Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
File: a-qEqFfnGtEjL5o2v0j40kqaA_s.cer (raw, json)
Hash identifier: bKzfoPt7F6ysdzlCHAS3m1+JvCiZbOEGdn+QZFF3Dog=
Subject key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA4AE9D82FD3B13817AAA899D00407
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.5.53.0/24
IP: 2001:67c:19fc::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:4a:e9:d8:2f:d3:b1:38:17:aa:a8:99:d0:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:b8:4c:7e:bc:7b:26:1c:38:f5:d5:83:6b:
f6:82:53:69:04:fd:4c:e8:39:66:c0:80:c7:58:8a:
2c:15:9e:b0:3b:20:3b:26:bf:b0:9b:9c:66:97:2a:
9f:c6:e7:6e:b7:db:b8:b9:d4:0a:e6:e2:e6:6e:f7:
28:56:f5:53:7d:1f:58:b2:90:ba:d1:8e:d3:e4:35:
e7:6d:20:64:ff:e4:51:0a:1f:fb:ff:45:83:a4:05:
e6:ea:ee:3b:bf:d4:76:3f:88:c6:a1:52:c4:74:8c:
92:b9:4e:1d:c4:8e:93:86:73:27:b9:74:e7:97:52:
ab:68:7c:69:8b:ca:43:b1:8c:49:b1:5c:9c:28:90:
6d:aa:7b:a6:b2:25:cf:1d:78:fc:b2:e8:95:0b:7c:
5c:fd:08:ea:30:6e:26:d5:01:d9:5b:00:34:50:ab:
d2:37:bc:39:89:d0:cb:80:aa:e3:98:c5:44:f7:df:
86:c3:2f:17:ce:71:fd:9a:2a:ec:bb:d5:a8:8f:52:
81:b2:29:7c:d8:7c:f9:a7:0a:41:6b:fa:4c:32:6c:
e3:27:6a:15:45:a2:dd:5a:b6:55:1e:61:cf:63:90:
78:df:fb:0e:9a:92:72:8e:aa:b5:57:40:93:74:52:
ff:15:5b:d1:ec:1d:d3:e7:6c:17:fc:b4:3f:e2:d5:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.53.0/24
IPv6:
2001:67c:19fc::/48
Signature Algorithm: sha256WithRSAEncryption
ae:b6:a6:1e:02:91:4c:b3:78:12:87:88:8b:ce:a4:41:cb:06:
dd:b0:f0:11:af:29:ca:1f:bd:08:58:e2:f7:da:83:0d:66:aa:
1d:2f:31:b4:db:f9:02:a8:f1:61:6a:77:20:60:1d:0f:51:05:
ae:7e:ef:47:7d:7e:88:20:2f:a8:6a:4b:b2:4e:28:fd:63:d3:
ab:10:88:d8:ff:b2:43:d3:23:c1:90:bf:63:35:31:98:7f:88:
c8:72:8d:29:7e:f8:d7:78:c7:c4:29:53:bb:7d:2d:1f:02:f8:
1e:f5:56:52:11:62:65:5e:8e:47:43:8d:e4:c4:8c:55:69:12:
e2:8c:ed:2e:58:4f:f0:39:e4:cf:65:b3:d2:f6:fa:81:d8:d1:
ac:79:e6:ba:03:01:2d:db:6d:2a:66:bd:c1:b9:66:bb:b1:17:
52:f2:4c:83:cc:a4:d3:a9:92:14:91:59:18:8f:6e:c4:3e:3f:
e8:49:9b:87:9b:70:98:f5:7c:ce:9e:cb:08:f5:8a:01:1b:fd:
0d:67:8f:d5:01:04:52:e4:a7:1b:4b:d0:c0:7e:3b:9f:be:37:
a7:4a:c3:1f:53:97:db:79:12:24:23:3d:56:07:5c:9a:e3:3b:
4b:31:59:4d:f0:a2:1b:76:d3:63:dc:01:d6:cc:5a:d0:a9:81:
5b:a3:2e:51
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZ8Y+krp2C/TsTgXqqiZ0AQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmVhODRhODU3ZTcxYWQxMjMyZjlhMzZiZjQ4ZjhkMjRhOWEwM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8O4TH68eyYcOPXVg2v2glNpBP1M
6DlmwIDHWIosFZ6wOyA7Jr+wm5xmlyqfxudut9u4udQK5uLmbvcoVvVTfR9YspC6
0Y7T5DXnbSBk/+RRCh/7/0WDpAXm6u47v9R2P4jGoVLEdIySuU4dxI6ThnMnuXTn
l1KraHxpi8pDsYxJsVycKJBtqnumsiXPHXj8suiVC3xc/QjqMG4m1QHZWwA0UKvS
N7w5idDLgKrjmMVE99+Gwy8XznH9mirsu9Woj1KBsil82Hz5pwpBa/pMMmzjJ2oV
RaLdWrZVHmHPY5B43/sOmpJyjqq1V0CTdFL/FVvR7B3T52wX/LQ/4tUpWQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFGvqhKhX5xrRIy+aNr9I+NJKmgP7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2MzMjg5
Zi03NmU5LTQ4OTMtOWNkMS1hNjVmYmQ4MzAzNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvYzMyODlm
LTc2ZTktNDg5My05Y2QxLWE2NWZiZDgzMDM1OC8xL2EtcUVxRmZuR3RFakw1bzJ2
MGo0MGtxYUFfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAwQU1MA8EAgACMAkDBwAgAQZ8GfwwDQYJKoZI
hvcNAQELBQADggEBAK62ph4CkUyzeBKHiIvOpEHLBt2w8BGvKcofvQhY4vfagw1m
qh0vMbTb+QKo8WFqdyBgHQ9RBa5+70d9foggL6hqS7JOKP1j06sQiNj/skPTI8GQ
v2M1MZh/iMhyjSl++Nd4x8QpU7t9LR8C+B71VlIRYmVejkdDjeTEjFVpEuKM7S5Y
T/A55M9ls9L2+oHY0ax55roDAS3bbSpmvcG5ZruxF1LyTIPMpNOpkhSRWRiPbsQ+
P+hJm4ebcJj1fM6eywj1igEb/Q1nj9UBBFLkpxtL0MB+O5++N6dKwx9Tl9t5EiQj
PVYHXJrjO0sxWU3woht202PcAdbMWtCpgVujLlE=
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:51:56 2026 by rpki-client