Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
File: gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer (raw, json)
Hash identifier: E/eFCt9GJwqxNGzi4NC2XNgxKTmILroo/DAKyEBr9eI=
Subject key identifier: 81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F74CDB5492DF2D5CF48C41EF07E253B04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 18 Jul 2026 10:37:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 94.127.16.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:cd:b5:49:2d:f2:d5:cf:48:c4:1e:f0:7e:25:3b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 10:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:61:a3:d4:49:ab:87:0a:a1:fa:dc:6f:d7:
9e:2d:dd:c0:f6:97:19:a7:b3:bc:3a:ca:32:b8:a5:
e5:e9:97:4f:cf:79:72:b7:87:e6:3b:7b:49:8a:59:
5b:65:0b:ba:88:ad:b5:c2:ef:ea:a8:56:77:ec:6c:
e6:c9:2b:a1:fd:e5:09:75:58:18:b8:68:c4:f1:ee:
e4:ca:a4:1f:95:44:ac:bc:63:09:7b:b9:c8:b5:66:
97:f9:c9:ec:bc:6b:a5:fb:0a:77:89:7e:4f:69:b1:
f0:ab:d1:31:e3:86:84:96:a0:7d:da:bf:fb:26:6b:
2b:ad:e5:2e:97:ac:51:08:fe:a5:69:73:ba:65:25:
c0:3f:81:19:97:52:50:0d:4c:65:30:b8:1f:61:e6:
42:94:52:4e:6a:b9:6c:d0:7c:6d:c1:6a:86:55:fc:
0e:fe:83:ff:87:51:d0:41:2b:b1:8a:8d:79:9a:4a:
04:12:e5:1a:0e:6a:f1:83:e7:85:a2:87:b6:00:c0:
70:58:81:15:b5:30:70:65:40:e8:3e:f4:07:fe:9f:
08:ca:25:79:b3:79:f2:7e:42:15:59:29:18:75:bc:
20:fa:4d:67:d3:e6:0d:d2:16:16:db:e6:3d:b2:bc:
73:82:21:fd:61:aa:6c:e7:2d:e3:88:08:58:d8:7a:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:52:75:da:98:ce:f5:0b:dc:44:0d:8c:1b:9d:f9:a9:d6:f8:
95:a2:11:c8:c3:41:e4:6f:64:79:5c:fd:89:28:66:97:4f:21:
1f:4c:ff:b1:d2:1f:08:1a:f4:5c:8e:75:e2:69:94:8e:5c:f4:
d8:2d:82:9d:3d:65:60:55:01:48:ec:ed:c1:be:c9:55:97:17:
e2:9f:a2:93:56:b6:a8:5e:3f:34:b5:a6:a3:eb:81:08:1f:f1:
6c:9b:b9:01:6d:7d:17:9b:2d:e4:be:09:85:db:99:45:41:91:
dc:91:bb:f1:59:88:6e:4b:eb:3d:3c:68:26:6a:2c:96:3c:59:
bb:7c:5c:f1:84:ae:3a:49:0c:ee:bb:0b:44:7b:e8:9f:b5:73:
1f:ca:60:93:b9:44:fd:ce:db:7b:0a:b4:c0:d1:54:61:22:9c:
21:48:18:fe:44:b9:1e:8a:99:4d:da:2d:a2:bd:2b:a3:e3:bc:
d8:2a:47:22:38:07:c4:c9:88:7a:c3:74:9b:78:4f:fa:5a:b4:
dd:56:64:ce:1a:ae:da:de:a5:ea:d9:f9:1b:99:e6:b9:d7:61:
2d:9c:21:95:e4:7c:a1:47:33:9d:32:50:b5:de:c3:1d:70:47:
fa:b1:1d:6a:c7:36:7c:f7:93:58:55:b4:dd:7c:47:5f:e7:bb:
c8:15:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:42 2026 by rpki-client