Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0GP3drcIFSCOTGLcc02z1KqQqow.cer
File: 0GP3drcIFSCOTGLcc02z1KqQqow.cer (raw, json)
Hash identifier: 7o/1B0KlHHSSr0hLjFFmXeo8882IJeSHSqg7p3F0HdY=
Subject key identifier: D0:63:F7:76:B7:08:15:20:8E:4C:62:DC:73:4D:B3:D4:AA:90:AA:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11C64BA37C1B8E165C79CE94D1EFE288D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/0GP3drcIFSCOTGLcc02z1KqQqow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 16:42:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 130.159.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:64:ba:37:c1:b8:e1:65:c7:9c:e9:4d:1e:fe:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 16:42:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d063f776b70815208e4c62dc734db3d4aa90aa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:ef:62:3a:a1:a7:51:26:e5:49:e2:fd:56:
55:0d:14:1b:6f:72:92:46:4c:2b:77:74:b4:8c:e4:
b8:ba:63:4b:30:4b:6c:a8:8a:d9:d5:4e:cf:d2:d6:
d9:97:04:c4:8b:d8:c6:58:13:60:6e:0d:0a:5d:ed:
f9:c2:f4:90:27:8c:b0:85:37:b8:0b:45:8a:62:c2:
18:1f:8d:d3:8c:08:89:24:ec:1c:98:04:e8:7a:99:
1a:89:c3:74:58:4e:96:9e:a4:d7:68:c4:5a:cc:e3:
d6:de:7a:5d:29:9e:49:3f:d8:e9:4d:28:0d:62:99:
da:8c:b7:3c:d4:f5:8e:21:01:91:63:88:6c:e7:48:
51:98:6a:64:fe:61:ac:97:c1:38:e8:ee:d6:33:70:
71:32:d1:57:dc:8f:5c:80:cf:38:b4:20:59:6f:57:
09:af:ae:f7:b2:a3:4d:1a:e1:87:31:10:ea:00:3e:
9e:1b:44:3d:5f:c0:33:25:2f:2f:d9:9d:ad:81:8e:
b2:e1:14:45:3c:60:bb:cf:9a:62:29:eb:3c:fa:94:
20:1d:7e:df:f6:45:de:78:b3:ad:ae:f5:b3:56:d7:
5a:22:f9:ed:2e:de:8e:af:dd:c6:db:d4:ba:a2:aa:
32:ff:83:74:2d:da:ff:b0:77:10:4c:aa:41:5b:db:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:F7:76:B7:08:15:20:8E:4C:62:DC:73:4D:B3:D4:AA:90:AA:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b92565-5f68-4f32-9799-cb4beefe35c4/1/0GP3drcIFSCOTGLcc02z1KqQqow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:ce:33:a6:16:8b:5a:5b:73:c6:cd:58:b6:cb:bf:ad:67:29:
0c:18:7f:08:9d:d1:0f:ab:f3:e0:bc:56:7b:10:f5:e0:f2:01:
f9:49:86:37:c2:cf:5b:f5:3c:9f:83:f4:74:37:b1:98:03:a3:
c2:a6:8f:ed:48:68:84:f4:95:ae:d3:ee:7a:fd:75:7b:c3:ea:
ee:db:4d:72:b6:a6:15:cf:ea:74:14:94:5c:31:b2:b3:1d:a6:
d3:83:6a:b5:b8:e7:57:a3:22:80:17:03:5a:6e:89:df:72:ca:
f4:d6:fa:3b:50:8c:a9:0c:5e:a6:b5:69:de:0c:68:de:c2:b5:
22:c8:41:ab:09:98:ab:61:66:e3:47:e1:78:7e:a5:3d:a1:0f:
63:f0:62:8a:72:98:40:8c:83:c4:00:c1:38:e0:c2:23:7e:48:
0b:fd:d1:83:66:ae:65:0f:12:9d:25:c8:ae:63:be:e0:0e:e5:
8d:15:58:6c:a2:48:f3:5a:c7:29:69:c3:2c:b1:51:d5:a0:d6:
96:e1:f0:10:03:3b:9b:98:99:60:52:0c:6b:cb:0a:05:75:e0:
b2:e1:dd:de:bc:58:d2:df:44:30:5e:cb:d8:49:ea:08:58:c5:
ed:27:b0:ba:8f:b0:26:8a:f3:4b:d3:58:e9:63:65:30:cc:f9:
d1:4d:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:56:07 2026 by rpki-client