Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.cer (raw, json)
Hash identifier: +BomZJrR7EsDgIeGyEUJuIOxiUBY1PY4tGZV3plN+AQ=
Subject key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08FAB30F2AC9744FDD73561533C548A42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 08:52:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209050
IP: 5.183.216.0/22
IP: 195.2.220.0/23
IP: 2a0e:a600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ab:30:f2:ac:97:44:fd:d7:35:61:53:3c:54:8a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 08:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:f7:4a:17:f6:0a:1d:4e:aa:fb:37:d0:ac:
ab:63:b4:a6:de:0e:0d:e3:a7:d1:ae:fe:92:a3:0e:
f9:40:8b:b1:c3:9c:f8:41:4c:45:22:8c:09:4c:05:
9e:cf:6c:18:61:0a:ea:3a:4b:18:2f:fd:81:21:bb:
1c:8a:11:b4:11:9a:a5:da:9e:be:d2:69:40:c0:e2:
3a:dd:94:72:a1:5d:90:b3:b2:38:e8:26:cb:8a:c2:
42:ab:20:c8:0c:07:e7:47:96:2b:a8:00:b2:e5:06:
7e:4b:ad:69:82:4c:46:e3:af:b8:e2:17:71:0d:a7:
e5:c7:5a:57:b0:13:72:3e:db:91:a0:51:88:fe:74:
b0:6f:c3:de:8e:d2:2f:ce:61:6c:d6:3f:ee:48:e8:
31:fc:19:7b:99:ad:68:04:93:0d:7e:05:7e:63:c1:
c8:fd:0e:ba:55:95:78:d7:11:aa:6c:0f:47:54:c1:
ac:3e:96:c6:58:16:db:68:36:4d:aa:aa:e9:3d:6c:
a1:07:4d:b5:98:54:72:51:51:56:48:69:88:e2:bc:
74:92:44:f8:75:cb:57:b7:bc:bd:da:54:9c:7c:98:
4b:e6:c1:11:a1:40:98:1b:f8:da:33:35:86:54:ee:
38:29:41:34:8a:ee:5c:9c:8c:af:25:2c:5a:41:92:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.216.0/22
195.2.220.0/23
IPv6:
2a0e:a600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209050
Signature Algorithm: sha256WithRSAEncryption
5b:06:2d:66:b3:31:61:e6:4a:66:5f:54:11:4e:78:b6:49:b7:
b7:01:dd:9e:2e:d9:85:23:27:8f:8c:3a:20:e2:ce:91:15:e8:
57:f0:b8:2c:49:bd:a7:98:a7:af:84:20:8d:91:45:7d:31:90:
32:d7:3e:bd:cb:fc:57:a6:48:de:18:9a:17:bc:94:55:7e:4f:
10:fa:f6:33:9f:ff:c4:0f:4e:45:c1:58:fe:15:4d:c3:06:25:
1d:24:2e:5d:11:e3:78:e1:bb:6e:8b:bb:de:51:c8:13:8b:3f:
27:fd:82:d7:b3:1d:3d:ed:6f:f0:a0:4a:d6:89:4a:ef:a8:62:
fc:65:83:05:f0:10:6b:93:b2:2f:a1:b3:73:d1:e7:53:bb:df:
7c:61:79:24:2e:6d:4d:80:77:eb:da:d5:b1:7b:05:0a:28:7b:
a1:4f:72:49:73:db:df:76:6d:66:6d:02:ec:fb:29:79:79:b7:
3e:59:8f:ae:13:4b:82:50:c3:e7:5e:28:c4:d6:00:97:47:a5:
25:70:83:f2:45:37:a1:8a:df:82:34:bf:59:33:e1:5e:8a:48:
dc:39:d6:b5:bf:19:d1:34:6b:6f:76:68:46:25:43:84:05:d6:
5e:a1:27:2e:75:07:0e:1e:d9:7a:5a:2e:94:5b:ee:3c:df:b2:
ab:3a:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:53:48 2026 by rpki-client