Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer (raw, json)
Hash identifier: 0cr/jSFxl+YmfZZRA1wvz9w6JdkBd259uNPpC91IPcY=
Subject key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E44D432A7897E253C1CE6F0264AA5ADB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 10:00:17 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 212.42.128.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:d4:32:a7:89:7e:25:3c:1c:e6:f0:26:4a:a5:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 10:00:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:10:d4:dd:f5:d0:e1:bc:07:b5:b9:9a:00:
67:39:ac:32:a5:ea:7a:f1:2a:b8:67:96:cb:b6:ef:
60:6e:43:e3:84:5c:a1:d5:c2:09:12:5e:c7:95:bf:
da:ed:3f:a0:1b:9e:26:c9:6e:8f:5a:3b:df:bd:ca:
50:a2:0b:d8:fe:79:d7:59:5d:ad:cd:2d:b8:79:20:
9c:f6:6a:38:7b:95:4d:d7:8b:84:37:60:74:b4:1b:
72:3a:4d:c5:2d:a2:28:a6:18:1d:44:ad:3d:48:d2:
46:2c:a4:b6:28:31:47:23:77:ec:39:7e:71:71:6d:
c8:fc:89:44:8d:8f:92:63:03:dd:53:70:da:d1:02:
51:ba:34:4f:78:3a:5a:f4:7d:69:4b:b6:89:b2:e2:
6f:1b:a5:6a:3c:dc:79:29:97:5a:c0:a0:c8:91:5b:
27:43:5b:14:bc:2d:c3:be:46:cb:70:1e:d3:f5:0e:
e7:a1:08:c2:03:ee:ae:2b:65:08:bf:7d:6f:aa:f4:
ff:df:84:78:1a:16:04:73:ec:34:7c:01:0b:1d:a0:
30:c5:63:f1:dd:bf:52:86:b6:11:31:22:67:32:f3:
0a:db:14:17:93:30:09:4c:08:3c:4e:db:31:b0:3c:
42:e7:86:04:b9:41:66:9d:01:89:c0:ae:f5:46:be:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:6a:ab:2a:f5:5c:d2:9b:5f:d0:e1:9b:95:69:18:b2:01:83:
71:c3:39:2d:87:ba:3a:f4:7c:7b:78:f7:ce:62:2b:6d:7b:4b:
c9:8a:d7:35:5d:52:c0:c4:8b:2b:df:80:8b:78:44:da:96:19:
8a:90:21:de:bc:4c:25:81:40:d5:51:74:fc:8f:a0:51:c9:5c:
bb:ab:44:a2:72:78:46:d5:de:25:74:eb:c1:d6:50:36:f4:3a:
f6:92:b2:c7:40:b8:70:d4:79:09:0a:86:2a:77:1d:18:c9:35:
81:33:56:ee:17:f5:c4:2d:70:53:2a:fc:c2:6c:0b:34:45:8a:
ab:51:ad:4e:cb:9d:67:78:5e:7d:e4:45:89:2e:4e:d5:19:bd:
ed:16:ae:b3:7e:44:1e:91:ec:59:b2:3f:e3:73:8d:97:8d:b3:
56:00:37:64:cf:6b:aa:17:67:91:17:ce:ba:42:00:65:29:ce:
9a:89:7b:c0:ce:f7:34:69:81:db:42:17:59:39:2d:e5:71:66:
56:e1:46:a5:b0:ae:cf:be:11:3e:9f:db:a7:c0:6f:a0:04:3d:
65:60:c4:d0:12:7f:a7:c8:93:c6:cd:98:4d:2f:13:ef:47:dc:
b9:41:40:2c:0c:bd:55:e2:08:56:3e:4e:40:5f:e5:5b:c9:1e:
7b:41:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:55:27 2026 by rpki-client