Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer (raw, json)
Hash identifier: kHLhIjT2Zp/uNgun6ZskG6SqziO7ncZr0qusEkAOmc4=
Subject key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7A5A9C929BCE72A61533D8DB10F134FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 16:18:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 84.39.136.0/21
IP: 185.69.128.0/22
IP: 185.146.68.0/22
IP: 203.190.56.0/21
IP: 2a05:2200::/29
IP: 2a07:4e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:9c:92:9b:ce:72:a6:15:33:d8:db:10:f1:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:f7:71:49:fb:3d:d1:4e:9b:f4:29:d3:58:
65:eb:7d:9d:51:59:dd:e4:12:14:74:a8:47:96:8c:
c9:46:8a:d9:33:3b:87:64:bd:e5:36:05:b1:7e:4b:
6c:7a:a1:1c:c1:e4:f2:31:33:5e:9f:6c:ca:a4:8c:
79:d7:0e:b9:62:5c:75:80:b4:23:2a:92:f5:5e:6e:
5a:40:a5:60:54:b8:57:02:ce:54:48:51:2b:e7:bd:
c8:b4:d2:6f:5a:04:19:41:77:db:b1:07:b8:dd:98:
af:fa:aa:81:56:f8:39:a1:09:fb:69:e1:72:00:7d:
be:de:12:37:60:8c:86:95:5a:49:01:51:a5:ce:a4:
0a:f6:d6:24:a5:3f:9c:0d:a5:c1:96:9c:4c:1a:cd:
a6:01:5c:e7:3a:14:5e:33:b3:18:35:c1:cd:66:df:
92:f6:c5:1f:97:a6:25:2c:af:f2:41:66:07:53:37:
82:01:09:b7:9c:b2:c9:4b:3e:c7:dd:a1:1f:83:8d:
ae:23:d4:b7:13:c2:00:eb:d7:e4:38:4f:3f:61:99:
a8:bc:a5:6e:a4:1a:dd:cf:89:d9:10:d5:e0:b3:40:
bd:71:50:d2:8c:15:1b:3c:67:d2:ff:c3:69:5a:ae:
52:6b:78:3d:c1:fd:89:3d:d4:22:fc:8f:13:3a:49:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.136.0/21
185.69.128.0/22
185.146.68.0/22
203.190.56.0/21
IPv6:
2a05:2200::/29
2a07:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
38:0e:52:f1:91:f7:62:e9:d2:41:91:25:21:46:86:81:43:2f:
f4:70:46:2a:3e:95:b3:b0:f5:4b:c6:1f:a6:1e:74:3a:66:be:
c8:ad:6f:27:ca:76:82:e5:90:1e:4c:32:76:16:bb:a9:38:48:
bc:1a:8f:d0:c8:44:84:e4:89:8b:49:65:bb:41:84:36:b3:97:
45:40:a3:78:22:9e:44:9b:03:7b:d3:c5:13:63:80:a2:ff:66:
97:51:f6:ed:05:7e:5b:fb:3d:82:de:6d:99:da:d4:52:6a:d4:
20:29:91:76:43:c0:a3:50:17:a6:c1:71:8d:f5:26:e6:41:a3:
06:14:c9:88:dc:eb:d3:22:b3:64:2b:b2:fd:ea:13:c3:f6:73:
e2:96:f7:e8:16:b8:5b:3f:a0:40:8a:b3:af:75:87:d3:9e:0c:
2c:28:11:65:a2:23:5a:05:cc:cb:37:1d:20:8c:2e:f6:ec:2a:
24:0e:30:0c:70:a9:dc:0a:15:d9:01:aa:34:94:0e:d6:93:e9:
1e:b4:fe:7e:2d:33:b8:ba:a8:7e:4f:62:70:4a:86:52:ca:8c:
10:02:55:b8:a8:68:cc:22:63:72:c4:79:69:15:fb:08:c3:ed:
4b:f4:5a:a6:94:35:76:91:78:90:0a:d8:de:56:09:0a:fe:cc:
f7:96:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:28 2026 by rpki-client