Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
File: G87kBAWu-22hejQO7xWc6cTRgyI.cer (raw, json)
Hash identifier: aAEOSG5j9wUpZMWb/lKXW9iYryiQn6xC5tqCIce5si4=
Subject key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0CDF920EDC4B5BF21C9468D3348B9B9B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 11:14:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60472
AS: 60505
AS: 62105
AS: 208368
IP: 45.115.108.0/22
IP: 45.149.52.0/24
IP: 82.158.160.0/20
IP: 82.163.40.0/21
IP: 103.55.100.0/22
IP: 103.57.40.0/22
IP: 137.59.8.0/22
IP: 185.47.132.0/22
IP: 185.128.11.0/24
IP: 185.225.36.0/22
IP: 195.72.124.0/22
IP: 2a01:90a0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:f9:20:ed:c4:b5:bf:21:c9:46:8d:33:48:b9:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 11:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:05:d5:d9:1c:49:98:6b:3f:fb:00:51:66:
8d:23:c2:cb:db:18:7a:d4:d1:01:9c:67:f8:c3:f8:
49:df:11:c1:ea:08:c2:02:00:7c:3b:5b:1e:49:01:
0b:31:ab:b3:27:f4:aa:2f:8d:18:2f:fd:74:5d:06:
37:d4:63:77:2e:c3:dc:ce:a4:e2:ba:eb:77:55:cc:
58:9f:c7:1e:29:5a:3c:83:83:ea:54:b1:64:c8:3f:
cc:92:1a:19:c6:4c:13:c0:ed:51:e0:57:23:29:be:
99:07:b8:96:62:f0:d4:64:05:6e:b3:a5:c4:80:15:
14:b5:ea:a4:99:93:fc:ee:21:47:c4:e5:20:16:8a:
23:2e:49:08:1c:f5:3a:d5:c6:63:ce:27:5a:30:e4:
d9:64:08:f5:c8:2d:0c:4d:39:e4:0a:ac:ee:b5:a3:
bc:4a:78:8e:af:1b:71:b3:9d:1b:32:7a:21:24:68:
dd:a9:6a:ad:f2:d6:70:17:ed:4b:72:07:4a:88:ac:
fd:17:62:b6:74:c5:fb:a2:59:95:c5:c8:c0:e5:e9:
82:e7:58:80:70:0d:b1:30:8f:8a:f8:8d:26:3a:78:
d7:d4:f4:62:0c:d0:af:11:a3:ec:a9:7d:0c:07:96:
98:73:8d:9f:df:0f:09:85:37:f9:57:d4:b4:17:24:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
82.158.160.0/20
82.163.40.0/21
103.55.100.0/22
103.57.40.0/22
137.59.8.0/22
185.47.132.0/22
185.128.11.0/24
185.225.36.0/22
195.72.124.0/22
IPv6:
2a01:90a0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60472
60505
62105
208368
Signature Algorithm: sha256WithRSAEncryption
67:dd:4e:ca:88:fb:a2:48:02:08:2c:c7:9b:c5:6b:54:5d:d8:
0b:fe:99:a6:9d:84:28:b1:b4:56:97:70:36:18:48:d4:d5:b6:
ec:c3:07:01:1b:81:9c:68:53:67:db:7b:49:86:da:3a:9b:83:
f9:e5:53:1b:11:1f:d4:e4:12:7d:3c:7f:ff:c8:dc:d7:f6:9a:
c9:b9:4f:f0:5b:01:f8:16:8d:60:c0:3a:e7:ca:f9:8f:56:f5:
d5:a3:1e:28:3c:70:06:11:8a:50:a5:50:9e:d4:83:e2:bd:5f:
64:24:5b:fb:0f:e2:b8:f8:3d:c9:35:9f:5e:49:8b:fe:9f:80:
c7:04:fe:1a:62:0f:14:5f:c4:09:26:a8:75:14:f4:2e:4d:1f:
94:2c:48:b3:46:18:48:4f:a8:af:cb:ae:d9:63:62:e3:cc:78:
f4:b1:67:4d:3a:5a:85:93:93:59:52:3d:1f:65:7d:13:80:05:
66:de:75:62:b5:30:14:07:13:ad:2b:ef:a6:ec:40:9b:88:ad:
b2:db:39:7a:dc:01:70:99:84:0d:09:0a:8d:dc:c4:cb:49:cd:
c0:29:1c:9e:72:c6:10:c2:df:cf:81:3a:4c:97:ae:e9:f2:22:
6b:e7:85:74:ec:26:b2:ab:2f:35:c6:24:3a:59:7c:be:c8:be:
7a:4f:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:12:53 2026 by rpki-client