Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
File: gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer (raw, json)
Hash identifier: mVwjott7Enj5va6abWt1uzf163+kPuwUYoYSGHPoaGw=
Subject key identifier: 81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A07BFB903F1E761E2198D95A6378EBF334
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 13:07:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204211
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:fb:90:3f:1e:76:1e:21:98:d9:5a:63:78:eb:f3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 7 13:07:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c1480da58487d056863dd4ab71d8210a3687fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:37:8c:68:67:c0:61:a7:36:17:0a:e7:fc:
a7:2e:f5:7b:c1:7c:cb:1b:c3:4a:7b:25:d6:b2:2c:
04:e4:92:3b:7a:2c:9d:65:28:11:db:05:72:64:88:
ff:1d:6c:91:52:09:37:35:8a:15:50:1f:54:ff:7f:
e5:6f:82:4c:36:44:80:6d:42:e6:8d:b6:00:60:38:
06:98:18:cd:a1:0e:bb:93:39:54:56:0a:ea:30:3d:
e4:a9:78:1c:59:3e:2f:63:e9:db:ef:59:93:03:32:
93:05:88:5c:02:82:7e:f8:3d:4a:91:7c:09:42:fb:
9b:74:41:30:d6:c8:b0:8a:af:9f:40:2c:ef:e8:1b:
4b:bd:6c:0e:69:6f:7f:dd:ab:9d:67:bd:2c:11:c9:
fe:8e:87:1a:17:0f:06:c3:18:3f:a1:36:d8:2f:a4:
72:21:0c:f9:76:c2:27:78:70:0a:d3:84:ff:f4:36:
58:30:18:56:01:a2:6d:88:0a:cb:56:53:e6:48:62:
7d:eb:c4:36:8c:73:51:4c:43:7c:c0:58:3e:fd:56:
1c:48:e0:93:df:5c:e8:b0:8c:ab:db:2d:69:40:a1:
a5:ea:af:96:c7:57:e1:4f:95:13:27:de:6a:11:d3:
be:1a:b6:1e:3f:21:bc:b0:d1:68:cb:3b:a1:a4:bd:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204211
Signature Algorithm: sha256WithRSAEncryption
0f:e7:5a:60:7d:55:5a:c7:99:04:72:84:67:a9:d2:0e:ff:3d:
a7:7d:5b:4b:e8:cb:92:92:4e:c6:0b:20:67:3c:99:a6:48:b3:
ac:a8:4c:ef:3e:e4:cd:5b:6e:5a:63:f3:d3:bf:c7:0a:81:f0:
2b:36:a4:37:9e:1a:b4:fd:20:2f:18:14:0a:bc:d7:c8:6d:0a:
ea:db:69:0b:13:08:17:90:23:e6:a9:69:4e:69:cc:e1:bd:0c:
35:33:8c:9c:79:c4:a7:a7:05:98:36:1c:ee:18:9f:48:c5:ea:
9c:c3:44:08:21:00:19:52:e8:5a:e0:c5:73:ae:fa:d2:9b:be:
c4:b8:2a:14:0b:fc:7b:8e:93:b4:8a:84:32:b2:ca:08:9d:30:
32:f1:53:f1:5d:8c:b6:75:3e:87:08:83:b0:48:39:16:1c:a0:
5c:9a:98:3f:4a:a7:29:31:6b:94:7a:9a:74:5f:49:ea:39:c9:
e9:fe:ff:6d:6d:85:9e:ec:8f:b4:c0:dc:c0:86:96:35:5f:fe:
8f:10:05:67:d6:b4:17:e2:9d:dd:07:6c:7b:fa:b3:da:77:52:
c2:a7:af:19:ba:30:83:bf:04:ae:86:61:92:0b:80:d8:ce:ff:
27:89:90:47:df:e4:1a:71:eb:83:04:1d:94:78:a8:30:01:46:
0d:06:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:43:59 2026 by rpki-client