Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
File: GHvBuyhitXJX0p4NO9axztQz6hM.cer (raw, json)
Hash identifier: y9I0uS44eaCH16g7zaLZGzJ8RaD4a8mOzLz+/DN1jAI=
Subject key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9A476F2DCB210DF096239465D814B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:41 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204641
IP: 45.80.148.0/22
IP: 185.244.128.0/22
IP: 2a0d:2f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:a4:76:f2:dc:b2:10:df:09:62:39:46:5d:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:8a:82:fd:99:8b:22:b2:c6:47:2e:e2:5e:
1d:8b:85:85:f5:95:2a:8b:14:4f:0a:ff:d2:ab:dc:
7a:7a:77:1a:5f:01:0d:fe:18:2e:dd:36:56:0d:93:
70:ba:52:85:fe:3f:14:1a:7b:ca:d1:f0:35:e3:99:
d9:40:6e:42:aa:11:de:b6:ee:fe:85:bf:a8:b4:c3:
6d:1b:35:27:4a:05:bd:96:40:f3:d7:a9:bf:c2:8d:
46:5e:2b:00:0a:68:ea:60:34:1e:43:32:04:49:78:
43:4f:c3:fb:33:ad:1f:37:ef:d5:2c:de:bf:7f:b0:
fe:96:a9:d5:94:ed:a9:b9:8f:ba:b0:57:e8:59:95:
87:5e:cd:c0:9b:2f:02:bd:45:84:64:ea:2c:b1:3f:
78:09:df:27:e1:b1:57:18:0e:c4:90:ae:7b:c8:39:
36:e2:3a:ce:71:3d:a6:87:b3:4f:fc:bd:bc:f3:f1:
88:47:eb:58:e8:b6:4c:e5:20:8d:c5:c5:e1:d1:0c:
73:ea:6b:24:2f:dc:7c:67:2c:35:07:27:ed:c0:d3:
ff:42:77:d0:0b:f2:8a:a0:e3:d1:81:e3:a7:96:3d:
cf:71:14:b1:29:49:46:d0:12:43:a2:dc:13:9a:62:
5c:0f:a0:21:ef:7c:11:e9:46:0e:b9:ee:8e:fa:3c:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.148.0/22
185.244.128.0/22
IPv6:
2a0d:2f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204641
Signature Algorithm: sha256WithRSAEncryption
12:dc:33:54:60:f6:39:f4:bf:55:d9:c1:c0:84:4e:b6:e0:ce:
ee:21:53:e0:63:05:66:7b:98:da:3c:ae:f2:e3:ee:a4:21:eb:
a6:8a:34:01:f2:59:00:72:48:48:c9:5a:08:5f:53:5e:92:6e:
2f:66:05:7a:d2:ad:34:b1:b2:d7:02:ab:e5:d5:4f:a4:ec:7b:
01:0e:eb:11:d7:d2:59:94:3a:86:51:08:85:23:7f:41:cb:17:
83:19:ce:dd:d7:41:55:b0:e8:ff:49:e0:e0:13:d8:a6:d7:29:
f8:27:01:c3:e1:94:21:70:df:08:e8:c4:b8:fa:f5:01:e3:1f:
17:ed:3d:6b:0e:8c:e1:8a:ba:b2:78:e7:c4:c4:3e:68:65:73:
29:8b:2e:eb:06:82:b0:b2:0a:28:b0:97:79:d7:3c:46:dd:c2:
31:ae:45:aa:9a:70:25:dc:5d:6b:8b:10:f8:12:d8:f8:42:e0:
5c:34:ed:16:34:4d:60:33:b3:76:28:f1:03:3e:d5:fe:7f:27:
15:d5:dc:52:70:64:62:e0:c2:c7:23:0e:12:05:87:b4:2c:a0:
e0:0b:ff:a5:e7:69:e0:e6:24:b0:39:c8:39:bf:c7:be:f7:bb:
87:84:6d:c3:69:de:98:55:61:42:8b:24:32:35:7c:fa:19:26:
f4:90:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:49 2026 by rpki-client