Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/gD9h6-VXBZ20TUlXBayGRTOZVJo.cer
File: gD9h6-VXBZ20TUlXBayGRTOZVJo.cer (raw, json)
Hash identifier: 6dMczRtwUl+wnEcLtrlk0uQu8Akl48qsnSl1y0uTjlc=
Subject key identifier: 80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C8EE3F5CF9C9D648BD77CB3BA161A667
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 11:44:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212220
IP: 195.190.19.0/24
IP: 2a0f:3300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ee:3f:5c:f9:c9:d6:48:bd:77:cb:3b:a1:61:a6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 11:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=803f61ebe557059db44d495705ac86453399549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:ef:2d:c3:cb:00:52:08:fb:c1:a0:26:6f:
dd:ea:e8:e9:8b:67:7a:6b:22:93:2d:5e:e2:1d:76:
c1:cb:d6:43:13:08:c4:da:d8:ac:80:64:c9:05:29:
ad:62:14:ae:27:7f:8f:f6:b7:ee:b9:c1:9c:c3:b1:
ba:6c:12:95:68:d3:4b:53:19:94:9b:81:79:2a:3c:
ef:54:b8:0d:9e:d5:88:ae:e6:bf:ae:97:b1:47:7f:
9c:c5:bb:44:d3:e2:d7:84:d5:be:fc:ee:13:16:47:
2a:52:44:ff:04:66:f7:cf:41:ae:cf:84:95:b3:59:
f6:23:8c:e7:a9:fa:a9:03:11:2b:44:01:49:72:19:
47:33:07:a1:a8:0b:f8:e6:94:3a:49:95:c8:4e:bc:
c6:4d:a1:fd:ee:4e:d4:af:7a:6c:be:5f:0c:c4:00:
96:50:fb:ed:1a:32:b6:d8:9b:5b:ff:5e:01:c7:40:
fc:11:3c:25:b7:52:ac:78:4a:65:2c:71:95:1e:db:
da:05:63:16:73:ef:41:35:02:1d:52:62:ec:ae:26:
80:13:18:64:a6:b4:36:b3:3a:83:0c:55:21:17:a0:
28:8c:96:12:2a:ce:e0:a9:19:3b:3a:a6:a0:af:d7:
0c:00:4a:0f:40:c6:7a:4e:82:67:4f:62:15:2c:fd:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:61:EB:E5:57:05:9D:B4:4D:49:57:05:AC:86:45:33:99:54:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/984b5f-effc-45c5-b1eb-703e7603d9f9/1/gD9h6-VXBZ20TUlXBayGRTOZVJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.19.0/24
IPv6:
2a0f:3300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212220
Signature Algorithm: sha256WithRSAEncryption
34:ca:8b:ae:60:61:56:92:e8:b2:c6:ba:9d:a2:ae:cd:e0:62:
5e:3e:e6:4c:79:01:39:90:e1:c3:72:09:3e:e8:db:5e:9f:e2:
47:27:e0:6e:e0:6f:01:48:af:69:92:ad:03:1b:45:0b:8d:b2:
5e:30:93:c9:c0:b3:04:c4:5b:f3:64:f7:b3:ff:d9:ab:9d:61:
81:2e:57:af:fb:39:49:85:f9:a0:39:ef:8c:a7:c8:6e:df:b0:
a2:a7:5a:5f:df:cb:2e:ea:2f:17:3d:84:ca:3f:c3:73:82:b5:
1f:ff:32:1c:23:fd:80:24:28:2e:25:f8:62:e3:c9:ff:9b:65:
00:e5:00:b8:da:76:1f:dd:08:45:90:c3:96:8f:24:e6:21:08:
9e:67:88:7a:f4:b4:f5:32:f0:89:fb:e9:7c:20:38:d8:d6:00:
7a:7a:92:ed:f0:f7:a7:b6:d6:0a:ba:5b:6f:42:7e:8f:c9:04:
0d:73:2e:03:06:b6:fc:7f:0b:c7:46:1e:d8:86:7f:49:9f:3c:
24:4b:cc:f3:f7:08:fb:0b:ff:36:0e:0b:78:b6:8f:e4:5d:c2:
74:5f:38:78:5c:66:42:52:df:ef:1b:e6:d2:36:6d:fd:fb:ad:
22:a0:83:d6:4d:2a:8b:b0:e9:5e:f5:00:ad:5b:54:45:5d:49:
0c:ca:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:39:39 2026 by rpki-client