Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
File: Qg_zglhintUOC3VkwjNBFYHh3w4.cer (raw, json)
Hash identifier: jWwYV1I8ngU36Ex7IgDpcrGdDuSn2ZScNYEciA8Pl10=
Subject key identifier: 42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA726E4E1EADBA1AEB741AA9E3CE4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202937
IP: 185.150.20.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:72:6e:4e:1e:ad:ba:1a:eb:74:1a:a9:e3:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=420ff38258629ed50e0b7564c233411581e1df0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:fa:9f:9b:28:0e:4e:f9:29:74:e6:fd:65:
3e:a4:a6:7e:53:18:70:eb:89:d4:b4:57:c5:11:19:
db:58:96:32:87:75:69:8e:52:6d:0b:59:1f:ba:c8:
e3:18:85:b0:01:56:ac:98:a6:e3:80:9c:19:c0:5d:
70:50:71:8c:de:9e:ad:09:e6:d6:06:de:6f:9e:f4:
72:5b:34:fb:7a:84:56:db:88:b2:b3:68:72:18:c6:
09:cb:d2:5a:ca:e4:2f:40:c0:8b:65:e8:61:d3:35:
d8:ec:82:f8:14:47:55:50:b7:bf:bd:8f:69:9a:ce:
5c:9f:85:09:9e:b3:eb:25:22:29:61:04:74:3d:a3:
48:f6:70:12:5f:dc:b7:40:bd:95:78:26:1c:51:e5:
2e:4d:25:80:c5:17:a0:33:a0:81:10:e1:bb:ad:2d:
bc:7a:31:0d:9c:7e:a8:44:74:b4:fa:95:21:8a:95:
34:f6:0a:cd:2a:13:a1:03:a8:65:cd:f0:2f:ff:08:
27:0b:29:00:af:b9:dc:54:26:b8:90:26:bb:ab:1b:
69:9b:bc:74:30:0d:0a:7a:27:0e:e4:0f:e3:58:6f:
6e:4b:07:f4:df:74:5f:c8:f9:fc:3b:a4:42:90:80:
9c:07:78:55:b7:7c:b8:8e:ea:af:15:a6:14:c1:b6:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.20.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202937
Signature Algorithm: sha256WithRSAEncryption
8c:8f:a7:d2:7c:29:8d:8f:4f:7b:51:df:29:4a:e0:eb:8a:5a:
e5:81:66:72:d3:85:0e:c7:df:f8:93:52:35:0b:24:6a:bd:85:
40:08:14:a4:eb:68:12:57:da:b1:1b:53:9a:ff:09:3c:a1:8d:
c5:b1:0c:c4:55:6c:4c:dc:82:af:31:20:cb:e3:91:65:a7:57:
34:d6:8e:c1:97:6b:65:17:23:f0:41:82:dc:2b:c3:86:63:c0:
b2:df:18:cf:9a:b7:2a:74:14:e0:07:11:fb:c2:e0:59:44:74:
1d:e7:d4:b0:a1:c7:d3:7e:3d:b5:f9:7b:c7:d6:bd:39:c8:51:
c7:d2:d5:95:20:0a:61:a1:9a:5d:d6:cb:b5:ad:9a:eb:2f:9f:
4e:41:45:18:7e:c9:ef:ad:67:29:b6:26:c2:21:45:d8:20:87:
29:7f:8f:ec:cf:dc:cc:30:75:b0:10:1e:b4:e5:09:8c:01:2b:
ff:1f:09:fa:90:12:10:d6:e4:72:07:14:1e:40:1c:a4:90:99:
91:c3:8a:33:32:3b:b6:51:0f:60:7f:99:36:a0:d2:93:c0:2a:
1c:bb:fa:4f:54:6f:50:1e:fa:2d:67:40:9f:2f:aa:cf:88:4d:
c0:fe:5b:75:e8:46:9b:2a:0a:02:a0:d6:97:b2:3a:ab:96:35:
78:bc:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:11:40 2026 by rpki-client