Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.cer (raw, json)
Hash identifier: 9asCknpJ6ijf11erh/yjfA/j8ifXoFT7s1K5zURDddA=
Subject key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF2B12C861AD47D4EEEA034C0797B49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:22:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 86.111.248.0/21
IP: 193.7.176.0/21
IP: 2001:678:cac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:b1:2c:86:1a:d4:7d:4e:ee:a0:34:c0:79:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:2e:31:8f:ac:80:cb:46:48:a8:9c:ea:49:
b0:7c:8f:1e:d5:fe:11:a4:f8:3c:0c:17:a5:72:bf:
d5:37:1e:41:b1:80:a7:98:02:0f:8d:17:30:99:a7:
25:8d:46:6a:b9:d6:54:60:5c:3d:f1:5b:a5:c6:c7:
e8:d3:00:3b:44:8c:70:0d:93:a9:f7:b2:4a:64:bc:
44:45:7e:26:4e:83:bc:a5:4b:5e:b0:b9:76:80:9b:
a8:6b:e2:85:fe:29:cb:f4:f8:8e:a7:f4:10:83:01:
2b:6c:41:ee:f7:f0:94:47:09:c2:bd:e0:a1:e0:44:
75:ba:e8:3e:8c:c0:92:f9:2b:60:2d:9d:f5:e3:81:
d1:ed:9d:0f:58:ac:d6:1d:10:54:76:f6:2e:4d:97:
4e:aa:c2:7c:2c:69:27:9b:82:86:e3:8d:a7:39:ea:
91:91:67:21:f3:8b:1f:15:2f:6b:9b:51:1e:a5:84:
b3:01:80:df:4d:a5:0a:8d:54:fe:34:c1:8c:52:9d:
4b:00:b0:ae:07:45:90:83:1c:7e:f1:ae:20:27:f4:
16:ae:64:c6:87:5e:cb:51:e0:cd:b0:37:7d:99:e7:
57:73:0b:bb:b4:48:3b:af:8e:50:9d:57:8b:2a:0c:
32:fd:df:f0:c6:81:0b:37:d9:ae:3e:f3:e5:4a:38:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.248.0/21
193.7.176.0/21
IPv6:
2001:678:cac::/48
Signature Algorithm: sha256WithRSAEncryption
58:27:2f:2b:df:77:bd:81:e0:f0:b2:8f:49:0f:fc:4b:65:65:
c7:84:5c:40:d6:cc:1f:0c:12:58:7c:68:2f:d9:30:4f:33:a9:
94:92:3e:67:94:18:ca:f4:c0:13:4e:9e:5c:f8:bd:fb:8a:36:
52:07:13:d8:18:cc:01:30:56:62:b1:c3:3e:eb:5a:8e:92:d6:
31:55:a6:21:56:4f:55:2a:aa:53:24:92:1f:72:04:2d:3a:77:
08:67:57:54:f1:44:c2:cc:46:e5:42:7d:a0:b4:ae:53:11:0b:
96:92:6f:c9:7d:47:0d:4b:4a:f3:e7:2a:6f:0b:5d:31:43:0b:
c6:68:bf:57:ca:0b:ac:31:07:e1:5f:46:3c:1f:f7:71:7e:a5:
18:c4:70:9d:ab:33:a6:ae:18:3f:62:66:bd:2b:3d:d5:ad:43:
38:2e:c5:46:9f:ef:b9:02:f8:4a:a6:99:93:76:e4:96:9f:fc:
78:13:76:81:c5:df:7c:2e:d8:4c:42:7f:96:6e:5c:74:fb:b1:
83:e5:a3:6f:ba:44:f5:b7:19:12:f2:b3:9c:42:f0:05:76:9c:
52:82:60:1e:89:0a:22:7f:42:d2:85:a7:2a:de:c9:14:2d:4c:
1a:1e:bd:88:cd:4b:9f:03:1d:8f:fb:75:f2:b7:76:bb:44:8c:
e1:af:80:84
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZt/8rEshhrUfU7uoDTAeXtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTgyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjA5YmQ0ZDZhMjhjNWYxZmJlNjgzY2YyYWNkNWU4YmYyYmFlNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGYuMY+sgMtGSKic6kmwfI8e1f4R
pPg8DBelcr/VNx5BsYCnmAIPjRcwmacljUZqudZUYFw98Vulxsfo0wA7RIxwDZOp
97JKZLxERX4mToO8pUtesLl2gJuoa+KF/inL9PiOp/QQgwErbEHu9/CURwnCveCh
4ER1uug+jMCS+StgLZ3144HR7Z0PWKzWHRBUdvYuTZdOqsJ8LGknm4KG442nOeqR
kWch84sfFS9rm1EepYSzAYDfTaUKjVT+NMGMUp1LALCuB0WQgxx+8a4gJ/QWrmTG
h17LUeDNsDd9medXcwu7tEg7r45QnVeLKgwy/d/wxoELN9muPvPlSji3bwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFBsJvU1qKMXx++aDzyrNXovyuuTEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzg2YjU0
Yy1iOTgwLTQ4MTctOGRmNi1kY2U3NzgxYTJjNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvODZiNTRj
LWI5ODAtNDgxNy04ZGY2LWRjZTc3ODFhMmM1Yy8xL0d3bTlUV29veGZINzVvUFBL
czFlaV9LNjVNUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQDVm/4AwQDwQewMA8EAgACMAkDBwAgAQZ4DKww
DQYJKoZIhvcNAQELBQADggEBAFgnLyvfd72B4PCyj0kP/EtlZceEXEDWzB8MElh8
aC/ZME8zqZSSPmeUGMr0wBNOnlz4vfuKNlIHE9gYzAEwVmKxwz7rWo6S1jFVpiFW
T1UqqlMkkh9yBC06dwhnV1TxRMLMRuVCfaC0rlMRC5aSb8l9Rw1LSvPnKm8LXTFD
C8Zov1fKC6wxB+FfRjwf93F+pRjEcJ2rM6auGD9iZr0rPdWtQzguxUaf77kC+Eqm
mZN25Jaf/HgTdoHF33wu2ExCf5ZuXHT7sYPlo2+6RPW3GRLys5xC8AV2nFKCYB6J
CiJ/QtKFpyreyRQtTBoevYjNS58DHY/7dfK3drtEjOGvgIQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:38:29 2026 by rpki-client