Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
File: gESlWNFd_DudSn4GZfhtJXzQKgA.cer (raw, json)
Hash identifier: hxY+Tl3IYKz1Z3uykZcl6XjL9jEQ6fswXN3bbLdWgtg=
Subject key identifier: 80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD61EB2F88B754CEE45517F021882CF8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 08:09:23 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8612
IP: 193.207.24.0 -- 193.207.255.255
IP: 195.130.224.0/19
IP: 212.123.64.0/19
IP: 213.205.0.0/18
IP: 2a00:c680::/32
IP: 2a01:7d0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:1e:b2:f8:8b:75:4c:ee:45:51:7f:02:18:82:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 08:09:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:b4:cb:29:29:04:a0:c1:f1:aa:86:62:88:
2c:23:94:45:1b:25:c5:71:93:09:62:b5:7e:38:58:
8e:0d:5b:b9:b1:1c:33:09:52:db:20:8a:03:a6:2a:
58:d9:0f:03:13:2a:b7:3e:b1:45:e7:75:42:08:3d:
4f:76:d7:6d:25:4c:2b:ca:6b:ee:2c:2b:9e:20:75:
61:9b:45:7d:03:2d:dc:4a:f0:a6:98:5c:e5:19:4f:
ad:de:f8:b3:ec:5f:2b:a5:45:82:63:4c:b2:56:05:
05:06:7b:8a:ca:aa:03:5f:3e:af:de:4f:9c:64:4d:
76:06:99:64:83:ea:de:8a:7e:f1:b0:dc:1b:4d:a9:
b8:7f:4d:a1:56:b4:41:d0:00:7a:d2:72:7e:7b:03:
d5:95:05:44:99:bf:08:a3:a8:2e:6e:16:19:e2:fa:
bf:5c:6c:d0:d7:e4:1f:d1:4e:28:88:93:41:0d:74:
dd:90:8e:b6:5f:4b:6c:b6:3f:9f:e2:6a:df:b4:95:
c8:93:a5:95:36:21:1e:3f:14:c4:43:f2:83:51:68:
68:d1:8c:85:08:21:14:4b:20:d5:32:90:66:02:2b:
e9:d4:e2:42:ef:c3:e4:70:49:14:40:97:f1:64:9c:
16:1e:13:26:c1:81:b3:f2:75:36:75:48:47:07:dd:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.24.0-193.207.255.255
195.130.224.0/19
212.123.64.0/19
213.205.0.0/18
IPv6:
2a00:c680::/32
2a01:7d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8612
Signature Algorithm: sha256WithRSAEncryption
0a:b5:c5:bf:ee:a7:5d:ee:fe:97:e2:dd:be:69:4e:82:0b:ea:
26:1d:14:91:cc:6d:f2:6a:a4:19:eb:66:71:a7:7d:3c:39:c9:
a1:2e:a6:ef:d8:15:3e:48:8b:75:30:c1:3c:a8:cc:0d:22:35:
cc:47:79:60:58:33:75:63:d6:00:90:52:af:09:8d:e9:fa:eb:
3e:8e:a5:94:2e:38:79:53:1d:e5:78:0e:06:29:13:3b:19:db:
68:30:77:a8:59:95:e7:7b:d8:72:23:7d:e5:66:fa:f4:d2:7f:
42:20:13:76:fd:03:1e:a9:bc:8f:bc:6b:0d:65:84:e5:a0:36:
32:fc:1f:7d:ee:45:36:d9:b3:31:02:80:01:98:bd:26:b8:e2:
d0:8f:32:d1:83:86:55:a9:5f:e8:67:f0:55:42:5c:dc:12:b7:
ad:b0:06:2b:a6:62:d9:d3:da:28:3a:9a:55:07:af:31:65:5a:
00:3d:6b:52:d5:a3:3c:0c:a4:ce:d0:58:09:f2:ae:31:44:25:
3e:d6:a9:d6:1d:40:69:65:fa:f1:b0:d5:ef:a4:ad:fd:e2:1f:
e4:08:c8:6b:04:3e:7f:f5:dc:2c:48:ca:5b:ce:b5:ee:99:9a:
bf:6c:a6:c6:12:42:2c:46:d7:56:58:2b:24:1b:3a:99:5a:c3:
58:21:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:29 2026 by rpki-client