Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
File: tqSX68eR3kMxUAM94t2_pIYQw1c.cer (raw, json)
Hash identifier: rwsebVKZtPoT3qNylETFw03nzxPJ/zHuvcdlD4oJrik=
Subject key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C990BD4EC4C5D502DCDC2F7A6D4CF5C1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Feb 2026 08:23:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29097
IP: 185.206.0.0/22
IP: 185.208.28.0/22
IP: 217.26.48.0/20
IP: 2a00:d70::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:0b:d4:ec:4c:5d:50:2d:cd:c2:f7:a6:d4:cf:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 26 08:23:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6a497ebc791de433150033de2ddbfa48610c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:59:6a:ee:53:5d:18:5a:f8:33:70:40:ac:
ec:5c:a8:52:66:fb:03:78:28:01:d8:f2:06:9a:b4:
08:c7:e5:65:44:65:89:68:5e:30:44:a4:fb:86:a6:
94:3c:36:ec:c0:a6:04:50:a1:db:db:91:c1:2f:7b:
ed:64:b2:c8:1c:84:6f:58:b1:da:72:5f:7f:9d:53:
d2:bf:e6:5d:96:4c:6b:9d:93:2a:fb:fc:e6:06:2b:
29:28:f5:9b:77:09:84:9e:5c:be:fb:46:5d:4d:47:
0f:12:d2:81:ef:e8:93:a1:94:e3:a2:ba:6b:a3:da:
4a:bb:66:c7:24:cf:95:de:96:bb:2a:5d:e1:60:14:
23:c6:b1:cc:81:62:b9:cb:d7:4d:d1:fb:a2:d4:ee:
84:af:f6:66:ce:53:f7:7e:f8:bf:32:70:1e:9d:f0:
21:72:0c:19:4f:bf:7e:e9:f2:69:2b:43:ba:93:0d:
89:e9:94:d6:e9:4c:d8:af:85:ee:ae:78:da:17:7a:
32:ec:aa:0a:28:89:48:6b:86:c5:20:bf:19:23:ab:
e2:30:5c:fd:34:59:9b:e9:fd:6f:c5:e6:80:55:e0:
dd:f7:bb:a4:6b:fc:49:89:42:2f:83:ef:aa:84:dd:
39:50:c5:14:5c:4f:e6:3c:8a:8e:b8:29:72:71:e5:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.0.0/22
185.208.28.0/22
217.26.48.0/20
IPv6:
2a00:d70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29097
Signature Algorithm: sha256WithRSAEncryption
55:92:46:17:78:b1:fb:0e:0d:22:db:b6:e9:10:d4:58:4c:73:
bc:69:0b:58:71:29:bb:9b:57:6e:3c:b9:26:5a:23:24:02:b3:
4d:c7:94:61:51:0c:cc:75:32:0b:ac:96:d7:20:18:de:e0:eb:
85:ea:67:96:74:60:b7:14:fc:d5:68:ca:b8:69:7e:6a:1f:1a:
99:50:61:54:77:72:4e:f6:e3:05:9f:54:5d:31:ad:cf:62:33:
e6:c2:5f:af:cd:f7:05:ed:c2:6d:4d:4c:71:62:92:d7:68:1d:
56:58:59:cc:ee:3e:9b:5e:e1:ca:9f:9a:8f:1a:6f:87:ee:b8:
90:90:84:a5:fc:1f:7f:d9:40:a0:98:00:1b:25:1f:a3:f1:53:
fd:63:e7:06:41:72:01:4d:21:54:14:5c:1c:9c:0f:6e:57:d8:
4c:bc:94:81:86:9b:8a:aa:fd:54:6b:e4:8b:60:85:10:13:1e:
a5:2c:66:2f:53:af:59:01:c2:41:3f:74:6c:78:b6:c5:95:81:
b1:27:e1:1a:8c:de:b4:0f:2b:8b:67:b1:25:6b:28:37:ac:1f:
d1:5d:32:54:df:39:eb:dd:52:f8:f3:61:ff:fb:a1:6a:57:31:
a8:64:9d:91:a7:aa:d8:25:90:83:79:2d:12:68:4e:ff:51:00:
06:d1:0d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:36 2026 by rpki-client