Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
File: ghv243Q6As8royrxDfvt8a_UOqI.cer (raw, json)
Hash identifier: qILgFrwxu+R4yuWI4QlqTFAPYwkcME7XzB01ZP1ZJvA=
Subject key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F980533954DCC8FBAAC0C70329B294
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.190.145.0/24
IP: 2001:67c:684::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:80:53:39:54:dc:c8:fb:aa:c0:c7:03:29:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:d0:08:ac:4a:df:fd:67:54:0b:40:e9:f1:
01:43:09:37:e3:61:36:0d:07:b2:17:ad:21:0d:ec:
c0:90:0a:b6:9a:80:ee:10:69:28:54:5f:79:da:87:
b3:01:4a:07:51:23:3b:f3:fe:de:0f:e3:5a:28:8f:
18:cf:3d:a8:f2:93:cb:a8:b0:c7:67:c8:76:ba:3d:
07:6f:bd:c1:ab:8d:55:5f:05:44:f5:98:1e:92:91:
1d:47:23:bc:05:5d:0a:c5:07:61:bf:7a:69:1b:34:
dd:e9:a3:23:3c:40:b1:44:1e:c3:54:ac:d5:dc:73:
ab:8a:31:5f:ed:60:33:c1:af:15:af:f4:ab:c0:b6:
9f:ba:2f:8a:4a:f2:42:96:31:76:5d:e2:f6:b1:fa:
a8:4c:1b:74:07:e4:65:9b:a3:bd:89:6a:19:b7:e9:
b2:d9:21:09:08:91:b3:95:d5:ba:10:8b:a2:72:2d:
3b:78:db:5d:31:aa:39:c0:32:e3:f9:f0:9c:78:09:
f1:ae:3e:7c:ba:d1:d2:b0:b1:fd:5e:ad:7b:3f:db:
22:87:ef:5b:20:93:06:b7:f8:e9:c2:93:22:c3:a8:
c9:ef:9d:1f:e0:d5:e8:71:47:4b:4d:3b:a5:6f:f9:
33:c0:24:3b:6d:7c:ad:20:6d:8f:ca:ef:99:d2:14:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.145.0/24
IPv6:
2001:67c:684::/48
Signature Algorithm: sha256WithRSAEncryption
a8:2c:c0:76:14:67:b2:40:7a:20:51:75:0a:30:1e:ad:9f:a0:
f6:be:ca:27:e6:21:77:09:13:ea:93:9b:16:10:ac:0f:73:93:
ed:f6:3e:cc:61:e4:84:00:ac:ab:30:76:2d:58:3d:45:29:c7:
ca:21:4c:de:44:63:1e:64:6e:5c:80:31:78:16:44:d6:c7:2c:
d4:a6:ef:61:80:df:27:be:ef:14:37:98:04:67:93:46:2f:f6:
a8:b9:97:c6:68:8c:1a:42:e5:e5:04:42:de:cc:e7:93:cd:18:
c6:e6:80:af:92:ac:f0:2b:76:ac:68:32:fa:90:4d:4e:c7:49:
4a:e0:51:09:72:31:d8:f7:9a:31:f6:f5:7c:ad:e0:db:4a:0e:
87:62:5c:ce:68:38:41:e8:e5:5f:20:b6:de:c8:19:85:ab:ca:
47:93:97:55:fd:98:2a:bf:3b:52:80:f8:6f:31:11:71:2f:5f:
b8:b0:50:47:ae:ae:51:96:9e:dc:59:9e:6c:27:c7:eb:d5:fc:
b0:6e:1c:df:3a:d5:00:5f:4c:a7:22:04:52:82:35:32:7b:87:
6f:59:40:f5:12:1a:99:58:e2:af:20:15:16:6b:88:4b:eb:d0:
1c:61:18:df:04:30:05:4f:ea:b2:da:73:b7:3a:99:cc:77:94:
9b:c2:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:57 2026 by rpki-client