Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer
File: sQmrI0p8D6fcKxhA5O-IFsc5a0s.cer (raw, json)
Hash identifier: 4sHAFNY5MroT24yZ7Ba7j4If6Yk3ALsWAMGqy1ojrg4=
Subject key identifier: B1:09:AB:23:4A:7C:0F:A7:DC:2B:18:40:E4:EF:88:16:C7:39:6B:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A116FEE4EFCCF23C569EDFF0113C3CAA29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Oct 2026 15:32:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201817
IP: 91.219.224.0/22
IP: 93.183.84.0/22
IP: 176.123.176.0/22
IP: 185.47.167.0/24
IP: 194.31.156.0/22
IP: 212.111.84.0/22
IP: 212.233.72.0/21
IP: 212.233.88.0 -- 212.233.99.255
IP: 212.233.120.0/22
IP: 2a13:19c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:fe:e4:ef:cc:f2:3c:56:9e:df:f0:11:3c:3c:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 15:32:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b109ab234a7c0fa7dc2b1840e4ef8816c7396b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:09:63:05:8a:f4:e4:ea:96:2e:ea:6e:00:
1d:1f:ff:db:40:ed:69:31:1b:9e:15:8c:b7:73:31:
fe:e9:35:0e:50:f0:b2:1e:f3:11:9d:52:41:c4:8d:
63:9c:45:75:3b:7d:72:51:cb:cc:db:a8:69:bd:d2:
70:a4:13:a9:8a:18:b1:8b:fb:85:f0:7a:40:ed:22:
71:94:a4:bf:b8:4c:37:6c:0b:fc:85:ee:34:a3:17:
13:a6:46:47:d3:83:fa:f2:ab:2e:3a:26:9d:ea:b7:
55:66:e8:20:fe:fd:66:dd:82:37:12:2d:c1:c9:2f:
1c:d2:49:3e:5e:bc:28:c6:69:12:8f:f7:f3:6d:eb:
7e:7c:c0:00:6b:74:cc:a7:36:a9:8d:24:62:f2:4c:
08:38:a6:7c:eb:b0:d2:bf:6b:a1:92:80:fb:d5:26:
79:9f:b5:1e:17:0a:9b:d4:f0:69:20:cb:fe:27:22:
c0:46:64:9d:7c:71:1e:25:5d:cc:7b:ed:80:b1:30:
d2:61:cf:fd:b5:18:70:b0:83:b5:fc:25:17:11:c0:
f4:8d:b2:f7:2e:99:b4:2f:48:22:72:28:43:74:bb:
2c:fa:c0:f0:a0:bf:65:ce:12:bd:d2:c6:ba:92:fd:
ed:b5:08:c4:b7:6e:72:9a:98:61:dc:14:e2:3e:ec:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:AB:23:4A:7C:0F:A7:DC:2B:18:40:E4:EF:88:16:C7:39:6B:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1ac561-50eb-453d-841a-adcaf164c911/1/sQmrI0p8D6fcKxhA5O-IFsc5a0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.224.0/22
93.183.84.0/22
176.123.176.0/22
185.47.167.0/24
194.31.156.0/22
212.111.84.0/22
212.233.72.0/21
212.233.88.0-212.233.99.255
212.233.120.0/22
IPv6:
2a13:19c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201817
Signature Algorithm: sha256WithRSAEncryption
4e:85:05:38:5d:ca:a7:ef:d9:fd:22:7d:e8:dd:10:6b:68:fb:
12:02:92:94:22:61:60:89:a5:b3:52:35:64:c6:45:06:8f:3d:
7a:16:e1:27:3c:b3:8f:9d:87:59:63:f7:2f:b8:f1:53:cf:6c:
b0:9e:12:69:16:80:92:00:e3:29:65:d7:2d:9f:7e:dc:3b:ee:
5b:93:89:96:93:d1:06:94:c4:f1:96:de:7b:1f:0d:e3:b6:1d:
a6:3d:5b:4b:4e:29:9c:c4:81:95:2a:7b:ba:ad:02:3c:f0:16:
4c:16:e3:23:16:9c:a2:09:a2:fb:6b:98:8c:a1:12:50:69:aa:
dc:64:fc:26:a2:a0:c7:3f:4c:5b:ed:41:c8:90:85:13:81:44:
bd:48:d9:da:82:18:69:fb:04:a8:29:1d:77:6b:8e:a0:41:0c:
bc:70:07:89:2a:ab:e2:80:ff:b6:37:fa:f4:df:37:2a:92:2d:
56:17:82:c3:7f:98:0e:d3:da:95:e1:8e:df:3a:9f:51:70:af:
eb:89:ca:9f:ac:82:3b:3a:98:f8:96:c4:0e:81:db:a5:f2:2b:
f0:c6:e6:41:62:dc:4e:42:e8:3f:10:f4:4c:e5:72:2f:c4:34:
52:9a:04:b8:60:39:e9:f8:b6:b2:29:e8:17:a7:cc:41:d3:c0:
1b:d3:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:48:33 2026 by rpki-client