Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
File: 1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer (raw, json)
Hash identifier: CbtLMl87G2nScoPizvkxn3G5G3iQ5zbbb882qqi+MwA=
Subject key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F99C08B42B3E66CAB9CF618FD60366
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48767
AS: 56645
IP: 92.42.97.0/24
IP: 185.140.52.0/22
IP: 2a07:1a80::/29
IP: 2a13:25c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:9c:08:b4:2b:3e:66:ca:b9:cf:61:8f:d6:03:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:ba:7e:c8:b3:32:9f:41:f4:bc:e4:e0:39:
b9:6c:f5:0e:43:43:de:f2:98:0e:13:c3:0c:71:4e:
8a:eb:5f:04:0b:4b:3a:eb:8c:38:99:0e:94:46:ec:
13:fe:fe:4e:a0:f6:4c:41:a0:07:87:36:82:27:82:
3b:a5:cc:46:7c:87:76:a3:fd:55:ed:09:a5:fd:e3:
3c:88:e3:01:42:ce:48:bf:1c:ef:d2:dc:da:fd:72:
2c:6a:8b:ff:9a:fc:dc:95:29:1f:e2:a8:7e:f3:b9:
d9:55:95:6e:65:63:b7:14:d5:32:06:cc:41:a8:c0:
f4:dd:4f:d8:89:77:e1:1d:e3:97:f2:fb:8b:7f:7e:
ea:e5:1b:c5:41:28:e0:2c:c9:64:92:8c:5e:ef:81:
09:5e:d9:3a:5f:4a:5d:75:f3:92:4d:30:86:d9:d8:
23:a7:e5:c0:77:30:b4:5e:71:a0:6a:31:94:be:08:
87:d5:11:ac:d4:a6:02:d0:b6:6d:4c:e5:1a:59:e1:
d5:7a:13:36:56:aa:23:04:3a:23:21:9d:d9:a4:00:
b4:8b:51:ec:88:07:fe:e9:28:6e:16:0d:06:f9:f5:
c5:b5:00:bb:7f:5e:54:c6:58:13:3e:d8:ec:8d:5e:
cb:6d:be:5d:ff:89:40:28:92:47:7a:44:45:88:6d:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.97.0/24
185.140.52.0/22
IPv6:
2a07:1a80::/29
2a13:25c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48767
56645
Signature Algorithm: sha256WithRSAEncryption
72:47:69:00:29:f4:05:4d:a8:a9:ac:42:fd:95:d2:7e:71:3d:
46:03:f3:77:9d:52:82:6b:60:3a:52:c6:ed:0b:82:c8:6f:be:
4e:a6:7b:af:cc:1c:2a:5e:fb:7c:05:21:a4:54:a9:4b:e3:f1:
e0:04:f0:74:c9:17:76:81:89:14:56:ff:67:1c:c0:5a:89:8c:
74:f3:c8:71:a4:e4:96:21:e5:79:79:e4:12:2f:37:55:01:8c:
6a:c1:92:38:61:63:00:b9:95:ce:09:60:1f:72:ae:c5:0e:48:
7b:d9:33:de:41:69:8a:2a:77:04:98:a2:bf:bf:58:6a:b9:be:
f2:3d:2b:dc:81:cc:1a:e2:d9:cc:e2:cd:e7:15:52:58:63:bd:
97:2d:36:b1:58:51:4a:a4:a9:2b:88:e8:b8:e1:8e:e2:bc:2a:
5d:d0:ca:26:41:6f:a2:ef:8d:2b:ba:3d:d4:d8:87:22:d4:fc:
3d:42:eb:35:9e:2b:65:45:e3:c8:04:18:86:87:9d:e3:21:4a:
41:12:c7:0b:c1:77:db:64:33:c4:11:df:97:31:ec:89:a6:e4:
fc:8d:31:48:f2:d2:87:7f:e5:50:91:57:47:8c:7e:38:63:f6:
79:6b:7c:39:8f:d5:67:ef:98:0e:0f:dd:c6:d6:e2:5a:40:a8:
cd:8a:ad:5f
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZ8Y+ZwItCs+Zsq5z2GP1gNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTBjZmZjYjI5ZWM3NThjYWUzZjU0YzZmNTBhYjNiZjY5NTMwZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNy6fsizMp9B9Lzk4Dm5bPUOQ0Pe
8pgOE8MMcU6K618EC0s664w4mQ6URuwT/v5OoPZMQaAHhzaCJ4I7pcxGfId2o/1V
7Qml/eM8iOMBQs5Ivxzv0tza/XIsaov/mvzclSkf4qh+87nZVZVuZWO3FNUyBsxB
qMD03U/YiXfhHeOX8vuLf37q5RvFQSjgLMlkkoxe74EJXtk6X0pddfOSTTCG2dgj
p+XAdzC0XnGgajGUvgiH1RGs1KYC0LZtTOUaWeHVehM2VqojBDojIZ3ZpAC0i1Hs
iAf+6ShuFg0G+fXFtQC7f15UxlgTPtjsjV7Lbb5d/4lAKJJHekRFiG1aDwIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFPkM/8sp7HWMrj9UxvUKs79pUw8aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzk3MTMx
MS1mNDdmLTQ2ZGItOGM1Ny1lOTc4MjA0MWNjMjQvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvOTcxMzEx
LWY0N2YtNDZkYi04YzU3LWU5NzgyMDQxY2MyNC8xLzEtUXpfeXluc2RZeXVQMVRH
OVFxenYybFREeG8ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEF
BQcBBwEB/wQsMCowEgQCAAEwDAMEAFwqYQMEArmMNDAUBAIAAjAOAwUDKgcagAMF
AyoTJcAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAL5/AgMA3UUwDQYJKoZIhvcN
AQELBQADggEBAHJHaQAp9AVNqKmsQv2V0n5xPUYD83edUoJrYDpSxu0Lgshvvk6m
e6/MHCpe+3wFIaRUqUvj8eAE8HTJF3aBiRRW/2ccwFqJjHTzyHGk5JYh5Xl55BIv
N1UBjGrBkjhhYwC5lc4JYB9yrsUOSHvZM95BaYoqdwSYor+/WGq5vvI9K9yBzBri
2czizecVUlhjvZctNrFYUUqkqSuI6LjhjuK8Kl3QyiZBb6LvjSu6PdTYhyLU/D1C
6zWeK2VF48gEGIaHneMhSkESxwvBd9tkM8QR35cx7Imm5PyNMUjy0od/5VCRV0eM
fjhj9nlrfDmP1WfvmA4P3cbW4lpAqM2KrV8=
-----END CERTIFICATE-----
Generated at Fri Jul 10 18:47:47 2026 by rpki-client