Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer (raw, json)
Hash identifier: P66XHW3i0htbEZsOUMskdM6o7e/szuTckEDAsqFmKFk=
Subject key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CB9063AC575614D09E69DBA61003CE2BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Mar 2026 13:25:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200949
IP: 185.46.239.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:06:3a:c5:75:61:4d:09:e6:9d:ba:61:00:3c:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 13:25:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:a2:7b:1b:e9:ba:75:4e:15:34:4c:89:5f:
5e:10:a1:c8:55:be:02:d3:78:be:c3:9e:ea:f6:49:
23:00:0e:30:53:a8:ed:23:7a:4d:d4:ab:0c:e0:55:
5c:29:cd:c3:80:50:fb:a0:bc:24:18:a9:b1:55:0f:
57:3f:03:99:33:cd:c2:91:1b:c6:9a:c4:b5:4c:f6:
23:ed:8b:0d:e3:01:85:e1:fd:51:38:ce:2f:ee:0b:
5b:0c:11:9b:df:37:8d:43:ec:37:76:9b:c4:b4:79:
59:f6:d0:b9:06:b9:fd:7d:5d:9f:30:7d:35:af:e8:
74:8d:b8:6e:a0:29:ce:fc:b8:77:44:c0:78:a1:a1:
5b:3c:11:5b:b4:09:64:b9:8e:c8:bb:1c:f3:00:83:
91:88:3b:d3:06:01:31:ba:cc:60:45:ea:bf:33:b8:
2f:3f:d6:5d:5e:32:d7:89:33:f6:57:a8:bc:ee:b7:
f0:74:74:e1:a6:70:c8:6b:bc:31:f7:ab:80:7a:da:
4c:4f:a0:b9:f8:61:dd:f2:29:2c:d0:0f:75:f0:29:
89:4a:d7:c7:b4:12:0d:dd:ab:87:ec:29:cd:a3:40:
11:55:0e:53:b8:a2:80:21:6f:ac:9e:41:8e:4d:94:
dc:66:3f:e2:18:00:b9:01:c8:61:9f:fd:e4:68:e1:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200949
Signature Algorithm: sha256WithRSAEncryption
6b:a8:45:11:1b:e8:26:d9:e0:be:7e:11:62:37:9b:7f:bd:60:
91:30:58:6d:0d:4b:73:85:21:83:e8:22:7e:71:bd:0d:40:ad:
9f:c9:65:a8:2c:49:41:a1:c8:76:0c:53:7f:59:b1:60:6c:5c:
c1:e3:a3:b1:f4:95:58:18:dd:0d:20:ad:9d:a9:44:60:d2:1a:
b9:3c:b0:cc:b3:26:0c:1f:48:6b:47:da:37:c9:37:14:b0:4b:
77:7e:76:d9:9c:f0:a7:bc:bb:83:45:21:de:b1:28:0c:ff:e7:
fa:da:a4:52:db:01:8d:f5:2a:10:2a:6c:2c:b5:4f:00:48:7f:
ea:26:68:d0:0f:cb:42:db:50:f3:9a:1f:ec:de:72:d0:b1:4b:
19:d3:e2:de:89:ec:07:78:3a:86:d6:11:87:fe:5a:4e:1e:65:
30:39:eb:cf:d5:f5:76:7d:97:dc:33:ea:15:6f:a1:18:05:4a:
57:33:a6:84:09:2c:ba:81:21:84:1e:f8:38:b4:1d:21:af:7a:
0d:73:9f:6d:03:06:b3:3e:64:71:b8:93:ea:6f:9d:67:1d:0f:
d2:0b:b3:20:4f:5f:91:08:1d:b2:0d:bf:66:70:e6:91:88:5e:
f3:fe:5a:f2:2f:96:f2:34:7a:13:b9:d4:ca:e8:95:13:19:0a:
23:3b:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:09:54 2026 by rpki-client