Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer
File: VIH5FS-GCDOgM_PM0Uu6FjzgM9A.cer (raw, json)
Hash identifier: hpkAQgGyAD/0UQP15A3v8JwmKa95xiaY4gTnfhRbE54=
Subject key identifier: 54:81:F9:15:2F:86:08:33:A0:33:F3:CC:D1:4B:BA:16:3C:E0:33:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1B29B8EF07C3AE1F5A89A15B22CFD9BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Mar 2026 14:46:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200011
AS: 203969
IP: 185.110.152.0/22
IP: 2a06:5880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:29:b8:ef:07:c3:ae:1f:5a:89:a1:5b:22:cf:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 14:46:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5481f9152f860833a033f3ccd14bba163ce033d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:90:a1:01:61:a1:b5:67:45:1d:3b:94:4c:
27:05:f2:b9:44:20:51:e9:a4:af:82:d2:50:d0:92:
18:e9:bf:96:1f:15:d0:0a:89:b3:3f:c9:e4:be:b6:
9f:5e:9d:dc:74:98:6c:6a:a7:6f:da:ca:08:d1:3e:
73:4d:3d:18:14:39:84:8b:39:99:4a:14:eb:5b:01:
b2:c8:bd:9b:f0:7d:e7:dc:07:43:b1:35:0b:b0:5b:
bb:aa:20:fe:39:34:2f:5c:7d:71:f8:14:69:c3:5d:
14:df:f9:3d:8a:c9:c4:8b:71:29:5b:0f:d4:dc:11:
c5:94:2b:9c:0a:b5:f2:97:95:e8:25:5f:14:eb:cc:
59:67:f2:d3:b7:ad:98:78:26:0d:e3:4c:77:5a:c7:
c8:82:63:9b:88:a5:51:13:0c:1b:49:88:01:bd:4d:
a9:03:d8:9a:49:53:ae:cf:29:4b:eb:0d:4f:e7:be:
4a:a1:b0:b3:a6:19:ba:d1:73:13:8e:14:ce:0d:1d:
b9:f6:79:29:69:bd:7e:e7:38:34:5f:f9:7a:69:54:
47:cd:ec:7b:ba:e4:19:12:2f:75:b7:6a:e8:45:30:
26:af:c5:07:f3:fe:68:ad:2a:b8:06:73:1a:73:31:
42:4e:8e:eb:00:ff:5d:93:8a:9c:ae:14:b6:ea:fd:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:81:F9:15:2F:86:08:33:A0:33:F3:CC:D1:4B:BA:16:3C:E0:33:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/69b041-b752-482e-ba25-986dbcc7e364/1/VIH5FS-GCDOgM_PM0Uu6FjzgM9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.152.0/22
IPv6:
2a06:5880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200011
203969
Signature Algorithm: sha256WithRSAEncryption
88:b6:80:2a:a6:d2:90:2c:29:b6:81:31:94:e0:ac:e0:cf:82:
d2:d5:28:3d:1d:19:82:06:08:01:1f:af:fa:73:2f:a1:cd:4c:
b4:8d:3c:71:b3:ba:b8:1d:2f:dc:c8:3c:30:c3:e3:6b:42:97:
c9:9c:bf:f2:08:51:2b:e9:bd:c8:4f:b1:88:17:92:a7:3a:c0:
d1:eb:c0:67:b4:f9:cc:38:03:60:6a:9f:32:af:e5:5e:87:ca:
ea:09:a3:dd:67:b0:0c:3b:67:eb:81:a7:96:9c:08:84:06:ee:
f2:d9:21:18:c8:06:68:15:b1:ad:f7:ee:ff:fe:4a:ef:01:25:
9c:ae:7f:f1:ef:d6:49:d4:c5:4e:44:e5:7f:5e:9a:db:95:0a:
05:d0:49:bf:0f:9e:f3:21:9b:ae:9d:ff:a0:34:0a:f1:1f:33:
ba:a8:59:8c:a2:60:98:99:93:be:a1:25:b7:7d:d9:e5:13:45:
bb:fc:31:54:08:d1:9e:d4:20:fd:fd:52:74:b6:03:ec:71:55:
c7:75:8b:f3:ec:b5:3f:5f:6c:53:d2:6b:76:ac:4c:ff:fd:7b:
35:d7:f5:a8:72:f1:be:a8:d1:65:45:00:43:e2:80:31:63:9e:
10:d4:1e:ef:81:43:5a:b4:85:6b:7c:fa:b7:83:ba:a2:bf:99:
bd:17:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:28 2026 by rpki-client