Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
File: G28HR08S96M-XCG8L_uwdaF70T8.cer (raw, json)
Hash identifier: Oo/gfSx1tG4CPKqnOYOTgWYnmONRc2/AbSdY8p9vwlY=
Subject key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B368CB2B80DD51DE755508D28F492B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:18:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29549
IP: 195.177.206.0/23
IP: 2001:67c:29e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:8c:b2:b8:0d:d5:1d:e7:55:50:8d:28:f4:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:16:c2:d5:05:8c:16:dd:a7:81:b3:e1:cb:6b:
eb:3e:82:4c:bb:9e:7d:0d:9e:f3:31:32:63:c9:5a:
01:1b:20:25:9b:86:a3:75:98:33:d4:13:5c:f0:3e:
43:0c:54:49:e2:c9:1b:4e:a4:29:79:e9:00:fc:7a:
0a:07:38:34:8d:54:83:19:9a:af:b6:1d:bf:9c:13:
4e:67:aa:87:00:9e:b2:45:b3:f7:0f:71:e8:f6:09:
3e:e9:53:51:e4:6c:02:70:08:58:dc:8a:5b:5f:52:
70:8b:8d:54:5d:b2:81:ac:47:1b:78:a1:4f:fa:e6:
7d:69:5d:9b:3d:58:1d:a1:00:47:c5:18:4b:d8:db:
2a:5a:1f:5e:51:69:ed:d4:ce:b5:8c:72:be:00:c5:
70:db:d0:ea:28:75:85:b5:49:99:7e:65:37:a9:a0:
65:24:00:de:19:3a:ba:6e:ce:33:aa:20:10:22:07:
96:dc:f3:02:be:e9:32:24:d6:7c:db:78:95:ba:92:
ca:76:4f:0c:f1:51:5e:62:6b:c9:32:0e:ca:da:14:
86:a3:7e:fb:e5:d5:db:1e:e4:c3:87:e1:31:1f:33:
c6:6a:20:15:46:f5:65:78:8c:d5:42:c8:d5:fd:f5:
d9:54:94:f0:2f:d5:18:72:d5:70:0e:1b:63:77:55:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.206.0/23
IPv6:
2001:67c:29e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29549
Signature Algorithm: sha256WithRSAEncryption
3e:c7:ea:40:6d:c2:4c:61:74:fb:0c:86:3a:75:c5:14:a8:30:
54:5c:34:63:41:fb:78:77:7a:83:55:90:6b:a3:19:77:b2:de:
54:dd:47:7a:c6:76:06:ec:24:25:c7:f6:4c:ba:0c:1d:fa:8a:
72:91:4b:f1:17:78:fe:18:67:f8:77:69:9f:82:bd:4d:e2:10:
b8:ee:c5:42:fa:e6:71:5c:8d:be:7e:3b:8f:c7:de:3d:2b:49:
36:d3:71:1e:4a:60:fa:45:65:ac:70:7d:a8:c7:cd:f8:f6:43:
3f:a1:34:64:5c:05:ac:16:c6:9f:f9:1e:0e:bf:01:b7:e0:36:
5f:3e:70:01:bb:2b:78:63:31:9c:3d:d8:51:57:1c:9f:4c:ea:
d9:7a:e6:ef:d1:06:68:28:7a:5f:a9:69:cc:30:a0:3e:19:f8:
08:31:89:06:2e:3c:e4:31:5c:69:65:e1:fe:41:0f:2f:30:0f:
44:ba:20:5b:9d:f1:a9:fd:43:5a:62:6c:67:bf:f5:7c:af:b8:
ea:ab:77:db:f7:46:e7:ff:50:43:64:72:ac:8f:1d:44:14:c4:
ac:d8:5c:e1:ae:e5:08:4c:4a:1b:07:2a:fb:f6:b3:68:c1:d6:
18:19:4b:f6:a1:d5:33:74:96:65:06:76:e5:a1:b4:d0:9f:b6:
7e:bc:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:49:29 2026 by rpki-client