Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
File: G0p0-DX7ePRqdSJYKnAkw-ladQE.cer (raw, json)
Hash identifier: hHuSXq7Fezo3i0XC3cfGoszYXESMChdijouQMDeDq3E=
Subject key identifier: 1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0AF72FE030233F09F35B2021822B7CA69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Sep 2026 12:59:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218857
IP: 2001:678:1328::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:72:fe:03:02:33:f0:9f:35:b2:02:18:22:b7:ca:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 17 12:59:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:32:8b:34:82:8c:19:5c:81:fd:7c:be:62:
94:0b:77:a5:68:be:62:9a:d4:ef:a9:77:c2:53:48:
4b:e7:c4:ea:46:6f:6d:db:7f:24:07:c2:d5:09:25:
7c:10:3b:e9:24:98:81:10:00:f1:5e:52:a4:61:3a:
ba:3b:af:c5:6d:78:27:97:80:21:e9:7d:fa:76:e0:
34:5f:32:08:d8:12:90:9c:9a:1c:c5:e7:2d:f8:15:
ec:23:82:83:0b:ad:48:12:60:8c:cd:38:a0:c2:c3:
da:9b:03:21:f7:31:db:9e:e6:a4:ae:e6:30:c1:b1:
0c:39:b1:ce:48:84:52:78:00:87:88:ba:eb:a7:a8:
b5:2d:f7:23:54:ff:17:11:38:ec:64:67:91:5c:0c:
18:37:aa:cc:db:c5:3a:2e:d8:43:09:c8:f6:0d:eb:
a6:1c:06:ec:db:28:15:37:58:0a:2a:29:dc:bd:6b:
0b:e9:92:c1:03:1a:05:30:91:22:e4:8f:5d:0e:1a:
32:e7:a3:df:d8:0b:08:55:ec:14:22:40:6f:21:c2:
63:ec:47:be:da:6d:8d:e4:8e:78:51:79:0f:34:d5:
76:db:c4:f0:6c:ed:8c:20:65:26:25:6e:94:fb:38:
72:a1:87:0f:01:6d:77:c9:99:67:0b:9b:13:eb:79:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1328::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218857
Signature Algorithm: sha256WithRSAEncryption
2a:1e:81:cf:89:ff:5b:63:4e:2d:53:dc:20:86:ad:fa:f3:fb:
52:92:96:93:cc:a5:d0:d9:95:5d:da:77:a4:d6:4f:98:83:f0:
52:0e:09:29:95:df:14:28:a2:15:ef:93:6f:2a:61:0e:69:c8:
e5:bc:8a:6d:e6:be:85:29:b4:0c:18:a9:3e:87:e8:bc:62:31:
56:73:9a:00:1a:fb:a4:1c:7c:c6:9e:63:23:6c:ca:44:20:0b:
72:ad:e5:38:9b:e1:5d:52:d8:ff:37:40:4e:fb:3b:fa:8b:bf:
80:a7:e5:3b:06:8e:d2:eb:f5:44:b7:4b:ae:ca:7c:86:f4:6a:
9d:13:6f:5a:f2:d2:af:77:98:df:33:4a:ea:71:61:00:bb:6b:
f1:1b:c8:c6:0c:3b:65:27:45:ca:0c:94:ee:c4:50:b7:26:09:
15:99:d1:27:77:0a:e4:b9:62:35:9d:5b:35:57:94:d6:c5:76:
b2:d7:96:80:46:2e:72:cf:eb:a3:6f:45:24:f1:53:42:75:6a:
3d:70:09:86:0a:35:0e:f3:16:1b:c4:83:e0:b5:5b:e9:cf:51:
92:b8:50:b4:77:69:84:a2:e6:91:ce:5d:c6:c7:21:fa:be:16:
94:50:4a:45:f4:a7:91:01:33:7c:fb:12:6f:7d:c9:7e:4c:71:
55:5b:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:46 2026 by rpki-client