Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.cer (raw, json)
Hash identifier: 4Ae0K9hcMlGl2UCTLez5lf66SvnqyccpVXf6houFpcg=
Subject key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E4FD6848DD0FA8463BCCD827543C6E33F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 May 2026 13:18:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12666
AS: 197629
IP: 80.65.0.0/20
IP: 91.223.172.0/24
IP: 185.194.16.0/22
IP: 194.153.74.0/24
IP: 2a02:2948::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:d6:84:8d:d0:fa:84:63:bc:cd:82:75:43:c6:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 13:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d20b08e607668e06050084ee37928a1c0b035492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:9e:91:cb:f2:e1:2a:5c:ec:5c:e6:bc:d0:
c1:69:45:bf:36:9a:1d:87:97:60:47:37:34:88:c9:
cb:fe:9a:8e:b0:ee:f0:8b:94:02:dd:7f:1d:34:39:
d3:e4:42:2c:3c:96:ea:8a:75:a1:32:b3:cf:c9:d8:
c3:3b:07:9b:1e:ea:5c:47:a8:67:9d:a2:c6:52:0a:
d3:f0:6e:40:b0:53:57:b8:75:12:d6:99:7e:c7:c9:
2a:06:89:a5:eb:50:29:91:5a:d4:e5:6f:29:de:61:
c6:e8:ae:56:15:d6:3a:4c:c7:e1:b0:cd:9b:1b:f1:
02:d6:c4:ad:3c:0a:a6:1c:66:1b:69:37:5b:eb:50:
dc:96:64:ad:a6:9c:29:6b:4c:dc:9d:3d:d9:c2:ae:
20:33:7e:1b:11:68:01:68:42:1d:11:ba:ad:77:9e:
ea:da:3b:ed:37:0c:22:53:2a:45:a9:d2:2a:9b:4e:
eb:b5:fd:e1:be:a2:d2:ff:c6:21:fe:c8:4c:c8:8e:
95:fe:e3:f3:b3:55:11:34:f5:77:e5:59:2f:45:82:
c8:31:ed:18:f7:14:b5:3d:e6:96:7b:df:87:49:50:
d4:c9:d8:7f:f8:c3:2c:55:a4:43:c8:ff:e4:7a:d8:
47:51:f9:51:18:35:5b:04:70:b2:25:6a:e0:cd:6d:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.0.0/20
91.223.172.0/24
185.194.16.0/22
194.153.74.0/24
IPv6:
2a02:2948::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12666
197629
Signature Algorithm: sha256WithRSAEncryption
25:4c:d9:40:d6:fa:97:0b:69:2f:c8:43:90:12:07:e0:fd:ff:
53:d9:04:10:95:c1:ed:96:9d:d1:95:79:31:e5:35:43:9b:1e:
87:ac:ac:a9:30:17:9a:26:3f:8b:40:56:9e:4e:d5:94:2f:07:
4f:bf:d5:cf:d4:ac:60:d2:40:e3:a7:07:f6:a7:6a:c5:f1:bb:
f3:d5:28:af:21:5f:ba:26:94:2f:b2:f0:e3:5c:c6:ac:37:e6:
5b:ef:7f:df:8b:38:53:c7:b1:e5:fb:aa:cd:b5:30:ce:30:aa:
6d:15:f2:48:c7:ae:a6:bb:da:c7:0a:7e:5b:c9:fc:1d:c1:f6:
14:1d:2e:c6:3d:d8:f4:ad:6a:7e:34:ae:64:ef:e1:17:ed:cb:
ce:3f:88:b3:89:a5:30:b9:f8:8e:aa:47:07:6f:d2:b8:19:6d:
b2:e8:01:cb:87:dd:7a:50:42:a3:60:75:11:5b:74:82:42:e4:
11:96:de:e6:47:a9:3f:04:7c:57:ec:44:f6:b7:6a:52:05:6f:
19:eb:f9:00:99:77:8a:92:8e:4c:92:bd:7c:95:90:85:6c:7e:
06:33:48:10:29:de:5d:bb:ea:7e:39:94:f8:37:58:89:8f:06:
a4:cf:a5:be:f2:db:34:df:21:b2:21:18:77:38:2d:9e:fb:33:
87:21:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:43 2026 by rpki-client