Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
File: QP4jqg2xC2-IOpvBujN0lE8welQ.cer (raw, json)
Hash identifier: v4sWh27amTGMbFtZ+XPqXoBb+FDNt/l+Fen2xcq8Wxc=
Subject key identifier: 40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC035ACB7FEB116C644E0577613665
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 16354
IP: 134.19.136.0/21
IP: 171.22.96.0/22
IP: 185.30.120.0/22
IP: 2a03:cd80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:03:5a:cb:7f:eb:11:6c:64:4e:05:77:61:36:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:ff:2a:d1:c3:b3:a4:38:b8:d8:3e:7b:e5:
c3:b3:cf:7f:7b:dd:65:2a:5c:c5:56:f4:54:e1:15:
b8:dd:2f:5c:61:7a:20:b1:13:70:a2:f4:66:51:eb:
43:90:fe:ce:98:8e:53:78:e5:27:93:65:7c:9a:09:
fe:bd:6b:43:46:af:83:e0:36:c9:8a:cb:6c:31:fe:
cc:fa:34:27:02:96:c7:3a:71:54:45:0a:7e:62:f0:
00:89:51:e2:17:6b:fe:71:65:c6:97:ee:60:fb:98:
89:83:46:a4:a1:09:02:dc:c3:c8:5f:56:07:83:18:
74:f1:6c:12:c8:a1:cc:2e:e8:da:24:3f:5a:c6:2f:
dc:af:8a:ec:ea:04:ff:81:45:a5:5f:eb:95:e3:74:
c6:86:bd:ab:2f:70:b9:07:0f:be:b3:e3:ca:6a:f7:
c4:57:dd:01:24:85:bd:3f:ea:c1:6d:b5:f6:9a:aa:
37:36:45:96:ca:ab:e7:83:9f:44:71:12:80:c2:2a:
e7:4e:e0:e8:01:70:ae:f7:c7:7a:1a:dc:d5:d0:1d:
75:34:cb:95:b7:f0:f4:4c:eb:00:91:38:61:b1:53:
86:27:85:2a:76:de:36:81:36:41:c3:93:3a:6c:16:
b2:4c:e3:3d:71:07:ce:8e:02:ef:28:b4:b4:9b:1d:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.19.136.0/21
171.22.96.0/22
185.30.120.0/22
IPv6:
2a03:cd80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16354
Signature Algorithm: sha256WithRSAEncryption
5f:df:83:da:0c:10:56:70:8d:bd:f6:71:1f:51:a2:84:82:c6:
98:ff:ef:e7:af:6c:7d:f1:f6:b6:40:29:c9:c7:2b:1a:31:2b:
34:5f:ec:97:fe:84:14:c6:23:94:cc:b8:99:cd:26:2b:0e:f2:
f1:7b:75:7a:39:9d:63:2f:9b:f2:14:59:b7:df:e3:76:ca:86:
27:c5:f8:f2:8d:cf:57:76:00:3f:bc:bb:5e:cf:b0:6a:13:69:
85:35:05:76:c8:0a:24:17:5e:ea:fc:41:76:1d:fd:f1:4a:fe:
d7:55:69:0a:ab:e7:c2:dc:36:10:1e:ae:16:4a:36:e8:12:4a:
43:be:fb:ef:67:6c:0a:2f:c6:02:fd:0b:9c:a0:7f:13:12:fe:
4f:e4:8f:7f:ca:26:07:73:3e:a9:91:d2:84:03:bd:25:a3:6f:
db:23:b9:06:6c:59:64:ad:18:f0:63:22:29:e7:ab:3e:e7:30:
72:0f:32:12:98:6d:27:eb:7b:50:71:b5:42:e8:38:c8:94:d8:
78:4f:45:55:96:35:69:4b:23:f4:99:ff:96:9f:aa:d9:cb:4e:
1f:93:c7:ee:d7:d2:00:4f:e4:e9:c3:e9:fd:fb:0a:ed:32:76:
44:44:f2:ab:1f:a5:f5:5e:00:b6:41:7e:bc:e3:f8:e5:3d:26:
11:6c:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:54 2026 by rpki-client