Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer
File: sGKZHTGLDrYDrRfLOlEU7tW3fjQ.cer (raw, json)
Hash identifier: ndNX62lSqdGSqPSH5D1hNrjTL8PYl3qKWWAmdES+Bxg=
Subject key identifier: B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0E6D938AB40099CF7E782DC4E99B0AB02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Sep 2026 07:09:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213115
IP: 67.221.248.0/23
IP: 2001:67c:2474::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d9:38:ab:40:09:9c:f7:e7:82:dc:4e:99:b0:ab:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 07:09:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b062991d318b0eb603ad17cb3a5114eed5b77e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:44:04:da:94:8b:1e:72:9e:7b:cb:26:51:
20:74:f0:53:cb:fe:8f:e9:03:70:97:16:47:3f:cb:
d2:0c:38:e1:d4:c2:fc:98:87:e7:23:3e:80:cd:cb:
05:92:e7:8f:b2:4f:f1:7e:f7:a4:6c:97:ba:88:24:
3a:1f:40:83:bf:a6:e2:cf:34:7d:24:fa:38:09:08:
36:99:23:70:9f:26:f8:cc:25:d0:43:4d:e7:8d:db:
75:5a:46:62:3e:f0:9f:30:36:69:47:5d:f8:1f:4b:
09:37:b3:4d:be:b4:90:b6:c6:94:fa:9c:a5:1b:44:
4f:56:4e:a1:a4:8e:4a:87:9a:ce:13:b0:00:1e:6b:
6e:58:54:94:a3:a6:44:15:18:12:c9:3a:83:37:53:
a2:c7:b0:b1:d0:48:3c:9b:b5:77:5b:66:00:13:b9:
d0:66:ff:36:9c:b9:11:38:8d:d7:27:0b:94:5a:18:
10:d0:e4:8c:17:7f:b5:14:63:2a:f6:11:f1:97:04:
eb:55:20:8e:a8:81:19:22:0c:4a:13:8d:3f:33:a1:
7d:4d:43:11:a0:cd:6e:28:87:39:04:b2:18:5f:9f:
51:31:2f:99:a6:4e:cf:a1:01:c1:83:ef:39:67:03:
44:d2:c4:d8:ec:7b:58:62:42:45:83:f8:97:e4:3c:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:62:99:1D:31:8B:0E:B6:03:AD:17:CB:3A:51:14:EE:D5:B7:7E:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/965585-6edc-4e44-943b-967c545db810/1/sGKZHTGLDrYDrRfLOlEU7tW3fjQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.221.248.0/23
IPv6:
2001:67c:2474::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213115
Signature Algorithm: sha256WithRSAEncryption
26:ac:7e:74:26:21:f6:bf:07:07:1a:8d:ed:71:f3:98:05:ab:
eb:23:2d:67:77:35:cd:5d:8d:0e:e4:39:3a:ba:b4:2d:b9:cc:
b4:15:e4:9e:e0:86:ae:b9:90:f4:52:23:0a:e2:2c:70:d9:c9:
77:6c:0c:b8:67:9a:b3:50:88:fb:35:d4:1c:b0:ea:7c:8a:f2:
78:06:9e:f9:38:f1:e5:0d:00:af:83:fe:26:5d:3a:9e:c9:c8:
55:a5:38:25:91:2e:70:9c:d4:34:0c:8c:97:8b:40:c8:0a:50:
a3:52:d4:d8:c1:f1:d6:ce:37:73:7f:32:c0:75:d1:67:3a:8c:
f3:97:79:8a:29:71:47:50:64:86:58:88:44:23:4d:08:1e:bb:
49:69:e1:c8:69:78:78:d9:40:ac:e1:d7:b7:df:39:62:71:02:
33:0b:aa:07:e3:b4:cb:60:6a:5d:38:88:d4:e2:b3:c8:57:40:
f4:ef:15:1f:16:80:1f:0b:ea:60:94:f6:56:ab:db:70:ac:47:
4c:f3:c6:1e:e2:59:ca:cd:ed:d4:46:58:b0:0a:e8:44:0a:fc:
7a:88:d6:f1:41:42:33:48:7f:b3:6a:54:af:aa:27:b5:3a:e3:
64:9b:7b:4d:28:d6:18:6f:f6:92:21:d2:25:92:73:d7:f7:6f:
9d:5b:36:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:15:44 2026 by rpki-client