Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
File: GbsyomYvkFwNi_JH7ODbxnmha4Q.cer (raw, json)
Hash identifier: eUsYJ2g4KjPJZHbuXornUdalDRcwZfjUj1tGVk1MJCo=
Subject key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7CEDA9A7EF43C8999047358519A51D92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 04:18:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.147.104.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:a9:a7:ef:43:c8:99:90:47:35:85:19:a5:1d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:29:73:51:f0:f7:0b:c7:74:61:5a:e2:d5:
32:40:8f:db:29:dd:69:f5:d5:7a:8f:06:be:f8:22:
3c:47:03:bb:11:26:69:ec:52:25:34:99:e5:d6:78:
b1:de:9f:4a:f7:22:67:22:d6:43:fd:d2:51:2e:69:
5b:17:34:7d:18:ce:ea:b3:aa:90:61:a7:2b:64:a5:
fb:3a:ab:47:17:cb:69:4b:b7:d3:5e:80:cf:0d:35:
97:b3:f2:82:ce:a6:c2:05:2c:ef:56:5b:86:9c:a9:
1a:8c:77:31:b1:62:b7:a4:39:bf:94:21:ca:5a:d5:
ba:00:65:b6:34:42:57:53:ad:69:7d:71:ed:17:1f:
27:e3:d3:9e:8a:e1:c0:3e:2c:62:b1:37:36:08:ff:
2a:53:21:d4:e4:dc:4f:37:5e:41:e5:58:60:25:51:
a5:3b:59:70:93:51:1e:77:07:32:f2:a2:42:8d:8a:
0e:5d:39:5f:c5:17:cc:e6:51:ae:fe:ad:21:17:29:
3f:f9:38:c8:df:1d:5f:d6:af:7c:01:15:0c:d5:2e:
40:e9:ba:46:4a:59:85:e4:fd:b4:38:cd:c6:09:de:
2e:ee:a5:8b:fe:18:94:48:d1:e9:1f:e3:e5:81:c1:
60:63:ae:82:82:00:0c:6a:a3:bb:bd:de:c0:7f:1c:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.104.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cd:98:6e:d2:10:31:55:b7:4a:c5:7c:ea:1a:57:a1:ab:5e:
0f:b0:59:33:b4:64:e8:62:bb:6e:5a:81:ec:af:23:db:4b:c9:
de:10:9b:77:f1:ff:5b:f2:31:af:b4:b9:4c:00:a1:89:9b:72:
f8:29:ac:6b:bd:e7:8f:07:18:6a:38:03:94:fd:34:2a:92:32:
fd:e5:7d:df:a1:7e:c2:f2:11:77:64:e2:c1:44:63:c0:19:b1:
f7:a0:4c:82:65:da:4a:f3:4c:a2:17:05:18:8b:cd:46:58:6e:
1a:36:84:4f:8b:7e:08:9a:98:4e:5a:47:4a:f5:c1:02:5a:08:
b0:4f:09:56:3b:24:26:69:6b:ec:d2:46:48:2c:20:58:33:fc:
af:a8:3c:60:38:45:35:46:78:b3:f4:0c:2a:8f:ea:17:dd:ee:
f7:d5:00:bd:bd:a1:d5:37:89:8d:68:35:01:76:4b:77:ad:ed:
d8:20:15:37:ea:85:2a:0f:7a:45:ec:19:eb:be:79:26:2a:50:
68:5c:ee:53:5b:ca:f5:eb:80:90:b0:80:21:7e:54:a3:df:88:
68:8c:ae:c5:73:71:6a:e2:ae:81:c4:7c:0e:6b:34:53:b9:2e:
5e:9c:fd:39:89:9c:59:0a:77:ac:61:0d:c0:49:05:10:24:b4:
3b:9f:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:21 2026 by rpki-client