Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
File: cGHLKb3Ndzhxg60jn77X3QwHDCU.cer (raw, json)
Hash identifier: SoWl/C5U8ZQez1X0+E5K9LwYnGX+TCoRTmW2Qr/nY1U=
Subject key identifier: 70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0A577594C5EAE6A2206D3BAF0B958884A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Sep 2026 14:27:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213717
IP: 45.157.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:77:59:4c:5e:ae:6a:22:06:d3:ba:f0:b9:58:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 14:27:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:0a:ef:8c:2e:8c:2a:f0:a9:0f:f6:79:bf:
c3:0e:ff:6a:53:f9:6f:a1:22:7a:73:75:04:76:11:
3d:1e:e5:bc:cd:f4:cf:08:61:78:39:21:58:2f:f3:
26:ca:c9:a6:1b:fc:a4:01:ee:74:65:f0:29:49:76:
1a:c8:25:58:cb:80:20:b2:a9:9f:b5:3c:d3:76:56:
2f:ed:92:f7:63:0b:6a:a1:47:1a:82:44:53:9a:68:
21:c7:d9:19:a9:5d:92:0c:60:2e:ef:65:7d:21:41:
65:a9:86:01:e9:d5:8b:67:e1:3b:97:ee:bc:33:c2:
d4:99:e2:99:6a:d4:68:8f:ff:a1:00:b3:06:74:5f:
1d:14:db:d1:98:e6:58:7a:de:a9:36:60:dd:91:d6:
91:44:fd:1c:70:4b:1b:49:08:c9:05:82:b6:3f:82:
c3:85:22:cf:4d:f4:e5:48:e9:c2:4d:da:a5:48:2f:
80:14:f8:ae:4d:4e:1a:37:9d:eb:01:31:41:ad:40:
be:7d:a8:06:96:5a:c8:96:ad:97:e6:cf:65:fe:29:
d7:95:03:10:19:eb:7a:af:63:7d:db:b4:f4:db:2d:
30:e6:3d:84:26:e5:3e:18:83:c2:77:0b:9f:27:7b:
cf:27:df:0a:c0:e7:10:26:f5:b9:84:d1:fb:89:a3:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213717
Signature Algorithm: sha256WithRSAEncryption
55:b3:1c:71:e1:fa:a8:a4:ae:64:7c:d3:3a:50:0c:a5:2d:41:
0b:89:43:53:08:31:15:bd:21:f5:72:03:6c:86:d4:30:17:d5:
b7:2e:e8:8a:35:73:ab:b8:ed:27:18:cd:64:41:f2:e3:73:e3:
f5:2a:d5:e2:61:23:c2:5b:59:f1:e7:08:28:0b:57:71:22:58:
c9:2b:e0:8f:ba:c3:59:0c:a8:0a:43:1f:97:d7:9c:fa:17:dd:
92:f6:2e:57:6c:6a:d0:a0:84:87:3d:ce:16:df:38:d3:a9:a7:
33:82:94:9a:dd:74:ab:98:de:e3:16:99:18:aa:11:34:2e:4e:
1a:8c:2d:80:47:57:37:2f:f8:1d:c3:d9:cb:30:4e:bd:7f:81:
2c:ab:39:44:41:87:92:b1:d4:4e:39:ae:28:f9:53:da:98:dd:
72:5f:99:d2:82:f5:7d:1d:3e:0a:43:8d:5b:d1:2c:32:84:67:
b9:01:d7:cf:c2:01:c8:03:cb:25:a7:4b:31:c4:34:82:a9:84:
11:93:71:eb:9e:60:9a:6c:6d:39:96:1b:cd:df:0f:59:92:ab:
ab:30:14:7b:2c:ee:4b:66:34:0a:bb:82:9b:78:63:fd:9f:00:
f6:07:89:d7:65:96:17:ee:70:8a:38:da:62:a0:09:a8:b4:41:
8c:7f:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:05 2026 by rpki-client