Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
File: hZQ_zPsylcsWjRO1xj8xUGawuRU.cer (raw, json)
Hash identifier: /K83GLHBcctYdVXiioiBKRXlE585krYyJV/xe2drcI0=
Subject key identifier: 85:94:3F:CC:FB:32:95:CB:16:8D:13:B5:C6:3F:31:50:66:B0:B9:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A12EA1B2278D9A2E9E419BFAFD8A579395
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 12 Oct 2026 05:41:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.169.174.0/24
IP: 2a10:5240::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:a1:b2:27:8d:9a:2e:9e:41:9b:fa:fd:8a:57:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 12 05:41:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85943fccfb3295cb168d13b5c63f315066b0b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:3b:e1:e6:e6:c8:c5:9a:c3:63:37:90:af:
49:c7:79:bf:fd:73:2d:82:50:33:36:48:40:00:d8:
21:d6:cd:47:f3:42:72:32:01:ed:a3:ac:b8:f9:e3:
cd:dc:d4:c0:eb:c9:11:c3:c2:a8:45:8e:bf:48:c7:
a5:56:57:85:7f:55:54:1f:5f:50:9d:75:04:37:9e:
95:55:e6:73:16:19:1b:30:aa:00:2c:78:bb:54:50:
95:5c:93:c3:76:97:88:04:7a:bd:84:f9:32:0a:15:
8c:19:01:7e:09:3c:49:3b:8c:c7:6f:7c:50:04:0d:
15:75:04:f0:49:07:be:00:55:42:69:16:34:cb:62:
b5:22:bc:23:e0:b3:8e:3a:cb:88:2d:7e:ef:e1:56:
a3:8c:94:3f:09:d5:d1:65:00:36:95:a4:47:65:60:
8f:76:0c:0e:ae:06:08:da:05:9b:e8:59:ee:10:4e:
01:56:41:16:ca:cb:bd:c7:2b:7b:4b:86:44:45:29:
73:28:41:d3:cf:ca:ed:14:3b:37:7d:7c:86:d3:14:
c9:bb:ed:48:51:79:78:0d:6d:0a:30:5c:bc:25:05:
6c:69:08:3d:10:d0:ad:f3:41:49:36:ac:2d:1f:3c:
d1:e9:20:a3:77:cf:c2:9f:be:b0:b5:3f:77:a0:e7:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:3F:CC:FB:32:95:CB:16:8D:13:B5:C6:3F:31:50:66:B0:B9:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.174.0/24
IPv6:
2a10:5240::/29
Signature Algorithm: sha256WithRSAEncryption
40:e5:e3:37:ee:9b:a3:bc:de:27:8f:0a:2d:77:be:3b:d6:d5:
39:ff:53:a3:42:e4:b8:e6:fb:48:e0:51:7c:40:b2:e5:7e:84:
93:96:82:6b:31:16:65:6a:2f:f1:09:b7:72:4c:66:27:36:2d:
78:ea:96:9d:b4:f8:14:93:5e:bf:a2:19:dd:ee:d5:d5:e7:b2:
d9:d3:74:3c:8f:24:07:6e:45:0c:a4:84:73:d7:45:12:ff:80:
41:fc:81:dd:ff:88:56:10:4b:7c:27:28:b5:5f:e3:6c:e8:6d:
6a:71:e2:e0:87:b9:b8:32:6d:12:30:2b:3a:5f:f1:c3:17:14:
45:5e:ae:51:32:3d:e1:19:3d:e3:fb:0e:cf:ca:d2:58:81:e0:
da:c7:6d:ef:73:66:47:17:8c:17:a9:ad:94:bc:85:cb:79:17:
a4:68:4b:c5:e6:1f:d4:18:7e:c6:c4:fc:71:f5:3b:b3:52:41:
20:71:05:d9:6e:d6:2d:b9:96:e9:a9:dc:73:c3:af:b8:3f:90:
6c:6a:a0:6b:16:a2:5b:13:16:47:06:17:de:e3:c2:1c:1f:54:
02:be:16:0b:81:07:af:96:bb:98:ee:38:e9:02:93:8f:05:ad:
da:6a:97:71:89:b7:00:b9:6a:37:93:9b:e5:c3:d3:69:39:28:
a4:42:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:43:30 2026 by rpki-client