Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
File: GfRzuqwkYD6teVw6ot6t-G01H8I.cer (raw, json)
Hash identifier: Xq1DbwwaLKuAOQnKPK5XmXV/4i2q7IOcOK1UGKTLVS4=
Subject key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F6B542D0E6F54276B096CE8896F9A22D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 16 Jul 2026 14:28:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219391
IP: 63.251.202.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:54:2d:0e:6f:54:27:6b:09:6c:e8:89:6f:9a:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 14:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:40:5e:a0:88:4d:0c:53:0b:22:f8:38:05:
a2:3b:1b:8b:1e:0a:9c:2b:ac:4f:f2:5d:ff:80:2e:
09:3e:ca:ad:53:30:9d:d2:1d:fe:83:b9:d8:03:ed:
6e:ba:98:92:e2:a6:76:e1:60:94:dc:a4:c8:1c:65:
a9:58:1e:c2:23:3b:d1:cf:2e:e7:f7:22:77:de:4b:
56:39:6b:47:05:0a:29:7f:85:0b:74:56:c6:bf:9e:
b3:3c:5c:e8:5f:88:ca:9b:75:2f:20:fc:ec:4b:22:
ab:7a:48:67:dd:2f:06:46:90:be:af:08:85:47:96:
ca:44:2a:f2:38:c5:b6:c5:24:30:48:29:6f:88:d0:
4c:03:ba:10:05:2f:bd:7e:0e:9c:07:c4:7d:6f:8e:
3d:cc:78:29:3a:32:30:ac:11:2e:8f:f9:88:42:50:
99:b6:b0:ab:6b:6d:e8:3c:62:79:48:d0:e3:25:c0:
d5:7d:bc:41:73:6b:04:1e:75:51:93:2a:37:06:04:
ea:a5:5d:26:6d:78:24:a0:c8:25:42:ff:f8:84:0f:
be:0a:c5:7d:8a:ab:4f:7c:40:1a:da:0a:37:ed:6a:
d8:36:99:91:89:9e:86:c5:38:c3:61:05:7e:2e:c3:
3d:32:8e:46:1e:b1:2a:19:c6:d3:59:a1:0e:12:62:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.251.202.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219391
Signature Algorithm: sha256WithRSAEncryption
53:ce:87:12:b9:ac:6c:48:8d:51:b3:11:a5:8b:ca:d0:36:e9:
5a:a4:8a:a9:48:64:92:ad:e6:05:54:1e:23:bc:e5:41:60:e6:
e4:ac:84:94:f6:de:32:1c:04:98:45:63:4e:82:77:bb:95:38:
04:9a:d5:9f:6d:9e:6d:c8:db:4a:a8:fc:33:a0:bf:16:4f:b1:
3d:9f:c6:08:a2:f6:d9:dd:60:a2:2a:21:5d:9a:0d:93:1f:5c:
82:cc:f5:95:c8:27:ad:2d:f8:e3:ad:9b:ed:ef:4f:a6:e0:d1:
aa:f7:ba:a7:ca:45:24:fd:88:a5:3a:61:93:8e:df:6e:82:a1:
93:68:86:49:58:21:2f:f3:c0:9b:d1:a4:63:fa:6b:26:7f:b0:
92:4d:62:73:55:10:88:c8:0d:fb:8a:80:50:cb:54:08:ae:a5:
b8:a7:0a:42:3f:47:9e:b0:da:e8:9d:40:ba:60:ff:6f:be:47:
21:f3:86:b8:65:c5:e2:6f:79:eb:81:9e:3b:e5:ba:20:27:dd:
e1:c6:78:67:1a:b7:fb:66:45:53:b6:ed:89:a3:53:d6:43:0d:
86:4a:28:a6:28:13:57:5f:79:e0:06:18:b3:e8:85:57:89:96:
21:0c:5e:64:2d:9a:57:aa:74:68:fc:11:57:6d:57:5c:9c:53:
d0:dc:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:30:51 2026 by rpki-client