Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gyaRLzqceyB_u-IP9DwNRsxYbC4.cer
File: gyaRLzqceyB_u-IP9DwNRsxYbC4.cer (raw, json)
Hash identifier: oefzNRyUDzfhxCC1IFLU1e1b3lpNra5TUCtL1vAZDzY=
Subject key identifier: 83:26:91:2F:3A:9C:7B:20:7F:BB:E2:0F:F4:3C:0D:46:CC:58:6C:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FC7366D4DD7F3AA2D399613758E2ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.34.16.0/22
IP: 2a04:5e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fc:73:66:d4:dd:7f:3a:a2:d3:99:61:37:58:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8326912f3a9c7b207fbbe20ff43c0d46cc586c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:72:aa:e6:0a:96:c7:aa:49:25:40:8c:ae:
1c:c8:05:78:71:55:63:96:f3:22:aa:53:96:07:05:
e9:48:3d:23:f7:f9:1e:8c:15:a6:81:30:94:f4:81:
07:61:68:90:6c:69:29:24:86:2f:e7:4f:55:72:bd:
03:56:a2:47:8c:69:01:c1:40:10:46:2e:68:01:d5:
b3:86:00:ab:cd:8b:33:56:bd:6b:db:0d:3f:a8:d4:
a0:86:5a:32:0e:47:39:c3:33:2b:38:c4:e5:17:7e:
b2:9f:68:08:44:d1:22:ec:f8:22:86:a2:9d:69:c6:
5a:99:b6:69:df:fb:83:d4:73:3f:7f:e9:d7:d8:f7:
b6:4f:7d:af:a4:81:c5:0a:47:e6:81:fc:87:d4:05:
db:fd:f7:74:2b:ff:d5:8a:c7:4f:5b:1c:e8:32:0e:
27:7e:4e:ea:04:ac:f8:92:d9:4e:4b:4a:49:b5:f9:
51:7f:97:c0:e3:66:96:6c:12:4c:96:09:83:3a:14:
30:a3:af:9a:d8:b2:7c:25:76:b9:08:20:14:9f:f0:
31:d6:1a:f7:62:40:d7:fd:c7:5d:bc:3b:6e:14:8b:
fc:1f:11:02:02:14:18:8a:a5:46:5f:98:6a:41:ac:
93:17:c7:35:7d:9e:81:fe:5a:c9:d2:ab:f7:f6:1c:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:91:2F:3A:9C:7B:20:7F:BB:E2:0F:F4:3C:0D:46:CC:58:6C:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/gyaRLzqceyB_u-IP9DwNRsxYbC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.16.0/22
IPv6:
2a04:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
85:37:83:8c:03:61:f2:6e:1f:aa:e3:3b:1b:47:9d:1a:1f:db:
60:62:5b:4b:f7:22:f9:1c:a6:28:c2:28:93:8f:76:28:a3:97:
89:ed:8d:de:0d:13:cc:b0:31:d2:e2:6e:11:b7:5e:3f:5a:26:
54:0b:f1:69:20:85:c7:3d:79:1d:80:53:64:71:22:0f:b7:51:
4d:58:98:49:77:94:a1:86:09:4a:76:94:cb:89:e0:bb:9e:83:
ab:cd:db:6b:54:dd:67:b0:9c:34:ae:6b:82:45:bf:1e:cf:e5:
26:da:c3:73:de:4e:21:32:33:45:5c:db:72:d9:3d:45:e2:eb:
f3:07:c4:e1:89:f8:34:bf:e3:8c:2e:df:f5:5b:6f:7b:2a:f3:
c7:29:27:e4:a5:38:4a:bf:30:0a:ea:ce:55:ef:75:a2:f8:c6:
93:58:af:ac:b0:d6:d9:ef:2a:74:8d:3c:f2:61:c6:37:31:4e:
fc:c5:49:2e:e9:60:b2:0d:49:7c:7c:df:a5:92:26:ff:9a:f5:
5a:bb:2a:3f:7c:8d:4d:5d:91:c7:99:5e:01:c0:56:43:77:43:
97:58:44:c3:99:d6:69:ae:2e:7d:e1:06:fc:b1:18:7c:5d:bd:
4c:69:38:a8:c3:25:b3:67:49:ec:b7:4d:34:c0:04:59:29:7c:
26:fd:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:44 2026 by rpki-client