Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
File: QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer (raw, json)
Hash identifier: eAjwlgdezVKiikEVQhnpOKM9Pxk7N0QG2qACqSjVHwA=
Subject key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB569ADECE553864E59862986D2F91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203147
IP: 185.150.216.0/22
IP: 2a07:7c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:56:9a:de:ce:55:38:64:e5:98:62:98:6d:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b88e42f28836df48310dda05636457fa3f70db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:a4:37:93:05:a5:67:49:27:ad:78:5f:59:
82:ba:ac:0c:30:f0:30:b7:65:f1:b4:88:fa:2b:0f:
a2:aa:36:e3:5f:11:1d:db:cc:78:8f:dc:aa:2d:ed:
49:3f:96:b8:f5:49:58:06:f5:99:91:e2:09:f6:e3:
91:51:bc:9a:48:d4:67:0f:e6:01:dc:d6:4c:54:91:
ac:a6:06:52:9d:bf:77:0c:80:5a:9a:4a:87:4a:05:
6b:2f:ec:4b:26:46:b4:4f:3b:92:ce:da:c4:cc:7e:
8b:a1:41:bd:06:33:b0:af:7f:4f:e4:f7:95:49:9a:
76:c5:f5:2f:93:a6:76:48:29:37:ca:90:48:38:79:
f7:b6:40:eb:5f:6e:41:dc:ac:9c:f2:c2:00:20:be:
7c:40:3c:71:ff:46:e7:19:93:65:55:8f:7c:0e:15:
c7:8b:9c:09:e8:52:8b:de:3f:87:a0:b1:7d:fc:52:
9a:b7:bd:69:9c:db:3e:2d:6f:36:e2:56:d0:e3:37:
e6:2c:b7:0a:d3:df:53:a6:64:df:ec:08:11:6b:af:
2e:b6:01:20:17:29:34:72:a0:e4:44:e9:f6:c3:ee:
e6:f3:73:98:7d:d9:48:82:15:15:96:36:1a:b3:a4:
6c:ea:81:90:a6:bd:8b:cb:74:28:4c:ab:f4:8f:b6:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
IPv6:
2a07:7c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203147
Signature Algorithm: sha256WithRSAEncryption
07:cc:14:2e:9b:01:3a:14:bc:5b:22:41:71:96:f2:13:7f:db:
e9:4a:db:54:20:46:56:c6:04:7f:9b:bf:43:ab:ac:3d:6f:4c:
68:2e:11:79:e7:61:7f:05:a2:13:2d:72:79:16:8a:c2:78:09:
ce:dd:06:ea:ec:23:a0:2b:28:0d:48:c0:38:25:c3:11:db:50:
33:d3:41:79:28:bf:c5:5a:e7:fd:fa:3e:26:38:43:95:ab:3b:
f0:0c:99:4d:8e:26:de:61:d4:a5:58:f5:8e:53:fa:26:2d:4f:
fb:c6:2b:66:be:38:e9:98:f5:a0:61:d8:3c:8a:03:78:86:ec:
2f:e0:88:c3:06:2e:83:7a:63:84:68:e0:bc:38:27:f7:09:4f:
9f:fd:7d:6f:97:ee:5e:1c:cc:a0:f4:ce:91:e3:c8:0f:18:f5:
46:cd:2a:0d:1c:f5:bc:24:73:0a:06:e8:98:bd:ae:b7:83:c7:
e0:80:2e:06:eb:37:fe:b6:36:f6:8d:90:36:d2:dd:94:00:1b:
33:bf:1c:45:e0:c1:38:d8:d8:6f:0a:94:a3:64:99:66:eb:4c:
c6:9b:ca:10:2c:b0:0d:0e:41:fe:2d:ff:b3:c0:21:53:bf:ea:
9c:46:9a:15:a2:c8:f6:76:c3:70:cb:6f:32:1e:22:21:0a:9a:
53:4e:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:39 2026 by rpki-client