Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer
File: GUKkFVlCay9ah3wDnu2he2ueHYk.cer (raw, json)
Hash identifier: KNHu+TOyHkJlCTSFfYfmH5QRrIfHZHiS4vPqThpu/m0=
Subject key identifier: 19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEDD77713812F713BF4B3592E525BAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41109
IP: 81.200.80.0/20
IP: 2a01:7100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:d7:77:13:81:2f:71:3b:f4:b3:59:2e:52:5b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1942a41559426b2f5a877c039eeda17b6b9e1d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:7b:01:48:14:91:dc:8b:17:27:dd:fe:67:
8e:50:c3:fd:9c:e4:00:3c:67:ca:cc:4a:7c:55:f3:
f7:1a:4a:aa:3d:06:f0:42:da:ea:5b:e4:12:a1:32:
e9:51:87:83:4e:56:71:03:99:cb:51:69:5d:6c:e8:
8d:e1:af:af:89:78:93:23:0d:b2:e8:67:68:f2:a5:
20:ad:12:c3:a7:2b:5a:d3:2e:cb:e6:9b:e9:9d:cc:
af:3e:c9:63:73:ef:14:64:30:cf:d3:66:55:80:92:
dc:ae:7f:0a:a7:ac:80:81:6a:58:dc:e2:43:61:8f:
30:a6:2f:48:34:11:1a:1e:13:4e:d1:ef:63:8e:14:
f0:d7:a8:81:9b:1e:6e:4e:32:8c:a9:8d:f3:df:c5:
8e:76:1e:e5:fa:12:e2:49:1a:86:2b:68:33:55:71:
91:d6:ba:00:e0:6d:c7:6f:95:f8:c1:79:d2:e6:4c:
a5:3a:a1:b0:01:27:e2:03:26:fa:ef:39:7f:92:2d:
b0:fd:2a:c7:e5:91:79:84:92:d7:2b:ad:db:ea:6d:
96:f7:d6:a0:50:49:8e:7f:64:72:e1:eb:4e:2c:d6:
37:14:03:6a:99:29:da:4e:b3:36:16:61:66:88:63:
73:78:15:b9:54:6e:8e:b7:25:03:6c:c3:69:91:63:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.200.80.0/20
IPv6:
2a01:7100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41109
Signature Algorithm: sha256WithRSAEncryption
0b:c4:59:e8:f8:1c:23:22:99:e9:58:06:a5:9d:13:e2:4a:01:
2e:01:61:b5:28:27:3a:c6:5e:10:1a:c3:8e:9a:f8:ba:ae:be:
ae:7c:fd:a3:44:4f:fa:69:fc:e2:1c:dc:3b:7e:45:8e:45:73:
9e:36:2f:e8:d0:71:44:a6:0a:61:74:b3:25:55:40:40:c3:c4:
70:83:4a:49:8b:48:45:48:59:b3:a7:88:36:86:e3:b5:02:83:
5a:42:d4:74:10:41:a2:31:e6:e8:e5:24:91:6b:b5:c4:84:2e:
7f:26:7f:c9:83:e7:22:8c:b8:10:54:a3:63:ce:41:97:8f:23:
a7:82:59:bf:d7:71:8b:cf:cb:b8:93:99:4a:5c:8d:dd:37:9b:
9f:89:98:ce:e6:39:38:e1:c2:ac:aa:5e:eb:c6:2e:ac:fe:b8:
7d:de:7c:fa:25:2d:61:97:1f:3c:af:2b:bf:6e:7e:46:fd:d6:
e0:b8:b3:f0:4e:fa:5e:c3:ab:c0:45:31:10:bd:f7:9d:50:d4:
4c:e8:64:f3:7d:de:45:8e:fc:43:be:c4:f9:75:c6:11:dd:4e:
ea:b3:b9:7d:f9:ff:33:ff:97:15:36:ae:69:1e:98:9b:5b:3e:
d3:d7:d7:a2:da:27:94:cc:52:14:f6:90:c7:4e:42:7f:16:47:
42:00:f2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:25 2026 by rpki-client