Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
File: G1VDeLv22mSc_WBxZvZcfE921lY.cer (raw, json)
Hash identifier: 4sZWf6U7MpWbPdo+mzhh5RgfvOrkcE5A0r9aXpyfsc8=
Subject key identifier: 1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0CDDFEF52E4770EA49972BD7F29578FA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 10:46:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.125.104.0/22
IP: 2a0c:e340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:df:ef:52:e4:77:0e:a4:99:72:bd:7f:29:57:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 10:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:fa:75:c2:54:75:70:99:38:47:d6:ea:c3:
73:f1:35:f2:30:20:b8:88:9f:ae:23:e6:a0:2f:f2:
af:d6:ea:e5:e1:c3:8a:d1:7d:54:4a:b0:79:8c:95:
f0:70:48:87:80:9c:ee:05:9c:56:18:c9:2d:cc:3e:
0b:4e:f1:86:e1:15:3c:54:78:7a:5c:d6:5a:45:95:
bd:1c:cf:7b:b9:73:5c:89:e4:c3:47:85:99:f7:fb:
62:5c:07:a5:89:85:04:18:aa:52:d6:92:64:41:58:
14:e1:a3:41:40:f9:d7:c9:20:20:0d:50:a9:26:2b:
e6:94:69:6c:5e:6e:de:08:ff:aa:3a:43:6a:b3:64:
ac:2b:65:48:73:a0:47:17:3c:f9:47:0a:16:95:0a:
d8:15:ec:98:e5:11:fd:03:03:20:7f:c9:50:64:55:
26:71:95:06:a6:4f:ac:62:63:7e:65:c1:45:34:c4:
8a:8f:fb:5f:4a:fc:c4:80:a0:0f:31:82:fd:9e:12:
87:2e:11:c4:2c:c7:2a:7e:07:a2:56:e0:e3:58:bd:
29:24:26:aa:9b:03:e6:99:a3:e7:17:4e:bb:3b:bd:
e2:34:63:ce:f8:a7:28:8a:55:8e:8b:23:7b:06:a4:
c8:3f:bf:57:67:40:55:82:a6:4a:37:56:1c:41:30:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.104.0/22
IPv6:
2a0c:e340::/32
Signature Algorithm: sha256WithRSAEncryption
58:75:0e:85:45:3a:55:1d:07:ec:a3:e6:0e:0a:40:d0:90:af:
b8:57:2e:1c:82:71:ed:96:9f:0e:50:00:2f:fb:35:13:5a:2c:
c6:48:e8:ff:42:57:d7:ac:90:ed:52:1d:6f:7c:b3:67:e2:8b:
58:61:7d:4c:9d:a6:a0:b1:3d:fc:39:f2:ae:84:dd:4e:07:71:
7c:2c:07:86:5b:0d:15:f1:ff:1e:3a:d1:c8:2a:ed:13:16:3c:
6e:c3:f2:98:5a:0c:98:db:81:0d:c2:50:68:e7:bc:8a:52:6f:
28:11:43:b4:f3:f1:b8:fc:28:4b:54:a1:34:61:0d:c3:2e:56:
cc:6d:a9:2a:97:b0:9d:94:35:f0:4c:a5:dc:77:14:c8:bb:35:
ee:e9:f0:a7:52:b4:3f:f6:2c:34:c8:19:96:2f:06:32:00:d6:
a0:9d:16:2f:69:e5:f2:f7:a0:64:ad:1d:fa:a2:2a:78:4c:36:
07:a3:54:4a:36:c5:e1:87:c7:cc:92:e2:ba:36:0a:9b:ad:28:
06:e1:d6:37:9c:f3:71:42:76:fe:55:85:cc:53:4a:5b:e6:0b:
3b:ac:8e:7e:25:6d:7f:b9:ee:a8:b9:8c:50:0c:65:d2:9e:da:
97:14:87:1f:a5:d3:75:14:08:34:91:df:71:15:26:47:4a:22:
85:0c:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:26:04 2026 by rpki-client