Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.cer (raw, json)
Hash identifier:          BIsARWj56N0axwpyK+zswxUZbDn2KhGAJID0ghosJ2k=
Subject key identifier:   55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F8315F09D6C49C50C8D53C90B924FEC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:20:55 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 16210
                          AS: 16297
                          AS: 200542
                          IP: 185.100.236.0/22
                          IP: 217.18.96.0/19
                          IP: 217.118.0.0/20
                          IP: 2001:8d0::/29
                          IP: 2a00:aa20::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:15:f0:9d:6c:49:c5:0c:8d:53:c9:0b:92:4f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:20:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:4d:cf:37:26:de:22:09:46:9f:b7:93:b5:
                    03:1a:a2:d6:fc:0f:cd:6a:96:e3:12:0d:ad:c6:0c:
                    4c:f3:39:7e:4a:a7:ff:b5:75:2d:8a:4f:b2:5b:95:
                    1b:77:01:07:d6:81:8c:5a:d6:bb:9e:00:67:fa:c1:
                    95:7f:1e:c3:5d:cb:90:28:f3:51:70:83:6a:c2:b5:
                    7c:01:f5:5d:84:07:1c:91:d1:68:e7:86:09:eb:85:
                    e7:1e:aa:02:44:1b:92:bd:a8:cf:8d:70:0b:60:da:
                    26:32:61:2c:23:07:eb:94:18:52:a8:4b:00:0b:83:
                    e0:3c:3a:5f:83:53:2e:75:03:53:7a:3d:96:a0:e9:
                    4d:5b:9f:83:88:ed:84:1d:3b:f6:f0:16:5e:3f:94:
                    d8:17:fb:69:dd:bb:1d:50:fe:ff:5a:bc:7b:0f:05:
                    a0:77:8e:29:44:c0:59:63:70:85:64:b1:00:98:2c:
                    c3:bc:e3:5a:12:fb:52:d2:57:1b:2b:14:f8:79:c8:
                    2f:29:80:e0:9d:58:92:69:71:35:ab:95:96:57:61:
                    ef:b8:9c:c0:63:1d:2c:ef:25:9a:89:86:10:d9:b9:
                    91:ee:91:19:f5:46:fc:54:36:bf:63:88:7b:e3:15:
                    2f:29:d4:cc:95:21:7c:3c:87:d5:37:ee:39:2d:dd:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.236.0/22
                  217.18.96.0/19
                  217.118.0.0/20
                IPv6:
                  2001:8d0::/29
                  2a00:aa20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16210
                  16297
                  200542

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:40:45:37:9e:3b:23:75:14:68:1c:17:ad:38:e2:c8:19:
         25:87:37:82:5c:67:40:5b:49:b0:43:b0:e0:5f:66:8b:46:69:
         9e:a7:e3:78:7e:5d:10:1a:10:fe:c0:88:68:e4:6f:99:2c:85:
         57:12:57:d0:4a:84:be:66:b0:8b:da:0c:44:13:be:af:5a:40:
         fd:7b:a9:45:32:51:15:b2:14:98:6e:1a:49:11:38:f1:62:5a:
         a0:3b:7c:a3:c0:64:05:9c:5b:1d:c4:e1:d5:60:2b:6e:51:84:
         99:6f:2a:fa:b5:46:e5:02:7d:2b:ef:45:f1:b8:b4:a6:0a:48:
         d0:b5:3d:58:27:f4:85:6b:2c:86:0b:c8:84:32:68:91:9a:88:
         63:bc:24:27:39:0b:f6:d2:0a:b9:85:9a:bb:2d:31:f7:12:f5:
         50:e4:cb:dd:70:44:53:f4:4c:86:97:49:7e:83:c1:4c:6a:f9:
         15:de:56:b8:ce:67:c9:7c:a6:7b:85:4f:10:1a:27:ee:7b:e2:
         1f:14:3d:a6:c7:8c:24:b7:33:fd:c3:c8:f8:81:c6:9c:a5:c7:
         01:5a:f4:ec:10:4c:46:f2:e1:67:37:dc:d4:ce:b7:f8:39:8e:
         9a:52:df:87:66:a1:f9:73:1f:ed:bc:d8:1e:5b:64:9c:8c:63:
         25:13:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:09:28 2026 by rpki-client