Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
File: GT0ubIC0mJEN4dla7G5x0ldGJWc.cer (raw, json)
Hash identifier: 0k3EoZWtAhheJVmwsIJumls9ANOVpwSqZ/JGJEpuslg=
Subject key identifier: 19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECD71D2BFEF8C8D944CF8C316A3239
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48895
IP: 185.85.104.0/22
IP: 2a05:ac80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:d7:1d:2b:fe:f8:c8:d9:44:cf:8c:31:6a:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=193d2e6c80b498910de1d95aec6e71d257462567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:bb:9a:34:f0:64:56:7d:8a:83:6e:13:e0:
c8:e2:7a:e6:9f:04:c3:17:81:c7:7c:89:66:7c:41:
45:3d:8a:aa:fc:9c:4a:05:57:4f:d4:a3:d4:5c:b1:
21:c6:bf:51:1d:9a:69:0a:70:53:4e:3e:01:9f:72:
61:14:d8:5d:8b:b7:0a:ff:a6:a8:73:33:5a:12:be:
ee:85:fe:c8:12:90:67:a0:46:1a:68:75:96:16:38:
00:41:5e:cd:83:82:51:a3:de:e8:86:7e:28:54:2c:
03:12:04:7d:14:33:9f:2a:5f:cd:32:e7:a7:4e:54:
03:73:59:b4:34:66:82:d4:64:28:38:25:10:4f:17:
3c:7f:f9:62:33:4c:59:28:60:7b:e5:0d:82:9e:fb:
64:10:6f:8d:af:ab:00:9f:0a:b7:9a:00:9a:92:33:
28:2e:1e:65:e6:b8:ce:94:09:f2:3c:48:e7:13:77:
cf:d3:3d:be:e1:9f:8a:9a:d0:61:ba:42:10:86:40:
f3:fa:ee:bf:d6:58:67:53:ee:a7:f3:c0:b2:10:d9:
6c:47:dd:f2:1b:9f:3a:81:2a:a6:a3:58:b6:e2:94:
b5:76:3a:91:52:21:72:6b:49:44:3d:97:02:8b:40:
1e:e3:64:e9:74:b9:db:93:5d:95:f4:6e:c9:2e:01:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.104.0/22
IPv6:
2a05:ac80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48895
Signature Algorithm: sha256WithRSAEncryption
4d:2d:86:e1:14:31:78:fb:a6:e2:12:cb:12:85:60:d0:16:af:
2c:43:fa:57:d7:e5:17:2e:9f:2d:8e:1b:71:f5:f5:4f:63:13:
d4:9b:b7:4a:17:03:aa:2e:e7:12:7f:8e:a7:66:1d:e4:82:48:
8d:77:47:b5:eb:70:fa:2a:ca:7c:c1:ec:30:dc:3e:1d:35:4b:
46:13:5d:f2:d2:26:13:ef:87:53:14:0d:51:aa:16:be:75:d5:
37:4e:ea:99:e6:67:63:81:5c:27:75:c6:a8:dd:48:44:4d:4e:
0a:66:f6:8f:25:70:6a:fa:8f:79:cb:57:27:e0:29:e3:8b:27:
bf:0f:13:75:9a:0e:8d:5e:22:44:09:77:d1:d1:ac:f6:1a:b5:
78:a6:15:14:11:ce:ce:c3:7a:63:b9:54:f4:7e:df:9a:b3:0d:
b5:49:97:fc:a2:55:d7:b1:43:95:5e:50:0b:6c:5c:e5:c6:9f:
45:66:5d:46:30:4b:d4:86:7c:b9:65:f2:93:5d:78:5a:95:b0:
da:af:c7:37:3f:71:0a:bb:4f:a0:1c:ce:85:3a:7f:f8:3c:89:
e5:2c:46:88:af:f6:01:28:8a:98:f1:fd:6c:89:39:01:6a:8a:
2b:8d:2b:40:6f:78:6f:36:a8:f4:dc:76:7c:ce:88:a8:e9:07:
b3:b2:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:17:50 2026 by rpki-client