Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer
File: g0Urhb9FwGP6rV4VVRjnJPqrMz0.cer (raw, json)
Hash identifier: /bTBaGKKGTHX//5QqL6rW4AGhQzsfhOKVFiW0u6b7DE=
Subject key identifier: 83:45:2B:85:BF:45:C0:63:FA:AD:5E:15:55:18:E7:24:FA:AB:33:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0B40B0A063F3D580F26C0C26C81C8FE32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Sep 2026 10:23:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.238.253.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:0b:0a:06:3f:3d:58:0f:26:c0:c2:6c:81:c8:fe:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 18 10:23:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83452b85bf45c063faad5e155518e724faab333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:95:cb:76:14:d6:d3:03:8c:11:b1:21:3c:
f7:02:bf:cb:a8:d5:9f:ac:76:5e:1d:09:f0:c9:61:
7c:13:a1:1f:47:3d:57:6b:79:b7:6c:a5:f0:91:6c:
d0:b0:5e:3d:92:34:a1:19:07:1b:d2:6c:6c:36:02:
c5:3f:2b:36:da:2c:1d:54:01:b8:47:fb:76:d4:5b:
89:b4:0a:de:d0:8b:89:9e:0a:4e:28:a4:cd:8b:98:
ab:d2:38:a3:0b:45:f0:de:a5:cf:06:68:c4:4f:9f:
9e:88:94:9b:59:64:54:3e:b8:cf:f2:aa:f0:cd:25:
c0:86:96:ba:ce:a2:e1:da:26:52:42:5e:32:1a:de:
17:82:4e:cf:33:8f:28:43:f8:9c:b6:b7:2c:7c:4f:
bc:3e:0e:09:72:b5:ce:4c:09:c2:bf:1f:fe:91:96:
5b:8b:49:52:3a:aa:60:97:cd:66:32:99:be:cb:b6:
96:f8:f4:b2:2d:a0:20:33:f6:17:c3:4e:37:ac:89:
63:95:d8:2d:f1:f8:19:32:d3:b9:18:ab:d4:74:ce:
6d:c3:f6:a1:28:45:5e:47:df:d0:57:e0:ec:e2:bf:
d0:86:55:3a:db:3c:51:0d:d1:e2:95:cc:96:9b:43:
3e:a7:55:ad:5b:0f:f2:a2:49:a1:4e:cd:ba:28:a1:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:2B:85:BF:45:C0:63:FA:AD:5E:15:55:18:E7:24:FA:AB:33:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6bd653-3e8b-47b0-9b83-7b5964ddc36e/1/g0Urhb9FwGP6rV4VVRjnJPqrMz0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b6:8b:df:ce:fe:d1:00:fa:c8:a9:eb:7e:0e:25:9e:58:90:
82:57:45:10:3a:26:62:ab:c5:d0:5a:5e:ae:27:b4:62:85:86:
af:c4:91:40:13:1d:75:fd:b4:1e:01:82:f6:ad:03:b1:6a:2a:
f5:16:ec:90:15:6d:50:31:d7:fe:d4:10:be:ef:f2:e2:7d:57:
9f:e7:8c:7a:57:3f:9b:9b:17:09:bd:35:9d:23:f4:fa:7d:19:
d1:30:d6:b3:ff:1e:b0:e9:ec:77:00:e8:20:c5:2b:68:49:29:
41:b9:f3:32:3b:8c:ee:98:9b:71:ce:9b:81:35:48:83:c6:16:
5f:ea:36:80:ee:58:34:cf:76:ca:3d:33:67:2f:61:6e:a0:72:
8d:8c:8e:61:1c:02:1e:ed:57:05:31:ee:0a:24:7e:2f:5e:5a:
ae:d6:3f:29:21:b7:a9:ad:10:74:01:6e:8d:94:2c:cd:4f:78:
a2:26:0e:3f:f0:e2:19:8e:27:1e:2e:33:06:f7:be:fe:06:b9:
91:71:1e:87:14:4d:e6:82:16:15:2b:8a:ca:3d:e8:b5:36:58:
a8:3b:78:21:3b:d3:08:df:ed:11:c4:c0:ff:b3:0f:0f:7b:57:
e2:08:f2:62:a3:31:1c:a7:e9:bb:9b:36:38:34:a9:40:b2:c8:
af:5b:e8:ac
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaC0CwoGPz1YDybAwmyByP4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTE4MTAyMzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzQ1MmI4NWJmNDVjMDYzZmFhZDVlMTU1NTE4ZTcyNGZhYWIzMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18OVy3YU1tMDjBGxITz3Ar/LqNWf
rHZeHQnwyWF8E6EfRz1Xa3m3bKXwkWzQsF49kjShGQcb0mxsNgLFPys22iwdVAG4
R/t21FuJtAre0IuJngpOKKTNi5ir0jijC0Xw3qXPBmjET5+eiJSbWWRUPrjP8qrw
zSXAhpa6zqLh2iZSQl4yGt4Xgk7PM48oQ/ictrcsfE+8Pg4JcrXOTAnCvx/+kZZb
i0lSOqpgl81mMpm+y7aW+PSyLaAgM/YXw043rIljldgt8fgZMtO5GKvUdM5tw/ah
KEVeR9/QV+Ds4r/QhlU62zxRDdHilcyWm0M+p1WtWw/yokmhTs26KKEE+wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFINFK4W/RcBj+q1eFVUY5yT6qzM9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzZiZDY1
My0zZThiLTQ3YjAtOWI4My03YjU5NjRkZGMzNmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNmJkNjUz
LTNlOGItNDdiMC05YjgzLTdiNTk2NGRkYzM2ZS8xL2cwVXJoYjlGd0dQNnJWNFZW
UmpuSlBxck16MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAw+79MA0GCSqGSIb3DQEBCwUAA4IBAQBftovf
zv7RAPrIqet+DiWeWJCCV0UQOiZiq8XQWl6uJ7RihYavxJFAEx11/bQeAYL2rQOx
air1FuyQFW1QMdf+1BC+7/LifVef54x6Vz+bmxcJvTWdI/T6fRnRMNaz/x6w6ex3
AOggxStoSSlBufMyO4zumJtxzpuBNUiDxhZf6jaA7lg0z3bKPTNnL2FuoHKNjI5h
HAIe7VcFMe4KJH4vXlqu1j8pIbeprRB0AW6NlCzNT3iiJg4/8OIZjiceLjMG977+
BrmRcR6HFE3mghYVK4rKPei1NlioO3ghO9MI3+0RxMD/sw8Pe1fiCPJiozEcp+m7
mzY4NKlAssivW+is
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:12:46 2026 by rpki-client