Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
File: 8VCW_jOQRJyTboVwYdSmll1AijE.cer (raw, json)
Hash identifier: TeD5TcY2oGBptSFEJxE0QJdHfWQ/tQM7qKaW3p6Ytv8=
Subject key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7F01C8BA77626FC06FDDAFAE086310
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:17:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.42.193.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:01:c8:ba:77:62:6f:c0:6f:dd:af:ae:08:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f15096fe3390449c936e857061d4a6965d408a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:54:5a:ce:35:1a:86:8a:9d:15:00:14:e0:
0e:ed:35:82:c6:d3:a8:f2:a1:1f:63:b7:fe:b0:da:
38:dc:8e:b1:2c:d2:4d:b8:91:7b:f8:59:f0:c8:4c:
04:74:4e:33:a9:0d:71:6e:93:71:02:9b:53:d6:e3:
32:90:d1:e4:fd:bc:44:02:14:30:b9:2d:25:8e:56:
b8:bd:f1:a8:76:dd:dc:04:19:05:5c:02:e9:05:eb:
d9:ca:04:ee:75:63:94:a5:df:73:76:c4:2d:70:85:
b2:73:25:66:e2:8b:02:c7:36:b4:e9:70:f3:27:97:
30:bb:6b:f3:13:d5:50:32:14:d3:4a:84:28:01:1f:
80:0c:e7:88:4c:47:ed:40:dc:83:ce:b0:80:a9:a6:
9c:4b:df:d0:02:7b:1c:9a:c6:81:5a:bf:66:24:9c:
8d:38:db:d3:f7:39:92:65:ba:4e:29:e7:36:5f:cb:
0e:35:64:7b:6f:8e:bf:d2:22:56:b3:f1:cc:8f:35:
be:aa:98:52:17:92:e7:76:20:79:0c:86:85:d2:b7:
ac:1b:d5:06:05:83:ea:ea:b4:3c:4a:59:c8:ae:e9:
ab:e6:35:41:ba:9f:8d:8b:92:2a:c5:2e:14:6b:c4:
0e:64:34:eb:1d:6e:ad:92:4c:d8:30:96:9d:d9:ed:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.193.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cc:24:86:cd:7c:d9:af:4b:e9:96:b8:0c:58:6a:d3:47:3e:
17:1c:4e:f3:de:52:43:0d:60:db:82:34:24:51:6d:ca:51:94:
52:55:99:f3:88:25:3c:9b:2b:c0:dd:7f:d6:91:54:81:a1:99:
1c:55:5e:a8:9f:c5:f4:0e:a5:73:5e:bb:09:23:24:99:38:24:
ba:13:b3:4b:83:83:af:53:d6:0e:92:b0:a8:cf:8c:ad:34:93:
80:65:29:a0:76:32:3e:eb:c7:8e:2e:94:d6:b9:c2:5c:f0:6a:
16:2a:76:42:19:c0:58:33:99:58:a5:8a:37:ae:2e:c5:87:fc:
f4:0d:1d:8f:c7:eb:d4:b2:4b:10:ed:81:cf:fc:f1:5a:b6:81:
7d:02:1b:61:3f:88:aa:11:fb:fa:8f:b2:e4:db:4c:5c:52:ab:
10:42:ad:15:02:50:40:ac:1b:60:d9:35:fe:eb:b6:ca:d8:c3:
62:81:d8:c7:94:08:7e:48:01:68:d3:c8:11:0b:18:46:42:bd:
45:71:3d:52:57:64:f0:3c:78:2c:35:4d:52:50:47:01:2a:1d:
fa:2a:02:6b:6b:bf:43:40:e7:af:51:b0:9d:5a:31:b2:ee:2c:
d0:5d:70:f5:ac:b4:95:65:e5:0a:de:0a:55:95:77:ea:62:3b:
7d:40:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:12:03 2026 by rpki-client