Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
File: Gu0CBP9R8olCGFT6YrPCMcNer2w.cer (raw, json)
Hash identifier: YQ7ZvvYpTKVG29y0UQ7ALMOBXF6FMMETMID7IFtKXjM=
Subject key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAB105ADB88B9C842A79F21020CAAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209897
IP: 193.149.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:b1:05:ad:b8:8b:9c:84:2a:79:f2:10:20:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:16:80:20:dd:d7:34:12:80:b9:25:75:8c:
09:be:b1:af:4c:c3:31:80:ef:7c:c3:8a:2f:df:d0:
c0:39:3f:26:f7:33:bc:87:6b:d0:a2:fb:16:50:0c:
9b:57:07:74:be:d9:65:df:d3:2e:4e:53:c8:7f:1e:
9b:a8:78:eb:05:52:e0:2f:80:bb:bd:67:3e:34:19:
dc:c4:64:50:d4:cc:94:77:b0:ed:90:74:52:c0:30:
77:89:d5:ab:f3:68:70:c0:34:08:0e:51:22:0e:72:
37:ff:3d:1e:b3:ce:2e:4d:21:a4:b4:06:39:e8:6d:
79:c7:3e:3d:40:d2:9d:ec:b4:56:f4:3a:2b:0f:57:
11:a5:6f:7e:61:f5:45:3f:ff:98:8d:c4:a7:d5:ff:
21:e4:1c:b6:10:2c:53:56:58:54:1e:ce:6b:28:ab:
7a:1d:e3:89:1b:b1:74:ac:66:3e:69:cd:be:75:69:
a4:4d:7f:69:52:20:66:ae:ed:eb:c4:69:8f:cb:ca:
36:60:d4:9a:0a:56:de:91:37:18:27:52:dc:b0:c2:
da:78:cf:72:39:50:4f:df:8c:d4:68:c0:54:5b:03:
05:0c:c6:7e:14:e9:64:7b:1a:25:39:3e:7b:2d:b8:
c1:55:55:6c:c1:af:c5:99:2a:ca:9c:d7:23:7f:8c:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209897
Signature Algorithm: sha256WithRSAEncryption
35:fa:b1:9a:de:9a:2e:8c:76:c9:f6:ba:25:37:fe:6f:a7:f5:
ec:4a:ec:e7:9b:5f:6f:42:68:0f:8f:d0:63:82:3f:c7:90:29:
1a:f1:43:38:9d:47:61:50:c6:81:af:86:c0:ad:d7:06:79:c8:
4a:10:ea:d2:ea:3a:90:df:c5:fc:21:0d:1f:3c:f5:1d:dd:cc:
e2:c8:a7:3e:20:c5:b8:99:ab:cb:9d:69:25:0e:f6:6e:ac:f0:
a1:38:37:c2:e0:65:b9:81:e3:14:b4:5b:5e:7f:87:14:d8:56:
f6:c3:c1:12:df:65:4c:b3:84:39:33:15:06:f6:c6:28:27:cf:
68:d0:7f:51:e9:bf:91:b3:b7:d7:ca:a5:39:95:5a:9a:89:ae:
2a:5f:85:62:14:7e:be:b9:36:e7:87:15:7f:9a:47:5e:72:ff:
71:b3:6f:e7:5d:15:48:e6:fd:df:6e:87:5e:bc:74:cb:8c:30:
dc:96:9f:cb:af:1c:21:95:20:6a:07:8b:61:22:1b:bf:33:76:
c6:bc:0a:d1:7b:d8:f2:9c:f0:86:ff:b0:6a:81:be:d6:50:45:
24:98:d2:0c:41:2a:f1:3a:b0:ee:43:56:33:bb:1a:13:68:80:
e9:0e:35:ed:f8:8f:b8:a7:b4:14:b8:ca:47:2f:12:69:08:56:
7c:14:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:54 2026 by rpki-client