Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
File: pQyvnDYd70jAkzMhvgUYOoOnv8k.cer (raw, json)
Hash identifier: gGLwhLQjm7lIF/uCqAcx0DNnb2KIa/du4BSPwfrqPf0=
Subject key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBD0DE5EAE61391F60680400CF9CCC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.235.236.0/22
IP: 2a0d:8100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:d0:de:5e:ae:61:39:1f:60:68:04:00:cf:9c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a50caf9c361def48c0933321be05183a83a7bfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:1a:96:b4:a2:73:64:8d:8e:25:d8:e1:83:
c5:74:02:a9:b9:bb:42:f0:8e:86:75:23:e5:24:44:
4e:b4:a5:ca:ed:9a:9c:65:21:4a:f7:43:be:e1:47:
79:ec:4a:b5:f7:1b:f5:16:10:f6:99:1a:dc:a4:29:
e3:f0:d3:8b:3e:04:89:ca:bf:4a:25:14:b2:ea:d1:
ec:b3:ab:a1:46:12:a9:86:86:73:c2:42:3b:3c:fd:
94:3d:bf:22:61:87:bb:32:56:41:35:0b:24:ff:d4:
a3:98:11:e6:db:1f:f6:30:24:b4:ef:19:61:4a:f8:
b4:57:36:1f:ba:48:14:5c:57:07:1a:67:1e:03:b8:
c7:eb:cc:6e:9c:a3:d3:89:68:ff:e1:1b:78:36:04:
09:99:d5:74:a1:7c:2d:73:1a:7d:d2:81:32:fb:05:
d6:80:5d:2f:60:83:c6:d9:1c:c7:b4:df:05:ca:ea:
e4:f4:55:1a:97:a9:e3:e7:14:90:e5:09:da:44:3b:
66:2b:20:59:b2:ef:11:42:94:e9:35:55:8e:e7:6a:
85:7a:bf:13:b1:9f:da:92:bb:96:a3:b6:76:df:1a:
96:e7:78:8b:c5:03:32:a7:21:dd:4c:5d:54:70:7c:
ad:1a:ca:9e:e3:15:de:53:8c:c9:55:06:1c:3a:6b:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
IPv6:
2a0d:8100::/32
Signature Algorithm: sha256WithRSAEncryption
30:bc:23:c7:bf:20:8f:d4:1f:e8:28:a0:34:4d:04:dd:88:6a:
f9:ca:88:a3:40:89:75:dd:b2:57:2c:aa:24:e0:40:b5:95:5e:
63:ba:1c:19:07:43:9f:a9:3b:fc:55:d6:a4:c8:99:1c:f8:23:
13:3c:bc:c2:97:54:b0:8f:ca:a9:85:d5:0b:00:c9:9f:97:f8:
b9:83:e4:49:eb:ec:5f:fb:0a:53:54:3f:6f:8f:c6:62:c5:2a:
3d:93:c7:cc:af:4d:89:36:aa:42:a7:c7:eb:f4:e0:69:e7:23:
2d:66:5d:de:1b:ec:d7:f1:93:eb:b8:6f:70:49:4b:4d:66:a8:
33:be:ec:2e:8f:41:13:90:5f:7e:5b:6a:fe:4b:66:ec:8c:3f:
6d:6a:d5:97:36:68:e1:85:a3:ee:94:cf:b0:10:f6:17:e2:05:
5e:14:4b:14:8d:59:ef:5b:84:0d:88:de:27:18:86:9b:9b:f4:
a2:ee:74:91:fd:4d:ef:df:14:20:6a:dc:6b:d6:28:6d:ea:9c:
7d:26:30:85:28:b5:42:1e:57:14:98:f3:7d:66:c5:0b:18:50:
84:a3:45:8b:d8:a0:85:b3:e1:4c:dd:22:40:2c:1c:e6:dc:0d:
c5:0e:a4:c4:95:78:e6:d2:10:04:65:be:8d:b1:ac:f0:f7:7e:
79:e1:bc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:04 2026 by rpki-client