Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer (raw, json)
Hash identifier: 9b47sXY/nChaeEDmpWM4vxYieNZEXV8iWF1+4eF6l4w=
Subject key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758E831CC7B7F21B186B0FBDDA29C78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:53 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214523
IP: 194.62.46.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:e8:31:cc:7b:7f:21:b1:86:b0:fb:dd:a2:9c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1925e6387b33e94069a89a5d1be68904e4090613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:e5:32:3c:c0:1a:79:2b:e7:40:0d:70:9c:
e8:e6:70:d0:a0:fb:e9:6f:97:3a:fa:2a:1b:7e:78:
5a:e6:2a:a2:08:1a:b9:7b:16:75:7e:3e:18:bb:80:
77:7d:f4:ff:64:99:9a:7b:87:10:43:b9:01:13:db:
6c:a3:d6:58:82:27:26:f0:aa:10:bb:68:40:41:36:
95:4f:aa:89:72:d4:35:4e:ce:10:a9:23:97:8a:5d:
92:71:a3:54:06:d2:ee:61:43:52:e1:ea:61:8c:f1:
71:f6:46:c9:92:e0:c5:a6:b6:c4:7b:ea:b0:ae:b9:
73:54:2d:42:4e:c5:e3:77:2b:dc:6a:4c:99:be:93:
c5:e8:b2:d7:22:b4:b8:cd:54:30:6e:36:58:6d:02:
6b:49:7b:9f:34:a4:8a:fa:44:32:8f:d0:fb:79:0e:
1e:a8:26:4a:7e:13:f8:df:a3:df:11:a1:4e:91:81:
e7:9e:36:2a:f7:c7:cd:15:93:c5:5d:09:e4:b1:e5:
27:2f:ee:bd:77:a2:f1:00:f6:7a:da:f0:f7:ae:e3:
d7:eb:20:d7:84:e1:3b:2e:42:f5:98:02:5c:d0:9d:
e0:ad:ee:cf:e8:49:a7:42:dc:e7:3c:5e:51:22:7b:
35:e5:9a:cc:92:f8:66:48:c6:fb:eb:2f:ba:fc:79:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.46.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214523
Signature Algorithm: sha256WithRSAEncryption
ae:ae:c0:ab:6d:d3:63:ec:93:5d:b4:c4:a3:04:5b:b1:90:63:
bb:92:22:60:84:20:a8:37:94:47:99:e2:99:a0:d9:46:05:ff:
5c:b7:9e:15:c3:3e:a7:48:f6:e1:c8:bf:cb:3f:48:12:9b:bc:
db:c5:13:1d:f4:66:1a:74:aa:7c:cb:04:0e:08:4c:21:b0:eb:
f9:14:c5:16:43:b2:cc:ba:dc:c0:ea:ad:8b:be:f7:1e:06:4f:
74:54:88:5a:35:4e:a0:0a:de:41:05:e4:63:2a:da:f0:28:df:
48:61:e5:d8:13:f1:37:11:d0:41:ca:10:3b:26:8c:7e:2d:a5:
02:ef:9e:ba:21:6e:32:4f:17:47:57:29:72:d8:a7:ff:19:7c:
7e:f0:43:44:28:de:46:8f:de:f5:0b:0d:b4:ba:47:2b:7e:26:
3e:53:5b:9e:df:b7:d6:f7:32:4a:7b:b7:90:69:22:de:2c:13:
a5:24:44:bd:2c:73:dd:09:ec:35:69:d0:3f:c1:23:46:85:bb:
36:ff:88:7e:3b:40:6b:d1:78:01:34:61:0d:f3:e9:15:97:a3:
9c:d8:6d:b8:72:b8:77:e3:ec:0b:1a:53:2d:81:cb:e7:06:65:
ad:55:e4:c0:19:fa:bd:ea:5e:7b:56:96:2d:7c:86:20:0c:2f:
74:ce:73:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:19:30 2026 by rpki-client