Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
File: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer (raw, json)
Hash identifier: ba7/u85GypHpwiOs5haqeXsDLvnCSmeiAsZe0jshmms=
Subject key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2D3E6053568B962CBD17446EC4E9E0FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 03:02:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213471
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3e:60:53:56:8b:96:2c:bd:17:44:6e:c4:e9:e0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 03:02:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:0e:62:26:a2:8c:0a:24:a7:5f:5c:13:4a:
22:95:0f:c4:9c:85:d9:36:c0:eb:74:bb:f7:c6:13:
7e:c8:1d:21:1d:03:8a:d8:fc:4c:54:67:b7:ca:10:
29:03:60:c3:50:ed:88:70:4c:1b:f7:4e:99:d0:42:
3f:63:62:cb:5f:53:87:b0:fb:27:e2:00:6f:18:31:
72:f4:ee:1c:7a:b5:39:f4:19:2b:1c:ff:92:87:49:
12:d5:fb:0b:73:05:61:5c:00:05:cf:53:cc:85:51:
71:e8:a4:49:ba:b0:bb:e1:f4:c6:dd:99:35:10:cf:
53:a8:a6:b4:be:68:6a:46:a5:2b:97:53:cc:d5:0a:
a6:4e:e7:a8:42:4c:27:57:17:04:c2:3b:ff:19:35:
02:5b:5e:6d:f4:4a:7c:d7:75:09:fa:f0:ad:ae:9e:
7a:66:43:b6:97:10:ef:ba:ce:80:7c:9c:6b:d6:01:
00:09:d2:f3:61:12:9b:2c:8f:35:34:62:6e:e8:e9:
80:90:a4:d5:4b:de:0c:bf:b4:f6:32:47:33:23:1f:
8b:71:5d:fc:b5:3e:ea:32:80:e2:e9:c3:e7:01:6f:
25:e3:4d:fe:53:f9:54:56:7b:95:cf:78:dc:c8:1a:
f9:46:96:77:ba:98:56:7a:1c:a6:5e:fa:c0:39:cc:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213471
Signature Algorithm: sha256WithRSAEncryption
a1:b6:f3:5e:5b:3d:c2:79:47:76:ac:d0:c1:20:08:ba:66:b7:
3b:92:4d:e3:f1:e5:2a:7d:4d:e5:24:62:0b:88:f2:51:44:3f:
2a:4a:aa:f0:a5:67:6c:fe:f3:5f:5d:4c:0e:a2:10:ed:5f:a3:
65:ec:f4:8c:65:0a:89:ac:d6:87:44:f9:d0:a7:ca:2c:aa:8a:
ae:53:21:42:9a:f2:74:05:c8:4f:8f:7e:2a:09:03:31:5c:f0:
ff:aa:94:61:05:c5:99:81:ed:7f:a8:9b:36:80:3b:86:13:4d:
98:94:6c:53:52:9b:38:05:af:7c:d7:dc:18:2f:09:d2:1b:ce:
3d:73:6c:b4:cf:4b:37:66:ec:05:0f:d5:c5:0b:0a:64:35:21:
7c:41:9d:76:5b:99:92:6d:f4:4c:9c:6b:62:30:d2:2d:99:79:
46:b9:c6:50:8c:00:f7:ab:92:e1:ef:13:0c:83:36:8f:ee:9b:
d8:60:24:7c:2b:54:d1:e9:9c:bb:f7:f9:14:0f:8c:12:3f:3f:
74:ed:82:dd:37:50:1d:52:28:ad:a3:64:9a:e6:f2:9b:5d:30:
00:74:b2:dc:8e:2c:12:8b:2c:83:bb:86:8a:d7:ce:49:86:57:
0e:45:ec:50:96:7d:c9:7c:7c:69:78:7f:d5:54:c2:39:c9:02:
80:01:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:49 2026 by rpki-client