Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
File: GbiQW6xTUBxccgHgYY3w9F8RSnU.cer (raw, json)
Hash identifier: kWOctlyDHBRDHJkaArDFmQE4B7VLYiIWizBqh3XUZIw=
Subject key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D8D84CA1A13B90B0B02F7F09E5F69E581
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 Apr 2026 19:43:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.134.240.0/24
IP: 2a14:9c00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:84:ca:1a:13:b9:0b:0b:02:f7:f0:9e:5f:69:e5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 19:43:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19b8905bac53501c5c7201e0618df0f45f114a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:86:a9:7f:a2:c3:e4:e2:a4:cb:12:45:63:
92:fa:3b:c2:a7:cc:cf:ce:97:9f:46:f8:2f:5e:c4:
da:60:3b:a6:43:f7:dc:2b:95:5a:88:17:21:3a:b4:
7c:5a:6a:1e:f1:e4:6b:a6:02:dc:56:0a:ad:06:d2:
7f:08:76:ab:9d:52:d2:e9:ee:6c:6e:80:59:51:6b:
26:9b:0a:68:ac:96:1b:42:82:a7:61:67:bd:5e:67:
44:0f:7d:e6:69:69:27:ed:50:3d:b0:a9:db:6b:19:
89:2f:af:7c:ef:d0:a0:4d:34:65:60:97:75:94:e6:
69:00:9d:65:1e:1b:f5:bf:8c:63:7c:9e:1a:5a:2c:
6a:af:4e:05:b2:bc:1c:48:7f:c2:0e:18:4b:f3:1a:
82:e6:1c:89:1f:6b:6f:3d:e3:2e:a7:75:f1:61:26:
6b:76:c0:11:0b:56:f0:2e:da:58:7b:aa:b8:be:02:
5d:86:5a:af:86:ba:dd:a1:a7:81:82:b9:aa:a9:da:
68:9b:8b:f7:e8:30:38:3e:bf:43:e9:2b:5b:37:0a:
76:75:d8:cc:14:0f:9c:1b:fe:e1:50:bd:db:d2:51:
9c:aa:92:7c:0e:e0:38:75:e1:33:68:e3:d3:ba:8c:
6c:9e:1e:b4:47:5c:53:df:77:a8:01:7a:18:62:ab:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.240.0/24
IPv6:
2a14:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
9c:be:1b:32:d4:55:8d:10:81:d1:0f:e7:7a:14:56:a0:d6:04:
71:b2:af:3e:cd:0c:5b:3a:85:bd:59:98:93:be:bb:73:8b:b6:
23:65:a8:21:c6:34:b3:06:e4:b4:ad:7a:d5:d2:f1:56:7d:a5:
19:00:08:10:6a:4a:02:8d:89:44:4c:e4:ab:3b:ab:00:56:5d:
ff:b5:69:42:6e:54:1f:90:de:f1:95:c0:f4:87:e3:85:96:ba:
a9:a4:ce:3c:84:8a:65:08:85:cd:4c:93:22:ff:d5:1f:62:10:
1d:b1:99:75:10:60:05:34:51:e0:a0:1d:12:54:48:eb:6b:77:
cb:78:3a:bd:9b:d6:e6:55:1d:6e:67:e9:6c:ad:47:cb:cf:53:
76:35:93:45:bc:9f:31:31:55:07:d5:e7:02:60:0a:28:65:f8:
78:c9:e9:15:57:76:e5:9b:b3:cc:32:52:2b:5e:36:7d:78:41:
fa:e6:93:09:34:1f:23:a4:1e:61:e2:32:9c:c6:94:0e:bb:cc:
15:0e:1f:25:74:b6:91:ea:92:cc:0c:3f:97:b8:8b:dd:58:ac:
0e:86:d8:da:26:89:f8:03:cd:22:45:7c:47:7a:b2:63:22:79:
37:4e:a6:0d:46:86:91:57:b8:85:f8:eb:42:b2:17:bb:a9:a7:
d3:3d:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:15 2026 by rpki-client