Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer (raw, json)
Hash identifier: owYswywSE1kUf0LH+dgh7/3anQPkq+kh/CcbKMKV/5g=
Subject key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A34FD499163D52609D722BD65A2E21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 16184
IP: 193.109.124.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4f:d4:99:16:3d:52:60:9d:72:2b:d6:5a:2e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:43:19:b6:62:40:0c:fa:e7:ea:ed:c1:23:
1e:89:84:e7:93:5a:24:b3:c1:6c:b0:fc:43:a4:5d:
85:60:da:17:29:99:5f:a4:8b:4c:32:29:44:2b:a1:
d6:90:af:ba:a2:18:03:f4:a3:c2:46:42:e7:a5:91:
3c:e0:08:db:4c:a1:ef:36:4f:65:21:86:7d:7c:67:
64:d7:79:70:14:e0:f6:4c:5a:64:04:a8:50:42:52:
ae:7d:aa:fe:29:7e:cc:a6:42:9d:e3:70:08:5a:37:
5e:7f:f9:16:6b:f7:c2:9a:e9:9a:29:00:39:82:2a:
2e:ef:b1:c4:61:34:f1:a4:10:ba:6a:2a:1a:1c:3b:
d1:6a:e7:4e:2e:ca:6f:7a:6f:b5:56:34:a9:f5:46:
b6:38:08:cb:2a:b7:bb:e3:c9:54:76:54:d3:5c:a1:
18:fa:cf:05:63:63:25:7a:aa:a9:67:ac:91:a0:28:
bf:f0:5b:06:f7:06:0f:cc:20:82:a4:e3:fd:a2:fb:
85:a8:11:08:d5:18:a0:f4:1b:45:38:85:aa:b0:ea:
8f:12:8c:77:61:88:ac:21:08:36:84:af:ec:ed:1f:
6d:8f:9a:91:dd:f9:95:ad:f3:36:d1:a7:df:b9:a3:
1d:8d:87:c5:0f:9b:18:c9:6e:24:63:65:54:0c:ee:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.124.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16184
Signature Algorithm: sha256WithRSAEncryption
9d:58:a7:dc:a0:b5:71:6c:21:70:39:58:c5:81:f3:0e:71:dd:
e2:0b:87:92:37:a9:38:61:1e:f1:2d:9d:62:be:88:c5:7c:c7:
2c:71:3c:93:6e:2c:26:e3:7d:d5:55:4a:37:d3:f1:d5:31:77:
0c:50:5e:9b:b8:ad:24:2e:e9:e4:f6:12:89:4a:0a:94:bb:13:
48:b1:8e:6a:02:42:2a:55:15:e4:09:7e:6e:0b:46:54:c8:92:
4c:62:3b:85:07:0a:b9:0b:b6:e3:10:f9:92:4e:9d:a9:5f:d3:
52:e4:a7:e5:a3:cc:88:cb:5c:12:bc:43:e7:62:f4:8a:44:bc:
5d:3b:d7:4d:5a:c5:5c:ea:1d:d5:98:3e:03:45:4a:49:68:3d:
8e:dc:2f:d6:11:56:64:fd:4d:8d:62:eb:7b:40:b7:5d:46:4e:
14:df:6b:8e:ae:e9:86:df:b8:d7:15:ba:64:cd:67:4f:d6:59:
d8:bc:2a:2e:f2:cf:80:60:7a:a8:56:44:cc:b0:4b:6d:b5:c8:
2f:a2:04:0f:b0:ae:41:d1:79:c1:37:e3:7c:46:2b:f0:38:3d:
ed:42:b4:07:3c:c5:87:a3:20:7c:f1:19:ad:26:c8:c0:74:81:
4d:9a:e5:21:dd:e6:8e:f4:15:b7:d5:74:59:e4:2f:c2:20:cd:
2c:d8:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:59 2026 by rpki-client