Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
File: QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer (raw, json)
Hash identifier: YAaHwDKbW4l+3gXmIhTCclluaJ9JZoPS+EkPeI1YSVw=
Subject key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0FD10F9C3BC32E8288A0D1FCD4500B38F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Oct 2026 14:42:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 786
AS: 8548
AS: 34079
IP: 5.198.136.0/21
IP: 81.87.0.0/16
IP: 83.137.208.0/21
IP: 83.138.32.0/21
IP: 89.207.208.0/21
IP: 128.86.0.0/17
IP: 146.97.0.0/16
IP: 185.224.232.0/22
IP: 188.92.136.0/21
IP: 193.60.0.0/14
IP: 194.66.0.0/16
IP: 194.80.0.0/14
IP: 195.194.0.0/15
IP: 212.121.0.0/19
IP: 212.121.192.0/19
IP: 212.219.0.0/16
IP: 2001:630::/32
IP: 2001:67c:128::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:10:f9:c3:bc:32:e8:28:8a:0d:1f:cd:45:00:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 14:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:fa:7c:fa:11:b6:5b:a3:20:82:8a:13:55:
1f:50:88:11:75:7a:ce:d3:73:43:dc:73:b1:18:3d:
7b:71:89:bf:b0:99:fe:c6:4b:b0:e7:a8:b2:85:ae:
4f:c6:20:dc:5a:30:56:ca:99:b4:48:a1:65:f8:34:
0f:09:5f:4a:23:0d:a5:4f:01:24:b7:75:87:e7:85:
64:41:60:b7:e0:19:eb:f5:f5:54:a6:9b:09:cf:c4:
6a:4c:c6:99:29:6b:6e:83:7e:3d:64:48:f5:3b:82:
2c:37:51:01:96:b8:e7:2c:e9:dc:60:6b:35:df:50:
1d:c8:c7:93:ce:d1:50:b0:7b:3a:5c:56:71:c0:db:
8a:13:a5:90:a3:ef:9e:16:ee:c9:32:f2:29:d4:e1:
ba:8d:db:ec:9d:1e:9a:11:75:74:5f:d8:ae:f0:1f:
af:43:37:a9:f6:06:8e:53:95:d8:24:b8:e5:43:f9:
fc:f3:8d:95:56:b3:69:ef:88:76:e4:75:3f:65:8f:
53:8b:06:8a:1e:ab:cf:60:20:3a:75:4f:dd:d7:06:
30:a8:3c:7e:08:02:95:3a:5e:30:b6:57:4b:31:9d:
62:8d:de:82:0d:25:ba:e5:70:4f:af:73:1e:7a:bb:
e0:ed:cb:a6:15:b6:29:31:6f:15:5c:0c:c1:6f:df:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.136.0/21
81.87.0.0/16
83.137.208.0/21
83.138.32.0/21
89.207.208.0/21
128.86.0.0/17
146.97.0.0/16
185.224.232.0/22
188.92.136.0/21
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
2001:67c:128::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
786
8548
34079
Signature Algorithm: sha256WithRSAEncryption
6e:98:67:9f:e2:55:21:97:55:4e:4b:78:ed:49:ec:48:e3:42:
91:ce:02:54:21:6f:73:55:54:5d:e6:2a:f7:a7:a8:b3:9c:6a:
24:29:52:a5:db:d9:af:13:aa:46:d6:67:4e:e8:92:c0:43:43:
31:8b:05:6f:ec:e9:e7:fb:f6:e0:31:80:13:58:c7:ad:09:93:
78:e1:96:a5:74:12:6b:d9:fe:9f:ad:8f:82:a1:45:77:57:bb:
61:d3:6e:86:dd:21:80:7a:f3:db:0c:ed:16:eb:54:7f:b0:c0:
16:0c:97:69:7c:0b:27:c3:be:aa:01:30:fd:0f:3c:a5:22:39:
33:82:4c:1f:c3:38:fb:c1:56:02:74:47:a0:d3:54:aa:47:fe:
68:f1:7c:71:4a:31:fa:d4:56:84:1b:09:02:c5:46:1d:c2:09:
61:95:7d:e7:d4:b8:a3:15:43:a0:5e:bf:5a:5f:73:e0:05:1f:
97:70:ca:09:58:53:14:7f:b1:8f:8d:da:b0:10:70:79:66:92:
c0:93:b0:bc:69:07:49:0a:5b:36:78:a9:7b:09:d4:63:f6:7a:
3f:43:6c:3e:49:e2:1c:77:a8:ee:82:82:09:47:1c:84:ba:7a:
19:46:03:59:22:2d:21:9b:95:62:dc:54:60:51:bf:4a:ef:fa:
7d:56:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:52:20 2026 by rpki-client