Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
File: GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer (raw, json)
Hash identifier: tTskfM0SUTFxNUrJxekO6mpWFd42VoC/+oRoUBDd2e4=
Subject key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79111D659A3C615B9DEB8AD99B60C8F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:18:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198275
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:1d:65:9a:3c:61:5b:9d:eb:8a:d9:9b:60:c8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:9b:e2:4e:8f:fc:6b:c8:21:af:5e:09:b1:
66:24:10:75:5b:c9:9c:fc:24:4e:e9:c4:65:fb:38:
91:ca:dd:50:8f:73:94:07:bd:4c:a7:75:75:12:87:
5b:78:9b:0d:d4:c2:3a:03:f0:83:5f:ed:60:5f:03:
3b:72:9b:0a:60:70:73:3c:fb:c2:06:0d:cc:ad:96:
08:d7:31:4c:7f:8b:10:87:2e:47:f6:7b:9d:28:36:
e3:97:67:ea:29:2c:f7:94:e8:8e:07:66:08:79:6b:
56:83:6f:7e:73:d5:60:ef:59:48:a4:e0:18:40:a2:
a4:e7:41:ae:23:e9:14:95:97:e2:15:c1:cd:8a:6e:
44:e8:e5:06:5c:5c:ef:d0:31:90:dc:9d:d5:04:71:
14:9a:a6:bc:48:cc:97:3c:c7:5e:88:48:ee:16:be:
36:cd:3b:9e:04:7c:2a:b0:c2:80:48:e2:ab:d3:86:
1b:60:9d:fe:63:6d:39:43:65:8a:c7:93:ed:65:77:
89:77:ab:cb:e1:f0:15:d6:a9:cb:4e:3e:2e:a2:6c:
15:b1:d2:54:b3:07:6f:e2:a7:ec:bf:2f:c2:5a:e4:
e7:23:ae:7b:b8:e1:ad:06:a3:47:30:67:31:11:57:
e2:57:6b:18:3f:8f:14:58:56:04:41:ee:0c:e4:3c:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198275
Signature Algorithm: sha256WithRSAEncryption
4e:23:12:db:86:86:2b:ce:a4:91:91:d1:e6:68:d2:6d:54:b4:
9d:17:b8:cd:25:91:dc:0e:14:8c:87:f5:42:bd:ef:b0:59:dd:
b2:fe:ac:a0:3b:d6:06:76:be:8e:01:f4:56:1f:53:7d:1a:73:
26:fc:1e:f1:47:48:0a:fe:86:2e:f4:ae:64:e0:7c:af:39:e3:
d2:4e:1f:e8:a0:c0:5a:5d:5f:f5:d9:72:45:05:f7:40:1c:e5:
4b:83:ee:f2:24:21:38:12:3d:67:d1:a3:45:90:35:36:6d:78:
3b:ac:6f:94:f6:33:ff:a9:4c:d6:01:fa:d2:4b:fe:c8:02:53:
57:2d:e5:88:04:d2:d5:f2:cd:52:e0:f0:10:c2:20:db:05:2f:
f1:89:a4:be:b8:c6:be:5b:63:f2:4a:3b:e5:30:c4:6b:0c:13:
d5:7a:76:d2:40:2b:ef:b8:85:fd:a1:c1:8b:6b:1e:7d:1d:7f:
49:5c:4f:f3:e5:86:31:8c:40:07:6e:1a:b0:af:6f:69:9c:ca:
d2:1b:df:be:71:16:18:9f:69:7b:e1:c7:d4:4d:76:15:b0:1c:
35:5f:74:f6:9d:2d:79:73:75:23:cb:16:be:c7:f2:f1:95:38:
4c:1f:15:ca:86:0b:3a:14:03:59:72:9b:4f:3c:cd:22:7f:b7:
10:14:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:36 2026 by rpki-client