Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zBqFcqgF1h5ozxIIu9CEOad43eI.cer
File: zBqFcqgF1h5ozxIIu9CEOad43eI.cer (raw, json)
Hash identifier: 6yhOn5/W4EOFDhtFB8zeQdewPs89KoA0Vaq6cSIxoiU=
Subject key identifier: CC:1A:85:72:A8:05:D6:1E:68:CF:12:08:BB:D0:84:39:A7:78:DD:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2B866302B0C158CD34B727A5064224C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Mar 2026 19:02:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198084
IP: 194.32.212.0/24
IP: 2a0e:7bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:86:63:02:b0:c1:58:cd:34:b7:27:a5:06:42:24:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 19:02:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc1a8572a805d61e68cf1208bbd08439a778dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:ee:8f:27:4f:4d:25:76:84:7c:95:4a:22:
48:75:11:d9:c6:19:01:da:9a:5a:b7:36:36:b7:c9:
5b:2b:c9:12:91:a1:be:50:d9:d4:36:96:17:14:f2:
28:d3:57:7a:d1:01:d3:f4:83:7e:37:7f:6d:59:9a:
75:d3:99:1e:0d:a5:1a:26:a4:39:cc:6e:6b:4e:bd:
e3:a9:6d:dd:87:14:4d:cf:01:35:d7:fc:fa:da:2e:
15:65:c5:72:8d:1d:04:11:09:6f:6c:6d:be:37:19:
d8:91:b6:8d:1d:53:74:cd:37:ce:50:da:f0:35:f8:
7a:9d:9c:c4:8b:92:cf:91:e2:c0:e4:4d:5c:9c:cf:
71:79:1d:3c:cd:67:ca:db:ce:87:0f:d8:79:49:a3:
50:6d:bc:11:ed:b9:fe:41:26:1a:0a:08:54:d1:cf:
c6:57:e8:75:d1:df:90:ca:ec:7b:f0:c0:25:80:ab:
4f:c7:61:38:44:2e:2f:4f:af:6e:40:36:ad:29:39:
95:82:99:ed:48:b0:1e:a4:94:79:d0:87:8a:e0:61:
00:b7:fc:a0:ed:a7:cf:27:ff:9a:4d:db:0e:84:cb:
a5:ea:be:e0:05:bd:40:e7:c8:23:71:fb:ff:6a:1b:
6b:fe:65:a2:04:dc:58:c1:55:b7:c3:54:9e:64:5d:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:85:72:A8:05:D6:1E:68:CF:12:08:BB:D0:84:39:A7:78:DD:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a1893-730d-4536-aa17-cd4effb60eee/1/zBqFcqgF1h5ozxIIu9CEOad43eI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.212.0/24
IPv6:
2a0e:7bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198084
Signature Algorithm: sha256WithRSAEncryption
5c:b7:95:b9:52:02:71:4e:f6:6f:7c:68:7d:02:05:fb:5d:95:
13:86:c6:c0:3f:5a:2c:e7:33:8e:c2:73:23:a2:3e:ef:f8:0a:
af:d3:8d:36:d8:97:9a:34:0f:ac:bb:ab:72:90:b1:be:89:35:
cb:94:8e:ee:a9:03:77:eb:55:cd:33:cc:e5:ab:c0:bd:f7:ec:
07:02:5c:26:a3:ef:bf:98:2b:93:a9:c3:36:10:9a:fc:58:fd:
a4:ce:1d:5c:e3:79:fa:db:12:e3:b4:d9:90:26:88:55:79:d9:
73:24:9d:08:9a:59:5e:fc:35:72:22:77:cf:92:9d:b7:7f:77:
a5:c0:f0:36:41:5b:8a:26:96:d1:e8:8d:71:00:88:61:37:bd:
10:75:c9:22:87:e2:36:2b:66:a6:e4:55:50:3c:02:8d:ea:72:
c0:d1:fa:8f:8b:81:28:50:bd:38:1e:ae:f5:6d:59:6a:5e:e3:
a0:ca:d8:09:6b:5b:91:39:06:79:3f:00:aa:8b:e4:85:36:d3:
67:df:8d:a2:45:b0:9f:e6:5c:3c:c2:01:6d:8f:a1:1f:23:34:
f3:21:cd:f9:80:1f:49:e2:7f:ea:1a:d4:64:2b:2d:f9:5c:c1:
d3:21:e8:e9:5e:da:8a:91:84:7a:13:c8:97:a1:64:c1:91:05:
27:58:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:23 2026 by rpki-client