:d1:
5c:ae:a6:06:ac:e1:8d:f9:e7:c9:67:fe:1a:17:d9:
88:bb:b0:cf:72:0c:ee:9e:4a:c7:44:6b:73:51:19:
2e:51:bb:57:19:4f:86:af:11:ca:53:ee:e1:db:23:
ab:c5:5f:cc:75:f7:b0:20:56:8e:40:d0:d1:52:9f:
b7:bb:a7:de:9a:11:0f:41:bc:3d:8d:c5:30:83:e8:
ba:33:e7:36:36:69:9a:52:b0:4b:41:74:38:19:6d:
28:76:b1:a6:d6:6d:06:02:4d:b7:be:09:6f:2d:30:
c4:49:9d:76:50:a3:f8:e8:0b:b7:3e:79:01:a9:32:
8e:a0:83:e0:2b:93:76:89:44:1a:49:0a:76:ad:e3:
3c:39:0c:e9:e0:b0:ac:52:bf:42:56:24:89:f9:4d:
79:e3:dd:fd:77:29:2a:be:66:a6:14:45:29:74:65:
12:84:7c:bc:eb:89:9d:1b:17:09:3d:bc:fc:eb:56:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:B4:6D:F6:5B:E2:73:62:A2:46:F4:86:C2:AD:C6:8B:E2:D8:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.72.0-78.158.95.255
185.90.140.0/22
194.88.6.0/23
194.88.12.0/23
194.104.123.0/24
IPv6:
2a05:e200::/29
2a13:6500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39767
51983
61427
Signature Algorithm: sha256WithRSAEncryption
91:2a:ce:dd:88:60:55:0c:19:c6:91:04:1a:0f:64:ac:16:e9:
e0:dd:da:f1:01:a1:46:12:5b:f4:31:f3:37:59:f8:6f:05:7c:
95:e4:ad:46:00:6c:f9:45:80:3f:6d:54:8c:be:1b:ee:f3:b1:
0b:9f:42:f1:90:a7:af:82:37:92:f9:36:15:ab:7d:de:5b:39:
46:cb:2b:e5:c5:b9:a2:81:1d:56:dd:ab:49:ec:df:bd:d4:60:
7c:33:43:69:aa:2a:44:e6:ab:78:f0:4b:d6:1c:d0:f7:e8:0f:
0b:3c:46:32:a0:f0:5a:d2:c3:12:eb:2d:fe:81:0b:7e:10:dd:
2b:7e:9b:04:ec:18:d3:84:8f:ed:64:eb:0b:4e:30:d1:f7:53:
0a:5b:e8:af:b4:3c:a4:e4:37:01:ad:0b:cd:68:b0:3e:75:e5:
b3:89:27:a9:82:c4:0b:d2:7e:d6:22:53:eb:94:6f:c7:f2:f2:
26:a9:7c:86:40:34:97:f7:bf:2e:d7:15:39:9f:90:d8:af:25:
08:07:6c:2d:86:1d:4f:e1:23:aa:5c:d4:97:e8:36:71:f7:ea:
62:61:47:82:de:56:f4:ff:24:9d:88:cf:66:55:5f:6a:4a:59:
09:6b:1b:5d:ff:25:a2:c6:ed:7f:d2:4d:33:c2:aa:e9:cc:e6:
6b:f0:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 23:51:45 2026 by rpki-client