Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
File: gP-4grVdAkWUCj414a3dU6esf-Y.cer (raw, json)
Hash identifier: Jp1WiyS25vFdNmVXxxABUrdaEzVxUtSc/YTE0RKIm6U=
Subject key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E6D19451794248EC8E3A55852B7D5993F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 May 2026 05:40:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.127.104.0/22
IP: 2a03:9720::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:19:45:17:94:24:8e:c8:e3:a5:58:52:b7:d5:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 05:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:ea:76:ac:43:d5:aa:8b:0d:71:80:f1:8c:
3b:1b:09:a2:aa:c0:70:ce:2a:1b:22:85:16:00:28:
68:df:eb:00:9f:29:5a:16:b5:ca:f2:43:e2:67:e1:
3d:3d:da:5c:eb:71:23:2b:16:e2:e0:50:23:75:2f:
ad:67:ee:a3:24:27:8f:06:43:e1:88:56:31:63:ce:
39:fc:55:e0:ed:36:59:4a:9f:92:7e:d9:10:97:ca:
27:97:2c:f6:18:13:a3:71:52:d0:fd:c5:c8:24:57:
79:42:de:49:7c:de:ce:82:57:02:f4:6c:39:fd:3b:
f6:05:c5:39:51:15:3c:4b:d7:cc:ce:6e:8d:ac:ba:
40:f4:77:54:57:05:ed:fc:56:06:b2:63:78:1a:9e:
e5:99:a3:46:28:77:52:e3:71:44:83:1b:77:22:cb:
e4:a7:e2:3c:79:fc:04:fa:2f:f5:bc:b3:5b:c1:5d:
ca:35:c8:63:e2:0c:2e:d3:e8:2f:bd:cf:0c:52:da:
7b:2e:fc:dd:7f:27:d8:c2:8d:ff:fc:ff:9f:32:2a:
4b:c9:c9:21:97:41:5e:81:1a:b0:fc:f4:23:bb:54:
c4:4d:84:7c:08:7b:a5:f1:e5:ec:1a:b9:1e:09:74:
e5:f3:e0:1a:87:0c:c0:b9:21:6f:8f:21:d2:c8:da:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.104.0/22
IPv6:
2a03:9720::/32
Signature Algorithm: sha256WithRSAEncryption
43:1b:da:18:d1:6b:82:7c:a4:df:fc:a1:2a:d9:21:65:ef:25:
96:98:42:cc:51:25:f1:6c:79:cb:23:f7:b5:84:5c:e8:e3:00:
b1:8d:61:35:29:46:2b:ff:d1:5d:53:4b:40:f8:eb:cc:55:dd:
d7:3d:4c:57:fa:59:a6:4e:62:ad:c6:87:f9:e5:fd:d3:51:44:
22:73:de:3a:79:28:1a:37:f2:79:95:2a:48:4d:38:f0:1d:8f:
ce:23:7e:a8:8e:b5:2d:f7:8d:58:12:d1:34:76:8a:39:2f:ca:
be:ec:17:b8:43:11:54:fe:51:54:84:e9:cf:f8:7b:5f:f3:3e:
dd:b8:23:50:f5:dd:79:97:ac:07:86:65:04:52:39:3f:79:6e:
fe:c3:35:77:66:ed:bf:12:9c:41:07:84:9d:4b:cd:fa:1d:18:
5e:3a:33:1a:ab:a4:d0:3f:cb:f1:78:40:95:4b:67:67:7a:25:
57:21:77:50:fb:90:f5:e0:21:91:af:c3:c2:c8:b3:32:f7:eb:
e9:a0:5a:8c:58:7f:94:e6:7e:94:6d:e6:55:94:e9:dd:80:e5:
ae:8b:df:35:0e:6f:49:1d:70:99:55:f8:8a:16:66:f0:00:83:
69:9a:cb:f8:a8:bf:f1:03:a5:90:81:8a:03:50:7b:b6:a0:09:
61:8d:fc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:06:30 2026 by rpki-client