Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer
File: QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer (raw, json)
Hash identifier: 7DmXzWwTg9lTz0i8DNb5JuYFMxQx78w8xwGMgsSDaUI=
Subject key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A691ED4A5ACEADFE1836808D8A2FA6A3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 09 Nov 2025 14:56:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202939
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:69:1e:d4:a5:ac:ea:df:e1:83:68:08:d8:a2:fa:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 9 14:56:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:21:e0:6d:99:78:f5:41:f0:6b:7e:52:64:
7c:c6:8e:27:59:37:a8:22:44:d8:58:a2:53:4b:fe:
8d:8e:c2:88:c2:3e:f3:60:f8:12:81:00:10:31:0c:
e1:26:51:f5:11:9e:c0:9c:76:96:88:3a:6b:2a:9f:
52:f4:9c:4b:a0:a0:eb:08:fd:07:d3:a8:65:00:2b:
7d:59:94:ff:15:a5:23:dd:3c:ec:83:48:fd:1f:85:
87:01:ae:43:23:47:fd:f0:a5:53:a3:a4:2e:46:64:
12:d0:89:e0:5b:e3:3b:97:32:a9:d3:d5:c9:97:bc:
d2:47:46:2e:e1:fc:f8:c4:87:4c:46:93:44:be:68:
a4:5f:68:45:33:ad:ee:f2:f8:bb:59:82:a2:d0:28:
b1:96:f4:0b:d9:ad:c3:d9:21:2b:93:f1:7f:17:8f:
58:e4:70:d8:3a:0b:8f:db:0c:e6:2c:82:fa:a7:8c:
d8:bf:02:18:8a:93:28:76:23:c1:6f:56:7c:8e:2c:
7c:f9:98:c2:12:85:fb:a7:f5:e0:70:ab:b1:b6:61:
83:70:35:49:66:00:60:3f:1b:7d:4d:9e:81:f1:d0:
06:54:fa:38:da:6b:bb:de:02:6d:ac:64:91:ba:75:
16:5b:06:29:f9:15:c3:bd:7f:54:d1:04:63:82:54:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202939
Signature Algorithm: sha256WithRSAEncryption
2a:55:bb:1e:18:ac:bb:f9:2c:5b:f8:9e:2d:39:b1:1b:58:e8:
f2:69:a6:51:66:a4:68:a2:35:b2:59:99:17:9e:88:b4:6a:6a:
5b:dd:64:c5:65:22:c6:ad:b9:33:88:fc:1d:75:14:74:43:54:
23:98:a0:dc:a6:73:b3:a5:b8:0d:de:b7:d1:37:36:cf:30:76:
85:b7:ac:57:78:49:88:0f:10:09:9e:8a:ef:38:24:20:c7:c8:
a6:5a:10:1b:e8:4c:e9:1a:a9:59:c8:11:c5:7a:c0:28:ec:fa:
93:c9:b5:95:fb:70:27:84:87:c1:98:a0:f8:d9:60:56:df:7a:
57:78:ad:a1:3f:93:51:48:ea:d0:31:51:54:91:6d:80:ab:51:
d9:9f:98:c1:a9:9b:3c:f5:f5:5a:bc:3a:8a:5a:a7:f4:1c:7a:
64:cb:60:ed:91:48:60:28:6e:fe:53:21:52:da:db:15:cc:70:
14:43:ed:6e:fb:62:93:b7:29:c9:41:f4:dc:59:ff:2c:2d:2f:
88:63:62:e1:ff:16:87:65:55:3e:44:e9:f5:e9:70:ad:eb:7b:
f7:3e:9d:38:e3:ec:f6:ef:e4:ac:2e:ab:f2:85:52:33:ba:50:
d4:81:e0:64:f5:f6:14:dc:a2:35:c1:68:77:2d:1d:f7:eb:50:
7b:87:ea:f2
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZppHtSlrOrf4YNoCNii+mo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMTA5MTQ1NjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGYwMmZiN2RmZTlhYzgwMGExYjFiNjkzNzA5YzJmMDNjNWVkOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Uh4G2ZePVB8Gt+UmR8xo4nWTeo
IkTYWKJTS/6NjsKIwj7zYPgSgQAQMQzhJlH1EZ7AnHaWiDprKp9S9JxLoKDrCP0H
06hlACt9WZT/FaUj3Tzsg0j9H4WHAa5DI0f98KVTo6QuRmQS0IngW+M7lzKp09XJ
l7zSR0Yu4fz4xIdMRpNEvmikX2hFM63u8vi7WYKi0CixlvQL2a3D2SErk/F/F49Y
5HDYOguP2wzmLIL6p4zYvwIYipModiPBb1Z8jix8+ZjCEoX7p/XgcKuxtmGDcDVJ
ZgBgPxt9TZ6B8dAGVPo42mu73gJtrGSRunUWWwYp+RXDvX9U0QRjglQUUwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFEDwL7ff6ayAChsbaTcJwvA8XtmLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMwOGY4
YjNlLTA1MWUtNGM0NC05Y2I1LTdiODMzMWVmOWEwNC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzA4
ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5YTA0LzAvNDBGMDJGQjdERkU5
QUM4MDBBMUIxQjY5MzcwOUMyRjAzQzVFRDk4Qi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGLsw
DQYJKoZIhvcNAQELBQADggEBACpVux4YrLv5LFv4ni05sRtY6PJpplFmpGiiNbJZ
mReeiLRqalvdZMVlIsatuTOI/B11FHRDVCOYoNymc7OluA3et9E3Ns8wdoW3rFd4
SYgPEAmeiu84JCDHyKZaEBvoTOkaqVnIEcV6wCjs+pPJtZX7cCeEh8GYoPjZYFbf
eld4raE/k1FI6tAxUVSRbYCrUdmfmMGpmzz19Vq8Oopap/QcemTLYO2RSGAobv5T
IVLa2xXMcBRD7W77YpO3KclB9NxZ/ywtL4hjYuH/FodlVT5E6fXpcK3re/c+nTjj
7Pbv5Kwuq/KFUjO6UNSB4GT19hTcojXBaHctHffrUHuH6vI=
-----END CERTIFICATE-----
Generated at Tue Nov 11 10:04:02 2025 by rpki-client