Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
File: RgVeggAswL17mYfl1zZUIOr9SXA.cer (raw, json)
Hash identifier: iNBaVlkqYgQWDi0WzgGvqR6JnbOh/0MG076CavseKUQ=
Subject key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C6603C9ABDCB91905E0F507917EB05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:17:28 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.160.144.0/22
IP: 2a0c:bec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:60:3c:9a:bd:cb:91:90:5e:0f:50:79:17:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:2f:c7:15:26:62:da:dd:fc:e4:ae:d0:a0:
f6:79:2a:c3:39:e3:30:18:46:e7:21:bf:46:0c:16:
6e:db:11:54:b3:de:6d:82:6e:15:6e:ca:4a:ae:9d:
e3:1e:21:42:d0:c0:47:38:78:03:b5:8e:b9:3d:43:
13:1f:44:c4:e0:7e:7b:99:99:6d:0f:07:55:c0:7b:
ee:61:02:af:dd:37:04:5b:69:61:10:45:5e:65:29:
62:97:f4:b6:27:98:1e:3e:80:7b:da:66:ad:bd:6d:
c6:c3:15:65:4a:81:4b:44:a3:d7:8e:80:5b:4a:6a:
58:e1:d0:d1:1b:3b:8b:79:ce:00:dd:72:3d:13:e3:
fe:68:7f:bb:47:16:a4:08:2b:8e:8a:7e:74:1b:3d:
f1:28:7b:c4:38:a3:6a:4d:bf:b7:6e:35:ee:2a:97:
f4:b3:49:58:34:85:00:ff:63:a6:aa:b8:3e:0e:30:
62:a4:b7:aa:f4:17:64:72:52:e4:94:32:58:3c:77:
2c:e4:19:d4:dd:22:67:c6:c7:e1:46:50:bf:8a:f8:
39:84:5e:d9:80:12:aa:58:d7:04:ce:1a:fb:99:83:
48:d2:da:b3:5e:6a:30:6f:0d:3a:20:08:84:7c:99:
9e:9d:14:da:58:fd:47:8c:c0:df:fa:c3:d0:a7:1c:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.144.0/22
IPv6:
2a0c:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:6d:7c:60:36:62:d2:1e:f2:f0:3c:96:e7:8a:8b:a7:50:e8:
08:a2:88:88:c3:a8:c0:0a:46:bd:b7:5b:ab:31:ce:dd:57:d5:
f2:5f:47:8a:30:ae:55:03:57:40:49:eb:29:a1:72:75:1e:ee:
79:c5:f4:83:a0:a3:b6:d8:54:5e:2d:68:c2:20:dc:69:7c:ba:
65:e3:98:8f:52:04:18:7c:18:9c:1e:26:3d:6a:ec:4a:9c:5c:
dd:a6:15:6c:c9:88:5a:c6:db:f4:e2:91:10:04:40:38:91:50:
9a:91:8e:e8:6d:9e:3d:f1:20:b9:9d:c1:0e:03:05:8f:06:60:
09:1a:0e:7f:49:6c:ff:81:24:1d:8f:8a:9b:75:77:40:1c:5c:
04:9f:69:4c:00:7a:ae:8e:24:4b:8a:78:3a:79:f4:15:06:68:
51:63:c9:ab:a4:5c:2e:34:ba:65:b8:bd:1b:11:0c:ff:47:85:
53:64:bd:45:84:71:3f:5a:2b:b3:19:df:21:d2:f6:f3:c3:59:
b0:c2:48:16:fb:66:93:76:fc:ce:b0:ea:04:54:0e:64:7a:5c:
3d:cd:2a:75:8a:06:27:a3:9c:ff:21:f2:a0:5e:f0:96:cf:bc:
21:95:b9:d9:4f:aa:e3:87:47:96:75:5f:18:9b:87:07:4d:c1:
d3:b8:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:45:37 2026 by rpki-client