Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
File: gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer (raw, json)
Hash identifier: fDHIRoL82u1HnF24+a39opU8O4bpfPnUMknh+UETbME=
Subject key identifier: 81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A0BEEC59BC4DB0AB0699C5AAEDFEB694C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Oct 2025 12:39:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20924
AS: 200073
IP: 80.76.64.0/20
IP: 185.37.92.0/22
IP: 185.156.132.0/22
IP: 2a00:e220::/32
IP: 2a01:5880::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ee:c5:9b:c4:db:0a:b0:69:9c:5a:ae:df:eb:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 22 12:39:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:dd:5d:f9:9c:c0:80:11:3c:d6:eb:b1:ce:
3b:6f:fe:c2:f7:53:09:56:a6:9b:93:6b:36:02:09:
3a:1e:52:4b:33:6a:e5:1d:48:e0:70:92:bf:5c:ea:
95:c8:9a:66:3c:0f:cc:40:a4:f6:28:c4:ca:3a:96:
0d:e5:23:7e:04:24:77:dc:f9:44:ab:17:dd:0d:ca:
2e:67:18:f1:9a:bb:0b:be:b9:bc:03:16:43:0c:f7:
35:7d:fb:1a:dd:59:77:b8:e8:97:90:e9:32:04:59:
75:51:32:ff:b0:bc:57:8e:88:fa:ca:54:5a:2d:2f:
b1:7d:d5:7d:e3:8a:1b:b4:16:6f:54:d2:51:19:c3:
39:ff:7c:c6:52:10:ed:1f:b3:2f:36:fb:84:5d:f9:
8d:92:0a:ee:b0:25:ac:fa:a8:41:95:68:64:f8:5a:
d5:38:cf:69:76:d5:98:da:0a:62:27:02:c8:d0:6c:
86:f6:4b:de:91:f8:97:de:30:f4:4f:fa:e2:36:6f:
80:72:19:a8:63:49:dd:8d:df:8b:29:48:82:60:d0:
9b:7c:78:67:8e:23:5e:67:54:04:f0:19:18:1f:7a:
bb:a3:6b:e3:21:00:dd:a3:12:df:bc:a5:d4:90:67:
28:62:5e:01:42:cb:da:0e:8f:a2:18:d5:ff:0f:56:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.64.0/20
185.37.92.0/22
185.156.132.0/22
IPv6:
2a00:e220::/32
2a01:5880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20924
200073
Signature Algorithm: sha256WithRSAEncryption
9c:1f:4b:41:bc:0f:91:69:04:e3:6a:3e:f2:dd:d9:eb:fc:69:
dd:ec:3e:32:4e:76:4a:a5:cd:ab:ec:ca:cf:45:07:f3:f7:ad:
35:cb:e8:08:27:24:e7:d0:51:4a:e2:2d:5b:8d:2d:c4:8f:66:
d0:c8:7d:29:a0:2a:10:69:91:9c:87:e9:d3:dd:6c:b8:a2:4a:
98:9e:10:7e:fa:01:2c:5c:e1:b5:9a:a4:00:0a:9e:07:66:f3:
e8:49:73:91:12:1a:12:f8:3b:db:4a:0b:9a:53:f0:3b:4c:9b:
1b:96:98:88:74:ba:ac:1c:da:54:64:6b:7a:56:52:31:4a:c9:
11:4d:59:12:ac:54:34:d4:62:04:72:a9:52:2c:9c:65:e2:51:
1b:f3:19:54:71:e8:bb:6f:04:f5:08:89:b2:5a:54:50:4d:7b:
7f:90:cb:47:96:aa:4d:7b:9a:2c:33:5e:ff:a6:c0:bb:25:5b:
63:86:58:29:df:f4:3f:81:f9:5f:9e:cf:8e:b3:27:1b:07:ed:
a4:a4:90:37:a1:7f:10:76:37:c4:96:fd:1c:69:d2:63:f9:ae:
3e:01:fa:39:1d:68:bc:05:8c:65:3a:a4:74:e2:bf:37:79:67:
b4:ba:35:1c:7c:a3:98:c5:2c:c2:0a:12:43:39:aa:a4:49:90:
de:a6:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:52 2025 by rpki-client