Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
File: G6b10yR0vob2MFiURTdik0TU8Bo.cer (raw, json)
Hash identifier: +1Wq4TD0WGTV2/4a2EjWbNeKyYBkNSoWu6nvmykvFqU=
Subject key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA4CE9E51F03B3E00CB8B6775CF037C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207522
IP: 2001:67c:ec4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:ce:9e:51:f0:3b:3e:00:cb:8b:67:75:cf:03:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ba6f5d32474be86f63058944537629344d4f01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:8c:24:81:41:99:a4:d2:32:0d:80:74:f5:
8b:5c:da:9e:7d:58:c2:7a:9b:8f:04:36:81:07:64:
b4:b7:c3:4e:18:78:6b:78:b2:cf:4c:5e:c0:19:3d:
da:d8:4d:e1:49:68:82:d5:f5:ee:e7:18:36:e6:51:
23:15:65:80:c2:63:9e:da:77:ca:f6:ae:88:1e:27:
95:60:53:99:e9:dc:a2:24:45:ee:f1:79:d1:72:30:
12:44:4c:b5:b1:8f:52:c3:f5:23:6a:5a:31:bf:24:
b1:ce:cc:86:ae:6c:b6:83:c4:02:56:5c:4a:7c:00:
07:9f:a6:39:8d:97:50:90:9d:ce:24:da:10:0a:88:
37:53:82:76:39:2f:09:38:fd:f5:83:43:ee:a7:e8:
63:50:a5:35:99:35:c3:d8:ab:1e:15:5b:5d:89:87:
78:e5:ba:25:bb:8d:58:18:9e:49:49:17:cf:a3:c9:
f5:f1:1e:f5:73:f2:ac:38:a8:4c:f3:34:19:e0:6a:
c7:11:b3:63:d5:52:d2:3e:7d:63:94:04:45:69:00:
55:a8:62:23:8b:9d:17:67:d5:e2:a3:75:ed:46:d9:
5e:e9:8f:7b:b4:98:4c:b4:ad:7a:67:b8:bc:4e:65:
22:10:6d:5d:94:cb:98:19:f0:e8:20:7d:f2:98:ea:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ec4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207522
Signature Algorithm: sha256WithRSAEncryption
39:fe:6e:a5:90:9c:4d:43:38:46:fb:1a:a5:fa:e6:96:15:e5:
6e:5c:e8:c8:8a:c8:4d:74:f7:de:51:5d:f4:0c:bd:b4:66:29:
75:05:3c:10:43:d0:a1:e2:49:93:df:81:1a:37:48:24:21:b3:
b7:1a:f2:f8:ba:f2:40:19:fa:f1:42:0b:62:c1:4b:15:e4:0e:
dd:c6:b4:7f:9d:1f:8f:77:7b:ab:f6:59:3e:9f:99:cf:a4:38:
31:d2:5b:88:67:f8:c4:85:8e:39:48:67:34:3e:af:e3:d9:bc:
ad:43:50:c1:98:f1:4b:5a:ab:8a:89:88:38:88:ed:5f:19:6a:
0f:74:1d:01:23:34:95:52:ce:98:8f:30:8b:02:44:d9:b9:fd:
2a:e2:7b:bf:1a:d7:80:65:eb:31:73:2e:d1:dd:7e:af:46:3a:
81:93:25:61:c2:0e:61:9b:41:08:1f:5f:54:93:c9:5b:fd:12:
0a:db:24:fe:78:7d:67:77:68:90:98:8c:9d:87:63:53:a6:48:
f1:97:99:4c:6c:a4:c3:4b:61:17:67:69:81:38:bb:7e:3d:29:
e7:64:90:2a:9c:cb:74:a4:a1:86:38:d4:29:94:6a:5c:50:bb:
d4:b2:d7:4b:7e:6f:6a:f4:d1:39:00:1a:8e:83:0a:64:2f:d5:
91:83:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:17 2026 by rpki-client