Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.cer (raw, json)
Hash identifier: exOSMnNzwsJNo3h7KIN0kiQfBbzpBjtiBRaOlRBYOzo=
Subject key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F65BFD0ABE67ECACD201FDD4DA6D53074
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jul 2026 12:28:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 21119
IP: 5.226.160.0/21
IP: 46.16.48.0/21
IP: 80.86.128.0/20
IP: 82.117.32.0/19
IP: 89.105.32.0/20
IP: 89.233.96.0/21
IP: 93.187.80.0/21
IP: 185.36.28.0/22
IP: 193.169.42.0/23
IP: 193.201.74.0/23
IP: 213.179.48.0/20
IP: 217.65.224.0/20
IP: 2001:a90::/32
IP: 2a01:b8c0::/32
IP: 2a03:6240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:bf:d0:ab:e6:7e:ca:cd:20:1f:dd:4d:a6:d5:30:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 15 12:28:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:4b:0e:16:00:d1:9d:16:c1:b4:82:66:e3:
94:6b:c2:e2:e3:11:bd:5c:10:d4:a2:74:81:bf:f4:
3d:d1:8f:4e:52:30:45:c3:92:29:75:15:79:0a:a9:
19:7b:0c:f9:34:cb:84:a0:85:91:5c:79:bd:36:a5:
ca:46:b7:a8:75:bf:ed:ec:73:62:7f:3b:19:d1:d4:
55:0f:9e:e2:37:cf:7f:a8:11:98:2f:80:e1:f7:30:
55:5a:e2:4e:b3:8f:e1:f5:50:31:24:0e:c3:8e:22:
27:92:43:9e:45:52:e5:4c:78:b0:f4:59:9e:1a:7e:
0c:e2:6b:6d:07:80:7d:f1:1c:06:22:35:15:de:5d:
0d:e4:f0:3f:05:62:1c:15:1b:46:b6:9d:20:9c:3d:
17:a5:8e:3f:88:a1:51:e4:03:19:69:7e:d0:e1:00:
9a:29:03:9c:d8:b1:6d:60:01:13:03:32:e2:12:ea:
2a:fe:4a:eb:0c:35:68:a0:71:56:d7:72:67:88:e6:
1d:c6:af:24:95:78:4b:f2:0f:5a:ba:3d:2e:4f:ad:
e0:b9:e2:3a:fc:28:2d:51:ac:36:44:67:69:4d:2e:
16:81:3b:9b:d2:17:24:85:65:c8:28:95:86:bd:fe:
75:24:39:01:07:ee:8b:b3:c5:4f:96:24:6b:1f:45:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.160.0/21
46.16.48.0/21
80.86.128.0/20
82.117.32.0/19
89.105.32.0/20
89.233.96.0/21
93.187.80.0/21
185.36.28.0/22
193.169.42.0/23
193.201.74.0/23
213.179.48.0/20
217.65.224.0/20
IPv6:
2001:a90::/32
2a01:b8c0::/32
2a03:6240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21119
Signature Algorithm: sha256WithRSAEncryption
a7:db:ca:c3:98:0b:b7:be:80:4c:3b:d9:7a:32:2f:df:a3:6d:
7a:cf:1d:9a:59:45:a2:88:52:21:c1:1c:44:33:40:b6:5c:61:
1f:1f:54:60:ec:ff:d0:56:ba:01:ac:98:c2:f4:f1:1b:53:d3:
a0:f0:77:bf:32:87:89:53:5a:08:fc:cc:74:ce:91:2d:d8:7b:
d6:31:77:cf:6f:5b:ad:07:fb:96:c7:02:4a:c9:25:f0:24:c5:
93:22:c3:3c:56:f0:2c:8f:fc:6c:db:ab:a4:c3:eb:f4:ad:ef:
93:2f:ae:00:b6:14:ee:68:55:f4:7d:e9:1e:cb:f2:48:7d:db:
af:1d:2a:ce:93:52:5a:6a:60:54:cd:7d:5b:8e:21:3d:8c:71:
20:46:36:23:75:fc:27:46:62:fd:c9:7f:53:dd:62:41:f3:83:
8f:2e:42:5c:0c:6f:5d:4a:4a:d1:fd:e0:25:1e:81:3b:f1:24:
21:12:13:d4:ea:4f:44:fe:27:67:b6:7c:28:88:3a:39:fc:0a:
67:0c:c4:46:37:9e:02:b0:11:ed:ef:13:e9:1c:a2:56:f2:0e:
9f:bd:b1:a0:75:18:74:1b:e5:7d:63:53:42:93:b7:c3:be:de:
ce:e7:71:c5:90:c9:14:5a:85:50:5d:52:3a:a9:7a:4c:de:3a:
4d:47:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:44:34 2026 by rpki-client