Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer
File: qwK6yPeKbKr8M_Nt-2i8z2mLL5g.cer (raw, json)
Hash identifier: jeR2Fo2m9ydHwCFP+TsAYNJCR5Vs+iDu1jIkXqscyn0=
Subject key identifier: AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8C98A0D01CD76FDE628146CF6CDA5800
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 08:27:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.10.240.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:98:a0:d0:1c:d7:6f:de:62:81:46:cf:6c:da:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 08:27:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab02bac8f78a6caafc33f36dfb68bccf698b2f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:48:5f:80:cb:2d:4a:68:9c:be:e9:4d:3c:
49:37:37:2a:b3:f0:71:07:aa:46:ae:9e:71:0f:e4:
a2:75:52:53:08:bd:ed:ce:5a:47:3c:10:32:6d:1a:
5f:94:cf:7b:4b:77:05:7a:f7:44:0f:fe:09:eb:c0:
2c:f3:03:49:d0:de:8d:82:5d:16:16:85:8e:12:45:
82:f2:47:ba:17:ba:80:53:b1:3b:d9:ef:4b:34:54:
97:42:2c:73:b3:f1:32:4c:5a:b6:b8:ae:7c:fa:fd:
3b:8c:8b:74:b6:a4:ae:32:85:16:4c:d8:44:77:6d:
e5:99:5f:b6:e3:7c:67:32:ca:a6:39:02:59:20:79:
3b:8e:ab:db:47:18:5e:44:a3:d3:c1:4c:26:c0:da:
ec:14:d0:6f:e9:57:50:b3:34:c4:76:39:00:ef:e3:
33:be:d5:14:3a:4b:35:cd:90:d3:c0:47:88:6c:a8:
9d:12:c2:28:1d:97:1d:54:01:d1:1e:51:be:8a:6c:
8d:42:63:ce:78:f7:af:9a:5e:44:e2:e9:06:ea:aa:
79:51:af:8e:ea:89:02:5d:6d:12:67:93:63:13:87:
05:a5:a9:e3:05:3d:dd:86:78:a3:db:f4:91:5a:5f:
15:ea:27:4a:8e:30:75:0c:92:f6:72:9f:a8:55:ac:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:BA:C8:F7:8A:6C:AA:FC:33:F3:6D:FB:68:BC:CF:69:8B:2F:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/937235-5727-49ce-b269-af93ae3ab944/1/qwK6yPeKbKr8M_Nt-2i8z2mLL5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:85:6c:0e:fb:c1:c5:8f:01:6a:3d:e6:6f:3b:d1:6c:f8:6c:
8c:8f:83:80:d7:06:7f:fb:64:12:85:7f:a6:96:14:d3:96:55:
fd:39:ed:d2:1b:5c:f5:52:12:a8:01:64:c4:ea:b3:8f:ec:ae:
0d:9b:b2:6c:47:e0:6f:9d:70:87:c0:d9:9c:97:42:96:70:6d:
26:9c:ef:66:75:0c:df:70:b0:51:83:d7:60:50:f5:a5:b5:f5:
7e:a1:dd:04:e8:62:b3:6b:46:21:2e:a3:0d:aa:96:b0:76:44:
23:24:9e:17:56:aa:62:73:39:4b:c5:92:c3:85:a6:19:fd:e4:
a5:17:13:d4:6e:4c:d6:48:ae:8a:fe:62:aa:84:2d:b6:58:5e:
9e:58:da:5e:fe:70:22:26:e9:c6:db:c7:c9:93:22:c6:96:05:
95:b6:a6:31:e2:6b:60:eb:ba:b9:a6:b3:96:5a:9f:46:f4:1a:
99:e3:18:97:0b:7e:46:27:6d:09:79:d8:56:be:d7:be:f6:ee:
ea:d3:a2:4d:58:63:9d:da:8a:b9:38:da:e2:86:47:0c:0f:c0:
23:33:cd:7e:e2:2f:39:80:36:fa:0b:a8:20:bc:d5:69:af:4c:
eb:ef:c5:4f:ac:d5:a2:45:b7:a1:2e:22:f9:b3:8d:7b:eb:c8:
fe:a9:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:34 2026 by rpki-client