Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
File: qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer (raw, json)
Hash identifier: Vd/yA59VtzpT+35SrBPDhEKuSA8wTaC55Vhl7/9GB2w=
Subject key identifier: A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13442B96EC04DC61894CC6D00A69DB660
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Oct 2026 07:55:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198383
AS: 206766
IP: 91.211.32.0/22
IP: 185.208.156.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:42:b9:6e:c0:4d:c6:18:94:cc:6d:00:a6:9d:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 07:55:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:64:83:f5:a8:cc:76:a1:38:a8:e7:54:59:
83:a8:94:f9:b3:b1:a3:98:b9:f9:30:e2:4f:b2:2e:
af:85:67:54:11:7c:9a:dc:02:6a:d8:72:38:ba:e1:
6a:7a:0e:76:93:c1:08:ea:d2:a4:1d:0d:f9:76:9d:
ee:3c:a9:a9:b0:75:75:db:2c:4c:5d:7b:d9:ec:43:
2a:23:16:3c:66:02:4d:e2:b7:3a:71:f3:c8:c9:8b:
9d:21:63:74:02:71:87:1b:66:4c:31:0d:86:c9:b8:
26:02:e2:50:c7:cb:f3:da:60:bd:92:96:83:82:dc:
35:ea:80:eb:9d:0d:0a:84:4d:a5:c4:97:d0:f1:a6:
ad:1c:b6:0f:a1:7c:66:2d:97:83:fa:7a:94:17:80:
ba:ba:5c:c6:d1:f9:92:94:f9:0b:47:40:20:3e:47:
e3:e5:f8:49:76:da:2d:83:6d:90:06:98:91:67:a9:
b1:ee:a9:6b:c2:60:ce:e6:c7:24:11:00:34:6f:db:
63:b4:fb:f6:06:a9:4a:97:08:29:83:92:3d:2c:e8:
74:2a:d5:ff:42:30:d3:ed:e4:0f:1d:78:e2:6a:c1:
aa:8c:65:1c:a8:f8:66:1e:e4:ff:bf:02:bf:50:b0:
a3:30:d7:ba:f3:c4:27:99:4a:92:92:de:a9:f6:52:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.32.0/22
185.208.156.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198383
206766
Signature Algorithm: sha256WithRSAEncryption
29:1e:5c:7c:6f:1d:3e:04:b5:ed:ac:5c:39:30:17:4f:a2:15:
0a:2c:67:34:7a:ae:3d:11:96:ef:98:70:f1:38:b7:d8:d9:42:
94:96:b9:9c:39:fc:35:17:2c:33:1f:da:c1:95:c2:c9:f7:e4:
ee:3c:0a:34:32:21:a7:4a:06:e3:20:33:cb:d0:41:98:ae:25:
d9:b7:84:e3:c4:c5:63:ef:01:cf:e5:17:d8:3e:e0:d5:dc:06:
16:a9:d5:ef:ff:d8:14:a2:1c:4c:af:44:c8:5b:6d:4f:4b:a1:
37:af:d6:74:96:f1:82:09:f1:ce:83:87:c9:10:c3:c3:ab:99:
38:e9:b6:7c:34:03:15:39:61:54:21:43:ce:7a:10:40:be:a2:
99:ed:a3:9b:a1:e7:bf:12:68:35:c1:e1:cc:67:dd:89:7a:70:
8f:c8:05:98:f9:19:b6:6d:ab:82:91:e2:68:e3:c9:3d:fd:5c:
c4:d9:38:a9:0a:4b:d4:9b:38:34:33:56:75:14:ce:04:ef:68:
ce:5e:2c:83:05:3b:ac:b3:b5:97:dd:2a:72:64:05:27:40:e5:
09:b0:8f:04:cf:58:ef:84:ea:48:03:c7:d3:6c:87:2e:d7:36:
fd:98:e9:24:bc:32:d7:b9:65:5a:23:0a:cc:83:95:af:39:df:
3e:43:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:10 2026 by rpki-client