Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.cer (raw, json)
Hash identifier: l+WGcjbL4fydyP8+Vr6ZFQnJwzqSEdvWwMDVHkuaAF0=
Subject key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C94012F329ADA2F0BC6A73DDFF0D59D50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Feb 2026 08:53:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 51521
IP: 91.217.96.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:01:2f:32:9a:da:2f:0b:c6:a7:3d:df:f0:d5:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 08:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:43:0e:dd:17:49:5a:0f:39:2f:58:d5:36:
4d:4f:8e:4a:d1:d8:b6:9d:24:71:99:95:13:f7:8f:
65:6e:dc:34:41:b1:33:31:44:53:54:a0:57:e0:c5:
32:3a:bf:e6:6f:7c:f7:4c:63:90:4f:60:26:cb:5d:
98:cb:da:5a:e0:b4:a6:5d:8b:16:c8:e4:b8:6a:17:
00:4c:87:12:4b:b4:ee:f6:71:ca:69:3a:55:11:87:
fc:f0:a3:fb:83:0c:91:34:29:37:0f:6d:27:60:02:
6b:3e:00:ad:c5:c1:28:75:76:2d:ec:74:20:37:8d:
17:a6:fc:65:ca:66:4e:47:b0:72:b3:7d:7b:df:2d:
5d:03:9c:92:ff:d8:a1:6f:93:39:cd:69:91:ef:81:
67:c4:23:15:e6:da:56:1f:3b:cf:50:44:68:43:0c:
0c:a7:be:a8:8a:23:53:74:98:0a:ae:9b:81:8a:6c:
e8:d5:b5:d0:61:d2:0a:ba:0b:46:bb:da:20:4c:df:
40:06:ee:b2:75:c7:2d:85:83:fa:81:0a:93:39:b5:
70:2e:12:b6:1d:24:ae:d1:73:37:d5:75:c8:31:78:
68:4f:1a:2e:ed:70:b6:a2:cd:fb:19:04:85:04:58:
dd:24:3e:87:2c:f9:12:b7:fb:6d:da:f6:e1:d8:5a:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.96.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51521
Signature Algorithm: sha256WithRSAEncryption
9b:c6:5b:51:37:5a:05:8c:89:93:99:b8:ab:69:ac:f7:2b:30:
1e:7a:72:ac:55:0f:6e:3f:41:14:14:33:23:53:c6:0d:d4:06:
29:fa:06:be:6d:bb:6d:cf:80:16:7c:e6:87:2a:76:4b:a0:ef:
06:7d:9d:30:4b:97:b0:cd:75:34:09:d7:35:2a:ee:53:87:89:
30:62:26:66:23:1b:d9:8c:80:77:bb:65:26:da:8d:96:47:67:
dc:b0:3b:ab:a5:4a:07:d0:d8:68:3a:81:df:96:dc:be:7b:40:
56:23:cf:d2:fb:58:2f:e3:81:62:06:41:44:64:7f:52:34:0a:
bf:3a:4f:e6:3a:e0:d8:d5:67:39:48:67:43:d1:85:37:40:e0:
8a:31:17:d1:eb:42:be:12:82:62:d8:4d:74:e2:8a:54:dc:ff:
56:3a:9f:03:fb:b8:47:1e:06:1f:a0:78:9e:63:0e:ff:75:a0:
be:2d:4a:e9:68:ad:ed:81:cc:0a:4d:93:da:81:38:33:d8:f6:
de:36:7c:e2:f6:3b:d2:e5:72:17:a3:cc:c6:89:be:b9:39:d8:
73:1c:d3:70:6f:d7:f8:d5:ab:1b:d6:68:68:c5:7f:00:95:c7:
cc:c8:c6:fc:82:91:08:23:2a:c0:e2:44:39:0b:35:b5:c4:9d:
c9:78:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:36 2026 by rpki-client