Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer (raw, json)
Hash identifier: H8qI1TAKer7xKByr27ixQKhaXdorXuCDB/0ti7r+o6o=
Subject key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA710752A864295ED6BF1E14BADB81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 61149
IP: 45.82.106.0/23
IP: 86.104.226.0/24
IP: 91.235.107.0/24
IP: 185.16.88.0/22
IP: 2a03:cac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:71:07:52:a8:64:29:5e:d6:bf:1e:14:ba:db:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5a42a0ffd0274c655070609549e6420b63284df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:8a:bb:b7:be:13:55:6c:9b:62:9a:64:1d:
bf:04:97:e9:c2:29:11:ef:60:2d:08:fb:da:d0:2e:
49:7a:60:b4:8f:4a:1f:df:ee:75:55:d8:42:f5:95:
86:c3:26:3e:1a:54:d3:a4:8c:33:e7:75:89:13:98:
76:f1:f1:e0:c1:f9:8f:f7:48:f4:c3:c9:d7:f0:74:
87:5e:74:83:89:05:34:f3:32:56:30:7e:b6:10:bf:
9b:c0:87:dc:36:f7:88:46:0d:0d:ee:51:cc:2d:58:
dc:fd:24:91:4f:79:9e:ea:af:c2:1e:c5:2e:88:f7:
46:3e:57:9b:d5:65:3e:1b:65:fa:9e:58:70:36:69:
85:b2:14:be:9b:36:cd:d1:39:aa:ac:af:fc:4d:8e:
ee:c3:bf:89:fa:46:84:cd:57:de:c9:8b:80:6e:47:
c5:a2:f5:68:84:2b:4f:8e:bb:02:a7:7b:76:67:5d:
7c:6e:b9:e7:62:e3:d8:75:0d:82:04:15:1d:47:2e:
ba:95:5a:ba:76:3f:c7:46:97:9d:fd:7d:31:d1:34:
74:8f:0c:33:cb:7f:25:da:6a:5a:87:79:8f:8e:22:
00:cb:99:7f:f1:e5:28:23:ff:ce:03:05:73:de:7b:
be:02:a2:db:04:99:b8:f9:27:b7:6b:61:1e:43:f7:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
IPv6:
2a03:cac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61149
Signature Algorithm: sha256WithRSAEncryption
0a:92:42:c9:75:a7:af:37:73:99:10:11:be:82:2f:f1:18:a6:
1e:d7:57:aa:cc:b9:30:87:f5:02:2c:51:f1:8e:32:60:6c:b3:
4e:a6:f6:8f:5a:0f:f5:50:40:67:8f:06:4a:96:88:3d:20:ef:
3f:97:3b:d8:ae:4d:8f:95:3c:dd:98:5a:de:69:84:96:64:6f:
88:cf:3a:21:8d:0c:40:06:57:b6:e2:88:30:60:56:64:d9:03:
63:96:c7:4c:c4:5c:7c:ef:15:00:60:1c:f6:d0:cf:e2:cc:23:
a0:dc:8a:d3:68:0b:c3:e4:ee:f9:bd:83:42:5a:4f:8c:3b:de:
e0:1b:74:c6:b9:27:bf:3b:e1:82:cf:af:0a:27:4e:25:fd:d6:
10:ca:d2:f5:8c:d3:52:dc:61:50:7e:ba:2b:b1:93:a9:98:cb:
c0:10:65:3d:8e:46:95:ef:23:3d:29:8c:2f:3f:00:80:b1:ea:
28:1c:32:83:bb:8a:ea:fb:97:e0:7c:b8:be:fb:33:7b:81:a2:
82:46:3c:c9:29:73:3c:1a:6a:7a:aa:1f:39:1a:62:76:b4:8d:
34:98:c8:4b:b1:2c:5d:14:90:d2:e6:c9:32:6c:b4:36:ef:e3:
63:18:4e:dc:9a:0a:71:59:72:9d:3c:5c:93:c4:28:cf:a4:4a:
41:e5:46:6b
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZ8Y+nEHUqhkKV7Wvx4UutuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWE0MmEwZmZkMDI3NGM2NTUwNzA2MDk1NDllNjQyMGI2MzI4NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63uKu7e+E1Vsm2KaZB2/BJfpwikR
72AtCPva0C5JemC0j0of3+51VdhC9ZWGwyY+GlTTpIwz53WJE5h28fHgwfmP90j0
w8nX8HSHXnSDiQU08zJWMH62EL+bwIfcNveIRg0N7lHMLVjc/SSRT3me6q/CHsUu
iPdGPleb1WU+G2X6nlhwNmmFshS+mzbN0TmqrK/8TY7uw7+J+kaEzVfeyYuAbkfF
ovVohCtPjrsCp3t2Z118brnnYuPYdQ2CBBUdRy66lVq6dj/HRped/X0x0TR0jwwz
y38l2mpah3mPjiIAy5l/8eUoI//OAwVz3nu+AqLbBJm4+Se3a2EeQ/elyQIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFNWkKg/9AnTGVQcGCVSeZCC2MoTfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzMxZGNh
NC0xY2U4LTQzMTgtOTU2Yy1kNGYwOGJlMDUwZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvMzFkY2E0
LTFjZTgtNDMxOC05NTZjLWQ0ZjA4YmUwNTBkNS8xLzFhUXFEXzBDZE1aVkJ3WUpW
SjVrSUxZeWhOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQBLVJqAwQAVmjiAwQAW+trAwQCuRBYMA0EAgAC
MAcDBQAqA8rAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDu3TANBgkqhkiG9w0B
AQsFAAOCAQEACpJCyXWnrzdzmRARvoIv8RimHtdXqsy5MIf1AixR8Y4yYGyzTqb2
j1oP9VBAZ48GSpaIPSDvP5c72K5Nj5U83Zha3mmElmRviM86IY0MQAZXtuKIMGBW
ZNkDY5bHTMRcfO8VAGAc9tDP4swjoNyK02gLw+Tu+b2DQlpPjDve4Bt0xrknvzvh
gs+vCidOJf3WEMrS9YzTUtxhUH66K7GTqZjLwBBlPY5Gle8jPSmMLz8AgLHqKBwy
g7uK6vuX4Hy4vvsze4GigkY8ySlzPBpqeqofORpidrSNNJjIS7EsXRSQ0ubJMmy0
Nu/jYxhO3JoKcVlynTxck8Qoz6RKQeVGaw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 22:43:50 2026 by rpki-client