Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
File: GQoJUehsDePU6zKmwyaJECtyel8.cer (raw, json)
Hash identifier: 9OzT9bNCq+sUacoT36NARHzZZe8q/aHFBlMPm2qe/Vc=
Subject key identifier: 19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDA047DCE31362038D2F0F23A69616C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:17:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209073
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:a0:47:dc:e3:13:62:03:8d:2f:0f:23:a6:96:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:f4:99:30:88:21:a0:bc:92:21:c1:98:ab:
9c:10:15:c1:38:ff:64:f8:4e:ea:52:1a:81:27:70:
41:17:d0:be:e0:32:4d:9d:b6:cb:d0:9a:ab:2f:67:
9d:bb:82:5c:02:33:77:7c:65:32:a8:03:c4:9c:d5:
22:bf:6b:3c:18:e8:56:83:70:11:97:15:2a:90:09:
e3:0d:ce:35:10:55:5e:65:7c:2f:a9:d8:50:10:fe:
12:3e:2e:2d:3b:11:b9:90:e7:16:c5:02:73:46:02:
74:5f:09:26:79:7e:cb:1c:d7:d4:c8:0f:cb:01:a2:
ba:36:c9:d3:1d:39:cf:75:e8:8b:57:c0:d8:41:da:
c6:a9:93:78:a0:10:49:e5:23:a8:45:e2:c0:db:58:
64:e2:fc:49:9a:6c:9f:02:d7:7e:6a:21:88:5a:9b:
f0:da:d5:90:36:b6:5a:ff:68:a8:4b:0f:39:93:f5:
80:65:08:50:cf:16:03:41:09:fc:65:28:32:be:63:
34:03:01:59:91:b0:3c:7f:44:f7:ee:6c:99:41:54:
dc:b9:7c:d0:17:a6:ac:79:e0:69:66:8d:d6:1c:7b:
f7:be:65:22:c1:01:b2:5b:ec:c7:28:5b:c6:31:84:
0d:67:34:18:33:94:b0:88:3e:f4:49:2a:7c:3d:94:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209073
Signature Algorithm: sha256WithRSAEncryption
39:17:10:75:fb:56:c9:7b:7d:d8:66:ee:fd:69:e9:4f:97:ea:
85:f7:81:08:cc:b3:c8:7b:b1:5b:67:53:94:05:0c:69:f1:4e:
56:26:42:40:45:8a:fd:43:88:d7:0f:53:87:c6:71:34:37:cb:
c9:87:4b:75:e5:26:7e:6c:f8:88:88:81:7e:62:6e:48:53:07:
11:ef:cf:d6:ca:9e:f5:47:9c:29:81:7d:13:34:be:65:73:04:
10:71:b6:9f:8c:d9:3d:66:75:09:c5:6e:eb:46:2f:5d:c4:6a:
3e:28:7b:4f:6d:af:4d:ab:1b:00:a6:7a:b3:54:1b:1e:92:06:
52:f1:f3:6f:fa:48:de:0f:b4:ac:bf:c5:b1:bd:09:39:2e:c2:
6b:c0:32:fc:45:1c:ca:f3:ec:47:f6:5a:31:35:8f:cb:e7:c2:
06:08:0d:00:ce:3d:d2:4a:f6:3e:cd:cd:cd:a2:d1:b7:70:ad:
3f:0d:00:ff:ea:20:fa:8f:50:63:dd:d2:40:d2:0a:bf:a3:9a:
31:ab:ae:42:88:47:68:60:5c:b9:ae:b4:ab:e4:29:0f:db:71:
f2:ac:f8:3c:7b:6c:87:19:a3:9f:49:ed:29:a8:cb:b9:4f:4a:
da:d2:0a:d2:dd:01:4b:cf:97:75:ef:02:2a:7c:3e:67:20:9e:
c1:38:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:58:58 2025 by rpki-client