Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/GBmWwtrvXWtPyGXq30KoFD-aZFU.cer
File: GBmWwtrvXWtPyGXq30KoFD-aZFU.cer (raw, json)
Hash identifier: KsdtjgTWUtz6lqOBsRCI1Ele5i8cdtesjlWzL4b2ovI=
Subject key identifier: 18:19:96:C2:DA:EF:5D:6B:4F:C8:65:EA:DF:42:A8:14:3F:9A:64:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F9560F085DB335F97BD1D7D3A149ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/GBmWwtrvXWtPyGXq30KoFD-aZFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:21 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210627
IP: 185.188.40.0/24
IP: 2a11:2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:56:0f:08:5d:b3:35:f9:7b:d1:d7:d3:a1:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=181996c2daef5d6b4fc865eadf42a8143f9a6455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:27:c2:b1:c9:c3:9d:cf:c0:b8:a4:f9:f6:
de:7a:72:e5:4e:4f:ea:4b:48:11:3e:52:0b:4a:52:
2f:e2:9b:61:fe:bb:c6:80:0b:87:cc:48:59:af:c5:
0d:2d:ee:f3:3f:19:f2:31:9a:4f:71:1c:b0:c2:e4:
9b:19:c1:d6:a3:db:da:5d:e1:69:28:eb:a1:3b:b2:
87:4a:5e:3b:9a:58:26:f7:92:4b:cd:12:30:10:86:
02:65:2a:94:75:74:74:5d:b1:72:39:e5:93:fc:30:
f7:1f:aa:2d:63:d6:4d:5f:51:11:ce:cf:da:14:98:
71:51:57:5e:51:c4:0b:d9:1b:a0:22:bd:82:96:d1:
a5:10:a8:18:5e:2f:ee:51:8f:82:7d:13:16:1f:be:
87:13:f1:dc:85:f0:50:f8:02:32:a8:b2:dc:68:ba:
79:91:90:45:1b:53:07:71:9a:fc:98:c5:0f:ac:c7:
40:b4:04:33:d0:55:3a:12:ea:59:c1:21:93:b6:d5:
eb:0b:f1:5c:22:05:53:51:6b:56:1c:2a:c7:bc:db:
22:b8:8d:18:f1:b7:a5:46:46:48:c5:fb:84:be:c4:
dd:29:71:ae:85:06:9f:e4:55:e8:15:3d:94:c2:24:
9d:aa:79:fd:78:6e:d1:59:d1:ed:df:02:8a:37:9f:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:96:C2:DA:EF:5D:6B:4F:C8:65:EA:DF:42:A8:14:3F:9A:64:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/GBmWwtrvXWtPyGXq30KoFD-aZFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.40.0/24
IPv6:
2a11:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210627
Signature Algorithm: sha256WithRSAEncryption
15:c7:6e:9f:50:79:50:0d:15:ba:e0:f5:89:4a:48:ba:9a:db:
a6:f5:5d:af:56:ef:16:ab:f1:6f:0b:ff:02:ea:b7:e5:d4:2e:
76:9e:86:a4:a5:51:03:29:83:67:6c:a3:48:e5:89:cd:c0:61:
5e:5f:19:d1:fe:b9:6b:6a:a3:ce:05:2f:9a:e7:1f:85:f9:9f:
ad:b9:05:fc:58:12:3a:01:25:b2:8d:13:2f:8f:00:0e:c9:c7:
82:a2:50:ef:77:bb:cd:51:9a:31:1e:65:ef:31:57:e1:5e:e7:
5c:93:08:31:6a:6a:a7:47:3c:30:7d:58:b7:cf:91:d2:fe:77:
c4:01:12:a2:e7:9a:59:6d:22:03:10:9d:be:db:1c:78:d7:82:
9a:75:ae:78:46:0f:bc:e3:43:1c:a6:92:87:d4:92:ed:93:a0:
42:38:5d:6f:d4:29:eb:f9:38:4e:79:57:fd:0b:90:d0:f6:5a:
46:47:08:4e:c7:7b:65:7f:00:de:65:d3:16:ef:92:c9:b1:cc:
28:36:95:08:39:6f:8f:49:3d:d2:ed:df:09:6c:0f:26:86:67:
db:02:f3:4f:8f:36:c8:72:e6:08:03:b7:2c:ed:11:14:8e:03:
14:d3:5f:32:e4:bd:41:3c:bb:d8:8f:60:5b:f6:b6:62:92:16:
a2:b7:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:26:49 2026 by rpki-client