Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/GGcFYb-p0jNt-qGAxENCsEbhmrw.cer
File: GGcFYb-p0jNt-qGAxENCsEbhmrw.cer (raw, json)
Hash identifier: VHon4j9SBmtNNCuD4YPRxx8AhErIgVpisCWBaFevux0=
Subject key identifier: 18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A08DF787A4762B6490E34836F887999754
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 00:56:44 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199746
AS: 204464
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:f7:87:a4:76:2b:64:90:e3:48:36:f8:87:99:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 00:56:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18670561bfa9d2336dfaa180c44342b046e19abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:b6:59:2f:0f:b3:c5:8d:66:74:ab:95:04:
d2:2e:8d:90:9b:64:de:f1:67:a9:ec:4e:15:c6:47:
41:7d:72:68:a7:86:31:88:38:c0:69:9f:db:e9:3d:
cc:36:0f:60:c3:ed:a5:23:8b:95:d9:b2:ca:fc:29:
a9:4c:b3:44:74:69:c7:5d:1e:9e:a7:87:a9:62:b9:
3c:1e:d3:15:3c:60:81:ae:bb:33:e2:df:97:d4:0d:
2e:b0:af:b7:63:3b:5d:e1:34:37:68:12:45:db:cf:
71:45:f2:a2:55:bb:fa:18:e7:7a:fc:5d:c3:fd:03:
37:6d:e8:c1:41:5c:ab:d8:be:f2:26:a5:af:5b:ef:
d2:71:7a:ce:32:c6:22:16:0f:ab:40:61:87:15:9a:
74:28:72:51:25:5d:e5:81:b3:94:c3:67:eb:35:4f:
12:1a:cb:6b:de:93:03:29:2b:00:84:df:17:e5:48:
9a:74:e5:0a:e0:bb:3e:79:cb:33:2f:00:62:84:08:
ae:e6:13:1e:22:ce:aa:64:52:28:c5:30:04:52:35:
2e:97:14:0a:66:b9:a3:66:31:22:4f:4d:1b:48:7a:
7c:f3:1f:80:91:35:0d:d1:cc:50:96:52:fc:e8:c8:
c3:42:e8:02:02:05:44:6a:09:08:e5:c3:7e:a8:4d:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:05:61:BF:A9:D2:33:6D:FA:A1:80:C4:43:42:B0:46:E1:9A:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/0/18670561BFA9D2336DFAA180C44342B046E19ABC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199746
204464
Signature Algorithm: sha256WithRSAEncryption
5f:53:65:85:31:85:5c:1d:4d:6a:92:b2:be:ce:63:5b:46:8a:
52:78:b3:9f:a7:7c:58:e1:2b:60:e1:47:6f:ef:ac:28:bd:56:
a7:29:83:fd:d7:3b:1e:0a:b8:1d:ef:83:48:d7:94:d1:b0:92:
59:26:be:7a:70:f2:c5:83:16:a1:71:d5:84:6e:8a:01:7f:2f:
29:d4:fc:d2:90:3a:a5:fe:82:34:a4:81:38:b7:dc:ad:c5:f1:
76:8a:0e:82:bd:26:ee:79:bb:9b:79:d6:1e:81:74:b0:61:df:
db:85:18:b3:01:bf:45:e8:1e:d9:f4:50:90:99:d2:4b:93:f3:
1e:1c:a9:ef:02:b1:4d:39:68:a3:57:f7:b1:f6:74:2c:3e:ae:
89:34:a1:9e:cb:13:66:ac:38:f4:46:d9:5a:ed:20:03:13:d9:
7c:5b:23:a7:5f:a7:8b:9d:c1:33:ee:fa:f4:ed:d1:41:41:56:
29:16:ed:cd:9b:a4:b1:f4:44:ef:24:ae:d7:51:5d:5e:da:42:
81:cd:d1:51:62:d1:f7:c8:49:22:b6:48:b0:98:50:c5:9c:d4:
c6:1a:fd:2a:70:b0:87:64:41:c9:d5:36:ea:5e:7a:35:76:45:
24:06:d3:51:3f:4f:30:ec:68:75:7e:cc:f6:19:e0:ff:d0:68:
a0:f7:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:27 2026 by rpki-client