Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
File: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer (raw, json)
Hash identifier: tGV0qLzL1n0KZcqyWMbPcUOneG7hnKmr9DRZBqClrpM=
Subject key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FACDBCAF0677E09FDEA9485F8D0FC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34756
AS: 44155
AS: 44935
IP: 45.15.12.0/22
IP: 77.95.96.0/21
IP: 91.194.136.0/23
IP: 176.58.24.0/21
IP: 185.47.236.0/22
IP: 193.138.109.0/24
IP: 195.114.12.0/24
IP: 195.230.110.0/24
IP: 2a03:fc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:cd:bc:af:06:77:e0:9f:de:a9:48:5f:8d:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55167557894686ee0c8727b961cc4b9230005f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:64:c0:e1:f2:d3:e6:2b:08:01:13:be:c2:
6a:04:c0:35:45:a5:4c:b3:c0:bb:2b:cc:83:b3:a2:
75:a4:2b:48:14:a0:18:84:14:d1:76:10:4c:73:2d:
9f:54:e3:5c:ae:2a:43:fa:30:1b:8e:f9:e7:06:c7:
04:a6:13:9e:63:0c:dd:50:87:a0:6f:f8:71:82:02:
28:76:50:3e:41:04:c4:32:08:d5:dc:c6:8e:09:b1:
dd:9c:18:5e:15:c8:4c:e0:08:f4:df:1f:85:8c:ae:
e3:56:44:e3:17:9f:0a:ff:10:1d:fd:c5:2f:9f:5b:
7d:d8:71:64:1b:a1:4f:31:ed:9e:23:b3:f1:74:54:
dd:5f:8d:20:4e:03:98:dc:ad:2f:a0:15:c3:04:f3:
d6:66:2a:38:c7:16:77:8a:6c:52:3e:b6:19:bb:76:
5d:db:62:35:02:31:71:bb:4a:0f:9e:af:04:b8:7d:
44:27:0c:15:8f:ba:2b:35:29:81:6c:aa:d7:8c:9f:
0a:57:4b:00:9c:e2:e9:f1:c9:b7:5b:f0:87:34:f3:
e3:d3:fc:57:3c:67:20:1e:19:72:b2:8b:de:77:1e:
2e:93:23:90:fa:7b:7f:c7:2d:58:db:1d:1a:7c:bd:
e0:37:1a:08:6f:81:91:60:51:60:77:ce:66:db:16:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.12.0/22
77.95.96.0/21
91.194.136.0/23
176.58.24.0/21
185.47.236.0/22
193.138.109.0/24
195.114.12.0/24
195.230.110.0/24
IPv6:
2a03:fc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34756
44155
44935
Signature Algorithm: sha256WithRSAEncryption
36:37:6c:29:40:59:e4:ee:a1:12:51:7c:23:3e:51:0f:1d:08:
fe:c4:01:f7:4e:f5:f5:8a:fe:18:4b:71:ee:8c:27:47:e6:30:
4a:44:b5:c8:03:db:34:27:7a:72:cc:77:29:5b:38:ba:f1:06:
4b:b3:5b:cf:2f:b9:69:e3:cf:08:b3:31:9a:4b:bd:d2:26:78:
39:3f:20:38:d7:f8:dc:9a:ac:c2:5a:8e:fd:16:32:cf:0d:07:
b5:e0:b3:61:3e:e0:b9:d6:22:14:a2:6d:9e:7a:ce:6e:c2:a5:
ef:eb:6d:75:6f:61:01:8a:e1:ef:37:7f:4f:ef:3a:49:93:1f:
ac:4b:6d:f7:5c:44:85:dc:ea:15:e0:83:d5:e9:6e:5c:81:90:
c4:83:08:b9:b6:a8:21:1a:29:b3:f9:4f:5a:c0:2f:66:6b:02:
db:36:d2:71:07:b5:c8:45:32:ad:ec:82:51:dd:43:ba:a0:21:
cb:a6:78:72:19:86:66:07:0b:a9:fc:25:36:a0:ee:15:17:0c:
f0:42:e3:c3:4e:9c:ee:c3:3f:5e:cf:af:d9:87:95:b7:b9:22:
6e:d5:c0:9d:61:6a:8d:2a:50:af:69:ca:10:4d:aa:3d:01:82:
5c:cb:69:29:55:18:0c:af:16:3c:28:ab:b4:af:58:b6:7f:df:
31:66:20:47
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgISAZ8Y+s28rwZ34J/eqUhfjQ/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTE2NzU1Nzg5NDY4NmVlMGM4NzI3Yjk2MWNjNGI5MjMwMDA1ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFkwOHy0+YrCAETvsJqBMA1RaVM
s8C7K8yDs6J1pCtIFKAYhBTRdhBMcy2fVONcripD+jAbjvnnBscEphOeYwzdUIeg
b/hxggIodlA+QQTEMgjV3MaOCbHdnBheFchM4Aj03x+FjK7jVkTjF58K/xAd/cUv
n1t92HFkG6FPMe2eI7PxdFTdX40gTgOY3K0voBXDBPPWZio4xxZ3imxSPrYZu3Zd
22I1AjFxu0oPnq8EuH1EJwwVj7orNSmBbKrXjJ8KV0sAnOLp8cm3W/CHNPPj0/xX
PGcgHhlysovedx4ukyOQ+nt/xy1Y2x0afL3gNxoIb4GRYFFgd85m2xarCQIDAQAB
o4IC4zCCAt8wHQYDVR0OBBYEFFUWdVeJRobuDIcnuWHMS5IwAF84MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzRlMjgw
OC1lOGY0LTQyYTctYTgyNy03YWJjZTYwMGMyMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNGUyODA4
LWU4ZjQtNDJhNy1hODI3LTdhYmNlNjAwYzIxOC8xL1ZSWjFWNGxHaHU0TWh5ZTVZ
Y3hMa2pBQVh6Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF
BwEHAQH/BEkwRzA2BAIAATAwAwQCLQ8MAwQDTV9gAwQBW8KIAwQDsDoYAwQCuS/s
AwQAwYptAwQAw3IMAwQAw+ZuMA0EAgACMAcDBQMqA/wAMCQGCCsGAQUFBwEIAQH/
BBUwE6ARMA8CAwCHxAIDAKx7AgMAr4cwDQYJKoZIhvcNAQELBQADggEBADY3bClA
WeTuoRJRfCM+UQ8dCP7EAfdO9fWK/hhLce6MJ0fmMEpEtcgD2zQnenLMdylbOLrx
BkuzW88vuWnjzwizMZpLvdImeDk/IDjX+NyarMJajv0WMs8NB7Xgs2E+4LnWIhSi
bZ56zm7Cpe/rbXVvYQGK4e83f0/vOkmTH6xLbfdcRIXc6hXgg9XpblyBkMSDCLm2
qCEaKbP5T1rAL2ZrAts20nEHtchFMq3sglHdQ7qgIcumeHIZhmYHC6n8JTag7hUX
DPBC48NOnO7DP17Pr9mHlbe5Im7VwJ1hao0qUK9pyhBNqj0BglzLaSlVGAyvFjwo
q7SvWLZ/3zFmIEc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:55 2026 by rpki-client