Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
File: GUoR_la49HpaFBUDK3f_n7CC4D8.cer (raw, json)
Hash identifier: 3RvTC5onJfiODO6Ur8Ne/5lsCGX7a+vUpHbcVpb38p4=
Subject key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7DCB31A9AE614B7DABD80851318D8A6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 08:20:27 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 41633
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:31:a9:ae:61:4b:7d:ab:d8:08:51:31:8d:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:58:88:91:fb:76:62:56:e5:8e:2d:46:8c:
2b:9f:c3:7d:bd:b7:20:c7:da:84:a0:66:df:2d:bd:
04:16:d8:c8:8b:bf:45:67:ce:41:50:a7:e4:9f:7d:
8c:59:4f:28:45:a3:93:87:b7:76:10:1f:eb:eb:68:
67:33:db:47:3d:d7:cb:02:f8:ab:ec:10:e7:31:be:
d8:ce:8b:a3:78:32:76:1b:93:45:8c:d0:39:27:48:
66:d6:4f:4a:9c:23:f7:7b:d1:09:0d:e6:74:f7:9a:
df:a7:a4:f4:b8:1d:16:97:87:dc:51:66:90:d2:73:
b3:bc:34:e9:f1:98:0f:e3:17:87:10:a4:d5:97:c1:
51:01:ae:f0:93:69:42:c3:a8:3a:c8:1f:70:45:ed:
57:d0:d6:c4:6f:06:e2:05:71:a0:0c:c3:d5:7c:91:
6a:f2:f2:ce:e5:37:f0:b4:bd:06:ac:1e:95:66:df:
9e:ea:d4:f4:26:81:bd:f8:84:97:1c:46:16:10:f7:
a5:5e:8e:7a:18:9a:1a:eb:4f:96:fd:30:b2:e2:1e:
13:1b:e1:e4:20:c7:71:0d:67:d7:de:51:da:86:e7:
e7:d5:78:cc:80:a3:6d:0e:16:49:f0:ae:dc:37:62:
61:05:ce:5b:18:79:20:e0:92:8f:88:ef:17:d7:18:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41633
Signature Algorithm: sha256WithRSAEncryption
35:e7:2a:df:4f:00:c2:24:bf:c8:17:e7:aa:00:e1:9f:46:a9:
bd:0c:e4:a2:82:70:90:ca:dc:0f:07:b3:3e:68:95:72:a2:93:
9b:0b:c8:00:12:14:07:53:10:9a:91:fa:44:bf:d0:55:70:ed:
fe:d3:63:fb:f3:65:15:e6:f7:21:93:bf:3c:3e:1f:fb:eb:b1:
ba:b2:ee:c3:85:1d:54:ba:cd:54:8d:e8:8e:67:93:49:b0:91:
58:e3:66:35:77:74:17:3e:c4:33:d0:f1:ba:89:4e:40:8c:b2:
78:07:ac:78:10:8c:c6:63:19:07:70:ca:30:87:0e:1b:25:58:
68:f1:f7:b5:5b:9c:0b:76:ae:65:99:b7:83:4a:6d:0f:4e:83:
68:ed:2a:55:7b:9f:06:01:db:18:8a:31:68:d5:e0:e0:ae:a9:
60:ad:a3:27:56:6f:aa:dc:54:4a:92:d3:e7:2b:6f:25:0e:b3:
5e:c7:8b:43:9d:69:80:23:2e:ff:7e:4f:09:39:2b:c8:9c:97:
b2:4c:01:1b:3a:5f:30:69:2c:22:42:79:80:fd:ee:2a:46:ce:
89:e2:e0:56:59:9a:0a:fd:45:8c:24:e2:04:85:e9:d3:09:24:
04:f5:f4:85:5e:72:e2:e9:24:64:4d:c4:bb:85:f0:73:ab:ba:
bd:59:ff:20
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt9yzGprmFLfavYCFExjYprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTRhMTFmZTU2YjhmNDdhNWExNDE1MDMyYjc3ZmY5ZmIwODJlMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GBYiJH7dmJW5Y4tRowrn8N9vbcg
x9qEoGbfLb0EFtjIi79FZ85BUKfkn32MWU8oRaOTh7d2EB/r62hnM9tHPdfLAvir
7BDnMb7YzoujeDJ2G5NFjNA5J0hm1k9KnCP3e9EJDeZ095rfp6T0uB0Wl4fcUWaQ
0nOzvDTp8ZgP4xeHEKTVl8FRAa7wk2lCw6g6yB9wRe1X0NbEbwbiBXGgDMPVfJFq
8vLO5TfwtL0GrB6VZt+e6tT0JoG9+ISXHEYWEPelXo56GJoa60+W/TCy4h4TG+Hk
IMdxDWfX3lHahufn1XjMgKNtDhZJ8K7cN2JhBc5bGHkg4JKPiO8X1xhvMQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBlKEf5WuPR6WhQVAyt3/5+wguA/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2FhYWVj
MC0wZmJhLTRlZmMtOThiNi1jNmExNmRlNDQyYmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvYWFhZWMw
LTBmYmEtNGVmYy05OGI2LWM2YTE2ZGU0NDJiZi8xL0dVb1JfbGE0OUhwYUZCVURL
M2ZfbjdDQzREOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCioTANBgkqhkiG9w0BAQsFAAOCAQEANecq308AwiS/
yBfnqgDhn0apvQzkooJwkMrcDwezPmiVcqKTmwvIABIUB1MQmpH6RL/QVXDt/tNj
+/NlFeb3IZO/PD4f++uxurLuw4UdVLrNVI3ojmeTSbCRWONmNXd0Fz7EM9DxuolO
QIyyeAeseBCMxmMZB3DKMIcOGyVYaPH3tVucC3auZZm3g0ptD06DaO0qVXufBgHb
GIoxaNXg4K6pYK2jJ1ZvqtxUSpLT5ytvJQ6zXseLQ51pgCMu/35PCTkryJyXskwB
GzpfMGksIkJ5gP3uKkbOieLgVlmaCv1FjCTiBIXp0wkkBPX0hV5y4ukkZE3Eu4Xw
c6u6vVn/IA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:32 2026 by rpki-client