Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.cer (raw, json)
Hash identifier:          hJPBC9JcNUH/3auXXoVeL+nhsATaDe3r3aCxUE0ZM3w=
Subject key identifier:   54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C80B00A2AC673625349EB62036C0715
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:19:27 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 50943
                          IP: 194.169.216.0/24
                          IP: 2001:678:1070::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:b0:0a:2a:c6:73:62:53:49:eb:62:03:6c:07:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:40:33:3f:31:98:e3:0e:9e:e0:06:c2:b8:
                    f6:4a:24:34:06:7c:3a:ab:e4:d9:c8:01:55:2c:41:
                    30:bb:ee:6e:ae:ef:88:34:03:99:c9:78:70:a3:f1:
                    0b:25:03:a4:af:a4:50:47:7a:6d:8b:0d:21:6f:eb:
                    59:52:c5:ce:95:38:c8:25:b7:69:ff:24:5b:a7:3e:
                    5d:e7:d9:d6:c9:ae:4c:1b:a7:b8:35:22:c6:8c:bf:
                    9e:3d:c8:fe:da:44:ee:a6:06:39:d6:0c:2e:2a:de:
                    26:9e:77:df:46:ef:91:75:e5:c9:65:d1:d7:02:ca:
                    b5:51:af:24:69:f1:41:6d:62:91:25:db:e1:71:bc:
                    ce:f9:30:b3:e6:92:60:09:20:11:9a:24:2f:10:5c:
                    bc:4b:bb:22:7d:1b:1d:fd:5e:ee:ff:5c:e1:21:4c:
                    69:72:ac:ce:2e:95:0d:4c:b4:bb:7e:db:a7:d4:1a:
                    a2:95:79:e7:d5:af:34:e5:91:e2:eb:f5:4c:59:a3:
                    a7:ba:86:48:5a:5a:92:50:78:ed:28:48:65:bf:51:
                    d3:37:62:46:2b:93:f5:3c:ea:f6:1a:69:f1:fe:ad:
                    b3:8e:3b:fb:c8:fc:62:ef:f8:fa:19:9f:5f:6b:dc:
                    4b:a6:3b:71:45:ac:e5:7d:60:77:bb:aa:4c:f0:13:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.169.216.0/24
                IPv6:
                  2001:678:1070::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50943

    Signature Algorithm: sha256WithRSAEncryption
         55:80:04:c8:1a:06:0a:d9:bd:be:f9:55:d6:8b:3d:c6:b8:59:
         a7:2c:b9:9c:94:6f:5f:43:75:c0:7e:e2:83:dc:6a:1b:d7:90:
         b1:37:cb:56:40:34:a0:91:77:44:f9:ed:67:d4:6e:4b:9a:01:
         ba:66:a8:f3:a3:23:f1:09:b1:6a:f8:5d:1a:d6:af:1e:53:c8:
         3c:c6:7c:81:21:33:6f:07:a8:58:d9:b6:41:18:3c:2b:76:42:
         d5:24:af:13:ef:0f:e3:0b:f1:38:a3:67:fe:84:f7:9c:67:93:
         04:6c:d2:09:85:f8:d6:08:9a:4c:df:11:e4:cc:ac:3f:2d:b3:
         63:eb:36:0f:df:2e:e6:18:58:38:db:89:d4:94:6c:69:ce:57:
         8a:2e:68:4c:36:7b:c5:0d:3f:ff:40:29:ed:db:74:7c:67:15:
         76:1b:2a:42:bd:30:c5:11:65:09:43:da:06:bb:c1:f1:94:8c:
         01:8b:6a:ad:9e:d1:8c:31:86:6b:be:64:26:13:fb:b0:2a:1d:
         d3:49:12:0b:2b:d9:67:fc:d1:ec:d1:ad:d5:a4:59:7d:4c:33:
         d1:a1:98:2f:eb:3e:8d:a1:e2:0f:55:92:46:59:80:a8:ea:4f:
         1e:ae:7d:03:7d:60:7b:09:e7:89:d0:b8:c6:de:25:eb:cf:8c:
         85:cb:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:46 2026 by rpki-client