Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
File: GuwRjCU363UtdoXMGf0-xDD1Bfw.cer (raw, json)
Hash identifier: leAxQoZnCkmciYuNESuc+garGlGLK7Nw5QAJh5fv3IE=
Subject key identifier: 1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019CE378D46AC121D4D2DC9AA9F9B64DC2FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Mar 2026 19:14:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200394
IP: 2001:678:11f0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:78:d4:6a:c1:21:d4:d2:dc:9a:a9:f9:b6:4d:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 19:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:8b:15:7b:0c:49:e8:7b:72:de:72:4c:87:
2a:aa:db:da:2e:78:e6:0d:64:bf:f9:7b:b6:79:38:
0a:0a:e5:8a:a5:b8:7d:55:67:14:51:cd:7b:ea:4e:
fb:62:76:4f:63:f7:ad:a5:cc:29:88:f5:09:f2:52:
85:fd:47:45:25:d3:3e:b1:b3:d4:53:cb:da:d9:49:
c7:e3:f7:c1:a2:de:2a:28:e9:1e:e0:de:14:01:3e:
6f:97:84:1b:f4:ee:c5:3b:a3:b5:86:ff:e6:17:e3:
c4:c1:51:c1:5f:68:95:b8:d2:3c:00:c1:81:a7:16:
8d:89:2b:fb:38:1d:d5:c6:b6:17:b1:3e:f1:5b:ce:
80:52:16:c5:dd:d8:ec:fa:5f:d6:7f:d7:67:3b:f1:
32:24:43:80:5a:11:76:2b:ff:3c:da:46:c0:cb:72:
93:8b:7d:8c:d9:25:a9:85:5a:4b:b8:a1:af:96:19:
b6:8c:9e:9b:5b:63:25:b4:21:c6:f6:e1:6b:90:1c:
6b:e5:f4:55:67:07:d2:a1:97:f3:eb:d1:b0:dc:47:
2a:9e:7a:c4:0c:2a:69:91:20:fb:8b:df:41:34:57:
95:77:b5:2c:e3:25:39:2c:0a:b3:6c:76:bb:ea:4b:
f4:77:bf:90:5d:34:1c:90:92:66:1e:56:a1:ea:dd:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11f0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200394
Signature Algorithm: sha256WithRSAEncryption
9e:9d:c0:9e:6f:8f:4b:49:db:eb:f5:30:97:0f:cc:55:8e:cd:
f4:4e:83:ce:ca:9d:43:d9:90:ed:0a:b8:3a:17:b5:2b:24:ca:
fc:9e:d9:7f:c8:0b:ae:62:11:be:99:98:7b:46:ad:9c:f3:8a:
8f:d1:29:14:3b:a3:82:ac:10:27:c5:e0:b3:e4:10:73:95:4e:
cb:01:ee:d1:6a:c8:df:73:21:3d:8c:73:6f:7c:4a:74:cb:05:
4d:33:b6:16:6b:2a:a4:09:85:1a:28:23:62:ce:94:af:c4:7f:
a2:e3:af:8b:b2:6d:9f:fc:54:d4:b1:10:81:a3:13:a3:e3:bd:
bc:1a:07:49:c5:12:99:5e:48:a5:b2:fe:01:34:fb:81:4b:56:
db:f0:00:bd:56:5f:e8:04:f2:95:3a:e0:9d:b8:bb:93:5b:28:
db:6c:ff:b4:b6:e0:ca:2f:37:78:99:03:cc:08:85:51:37:d5:
72:44:0a:b0:29:e7:ee:23:30:65:a0:26:8e:34:b4:aa:9c:7c:
2d:f7:b6:5f:c3:50:a2:2a:06:b3:49:02:13:be:dd:39:82:5b:
49:43:c9:30:1a:32:0c:7c:a3:39:f1:56:2d:49:d4:7d:24:0c:
bd:b8:b1:4d:ac:23:cc:c7:cd:63:0f:e4:97:0e:38:d6:b9:a7:
70:2d:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:24:08 2026 by rpki-client