Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer
File: VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer (raw, json)
Hash identifier: iToqcfayz01F25NPV8bgSl3LtKblNKujSm5DW9+emjY=
Subject key identifier: 54:F8:4E:89:7F:64:59:AD:50:A7:FA:3D:B6:35:94:B0:17:62:BD:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C9BB3F03FD2521595C7DC3C284C45794
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 15:28:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48806
IP: 194.5.24.0/22
IP: 2a0c:aec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:bb:3f:03:fd:25:21:59:5c:7d:c3:c2:84:c4:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 15:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54f84e897f6459ad50a7fa3db63594b01762bd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:1c:69:7d:25:97:63:b4:30:c4:ae:36:4a:
79:3e:76:d2:4d:56:23:93:97:d2:25:83:6f:39:38:
f0:d9:7d:28:91:d0:aa:9c:86:61:18:c6:50:9a:af:
08:99:e3:d0:42:a2:2b:7d:f3:3f:00:c6:71:c7:08:
c7:b6:9e:c9:25:01:40:6a:f9:7e:4d:b0:2e:2b:f1:
ea:01:67:c8:5a:42:06:3e:2a:3a:6f:b3:c6:c5:23:
3e:26:88:a8:70:0d:eb:9d:ae:ce:ab:1b:39:65:4b:
91:d9:b4:84:bd:74:d6:ad:af:85:1f:2e:84:9b:8c:
f7:41:7f:18:87:c5:8e:a7:55:ec:a9:57:85:85:93:
ab:ec:a0:44:97:16:5f:ce:d0:5d:e9:5c:a4:0c:26:
ae:59:a9:74:2d:31:d2:f4:65:a7:1b:0b:56:7e:07:
c8:b6:71:a9:e8:8d:09:3a:9e:ac:6a:df:23:49:ab:
3e:14:e3:33:5b:bc:9c:8f:e1:0d:f7:1a:bb:7e:26:
86:55:5f:bb:1c:b8:19:72:92:d4:f0:a1:fe:c7:75:
6e:10:6a:5f:ef:2b:7e:6c:1e:75:03:08:65:83:f9:
25:6f:c7:9e:56:65:ba:a9:a2:16:fd:e6:8a:de:e3:
00:cf:b8:ed:9d:2a:85:3e:0a:e0:d1:ea:dc:ed:21:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:4E:89:7F:64:59:AD:50:A7:FA:3D:B6:35:94:B0:17:62:BD:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.24.0/22
IPv6:
2a0c:aec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48806
Signature Algorithm: sha256WithRSAEncryption
25:21:6d:e9:c7:7d:b6:35:7a:56:ed:56:20:d0:c9:31:c9:c6:
49:41:d5:27:ba:29:de:57:9f:5e:75:68:f6:09:af:5a:fb:54:
13:6a:88:49:5e:1e:1d:91:05:67:fe:e9:18:38:06:b9:21:39:
3c:af:10:78:95:97:54:61:7e:28:df:ba:ef:0a:42:df:ad:75:
08:68:8b:e8:aa:7b:91:80:66:61:54:82:9c:56:2f:e6:f0:62:
0d:06:17:b9:9a:c1:6f:3b:1e:f1:b6:bf:cb:72:7e:c3:8e:b2:
51:0b:10:51:f8:96:eb:f3:44:2b:72:ad:7b:fa:40:87:07:da:
9c:6f:be:bc:8c:d1:f1:81:21:5e:08:3e:66:bf:31:23:c7:70:
5f:52:5d:ad:ae:30:e5:e1:fb:39:c0:59:09:08:f0:6a:00:1f:
fb:e9:2b:c2:63:e8:0e:2c:b2:31:9e:64:6a:5c:e6:7f:9f:81:
60:b5:4d:a3:f7:69:5f:d5:f3:66:8e:0c:d4:1e:ae:43:62:bf:
84:76:97:25:e8:c0:7f:0f:3e:7b:29:4f:a9:32:57:1e:d6:b1:
b8:95:8f:ce:82:1b:86:c2:0f:9a:a1:4d:28:6f:07:06:63:54:
6f:8c:c8:eb:06:e0:23:c3:e0:1f:27:d0:6a:1c:ac:75:3f:25:
64:56:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:50:45 2026 by rpki-client