Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GSx4GHPqSt3idTiBHLaqfhvATxs.cer
File: GSx4GHPqSt3idTiBHLaqfhvATxs.cer (raw, json)
Hash identifier: 490sL/imyp8FZSh7QnZufoYPA876M/oZemmz/EoI7Bc=
Subject key identifier: 19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5ADE75ECFC830B63D63E0CBE215CAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:17:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203439
IP: 185.134.248.0/22
IP: 2a02:4f80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:de:75:ec:fc:83:0b:63:d6:3e:0c:be:21:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=192c781873ea4adde27538811cb6aa7e1bc04f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:59:71:6c:6b:2b:74:bd:77:36:da:cd:00:
02:a3:7c:8b:8e:f2:a9:96:95:fa:d5:2f:84:e5:55:
23:8c:87:5b:a4:ca:5b:fe:93:ae:cd:20:82:12:b9:
ff:8a:6b:31:37:0d:79:28:f8:55:1c:68:42:bc:2d:
52:55:d3:42:70:89:53:1b:72:a7:9e:a6:43:12:96:
f6:61:6a:27:c2:fb:00:9b:85:7e:c9:00:49:ed:ce:
7b:7e:4f:fc:21:e9:04:c7:1a:b8:1a:3f:58:93:d8:
bc:67:d9:7d:43:a5:0e:e9:76:33:92:6d:d0:29:c7:
99:8b:e0:5c:93:7d:54:2f:fa:a7:3b:c0:08:4a:cf:
4b:fb:f3:4b:b8:16:3e:de:be:7e:bc:ce:b9:64:ff:
86:e6:1c:09:00:b6:81:7a:34:c1:b8:b6:fc:35:e6:
87:89:07:10:b1:a7:4f:d0:21:59:49:cc:46:47:07:
30:a9:91:01:7d:7d:ef:5d:6f:6c:e9:d1:3b:48:9b:
e4:df:c9:b7:88:76:6c:30:4a:19:f4:32:a2:dc:30:
21:c1:8a:f7:6b:ef:c9:ff:e2:33:2a:fd:c2:bb:22:
35:2c:95:df:8e:d1:51:84:f9:ec:71:fe:50:33:ea:
16:92:24:5b:f2:37:4c:33:3a:11:06:70:50:65:0d:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:78:18:73:EA:4A:DD:E2:75:38:81:1C:B6:AA:7E:1B:C0:4F:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ef0477-dca7-4634-8012-9334d548d193/1/GSx4GHPqSt3idTiBHLaqfhvATxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.248.0/22
IPv6:
2a02:4f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203439
Signature Algorithm: sha256WithRSAEncryption
96:ab:c2:43:f3:dd:51:47:58:d6:d5:9d:94:84:3a:0a:2e:71:
d1:6c:90:8e:84:29:eb:b1:2d:c4:c6:50:15:99:b2:f3:20:c7:
ad:08:59:a0:79:53:e1:4a:11:c3:7d:cd:51:2b:3e:c9:91:51:
53:49:9a:79:d9:c7:29:f3:f2:89:d7:6c:59:de:b9:a8:2a:c1:
e6:1e:68:f4:be:87:70:70:81:86:06:3e:41:00:d5:c4:6e:55:
46:e3:96:13:be:d5:46:0d:59:0c:0d:67:49:80:5b:66:f4:04:
e8:97:5b:de:e6:44:08:e6:fd:b6:89:84:10:23:18:03:16:b4:
a5:8b:11:ef:19:5e:63:d1:f1:83:23:17:b0:5a:bf:51:b0:54:
f2:68:e1:18:4b:ad:4e:39:31:43:74:3c:b7:66:a8:a3:c7:83:
82:7f:86:e0:7f:76:1d:a1:82:c3:bb:21:b1:58:5d:9d:ee:c4:
dc:68:a9:7a:3c:bf:20:43:c4:89:c7:98:45:c1:b1:30:ba:f1:
ff:e2:7c:62:fb:6c:d9:55:3f:85:85:f2:b7:4d:db:06:23:a5:
d8:53:b9:1f:c3:3f:90:62:15:41:7d:9c:7a:15:32:c1:ba:ae:
21:e8:97:72:58:f8:db:f5:80:0c:f1:b0:03:cf:48:12:52:10:
7d:a4:04:8d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt9Wt517PyDC2PWPgy+IVyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTJjNzgxODczZWE0YWRkZTI3NTM4ODExY2I2YWE3ZTFiYzA0ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OhZcWxrK3S9dzbazQACo3yLjvKp
lpX61S+E5VUjjIdbpMpb/pOuzSCCErn/imsxNw15KPhVHGhCvC1SVdNCcIlTG3Kn
nqZDEpb2YWonwvsAm4V+yQBJ7c57fk/8IekExxq4Gj9Yk9i8Z9l9Q6UO6XYzkm3Q
KceZi+Bck31UL/qnO8AISs9L+/NLuBY+3r5+vM65ZP+G5hwJALaBejTBuLb8NeaH
iQcQsadP0CFZScxGRwcwqZEBfX3vXW9s6dE7SJvk38m3iHZsMEoZ9DKi3DAhwYr3
a+/J/+IzKv3CuyI1LJXfjtFRhPnscf5QM+oWkiRb8jdMMzoRBnBQZQ1whQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBkseBhz6krd4nU4gRy2qn4bwE8bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2VmMDQ3
Ny1kY2E3LTQ2MzQtODAxMi05MzM0ZDU0OGQxOTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvZWYwNDc3
LWRjYTctNDYzNC04MDEyLTkzMzRkNTQ4ZDE5My8xL0dTeDRHSFBxU3QzaWRUaUJI
TGFxZmh2QVR4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYb4MA0EAgACMAcDBQAqAk+AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMarzANBgkqhkiG9w0BAQsFAAOCAQEAlqvCQ/PdUUdY
1tWdlIQ6Ci5x0WyQjoQp67EtxMZQFZmy8yDHrQhZoHlT4UoRw33NUSs+yZFRU0ma
ednHKfPyiddsWd65qCrB5h5o9L6HcHCBhgY+QQDVxG5VRuOWE77VRg1ZDA1nSYBb
ZvQE6Jdb3uZECOb9tomEECMYAxa0pYsR7xleY9HxgyMXsFq/UbBU8mjhGEutTjkx
Q3Q8t2aoo8eDgn+G4H92HaGCw7shsVhdne7E3Gipejy/IEPEiceYRcGxMLrx/+J8
Yvts2VU/hYXyt03bBiOl2FO5H8M/kGIVQX2cehUywbquIeiXclj42/WADPGwA89I
ElIQfaQEjQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:20 2026 by rpki-client