Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer (raw, json)
Hash identifier: l4WtHixsojMKv68psL7TuF7ld5K/qe/ozC/WkiAYZuQ=
Subject key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BE614114B4EFCCB599D7713079A6E77AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 Jan 2026 14:20:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198068
AS: 199867
IP: 5.45.112.0/20
IP: 5.101.112.0/20
IP: 5.101.176.0/20
IP: 5.188.16.0/21
IP: 45.67.128.0/22
IP: 46.36.216.0/21
IP: 159.253.16.0/21
IP: 181.114.240.0/20
IP: 185.4.72.0/22
IP: 2a03:f480::/32
IP: 2a09:8240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e6:14:11:4b:4e:fc:cb:59:9d:77:13:07:9a:6e:77:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 14:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:9d:84:72:b4:fb:43:bf:cf:4c:6d:1b:b6:
22:6c:6a:d0:1d:11:a0:6c:a1:19:ce:75:09:1e:db:
6e:17:3b:cc:65:cb:89:06:97:14:4c:ac:0a:f1:0f:
97:70:a9:64:2a:7c:a9:f7:84:64:e5:0e:c6:47:26:
cd:99:c6:5f:e4:ec:d6:da:a4:7f:63:fc:ee:1d:d7:
16:3e:59:0a:08:fc:45:8f:5f:31:61:26:33:5a:60:
18:27:a1:01:6e:e9:a6:9b:07:db:25:3f:84:9b:3f:
5d:5e:d1:ac:e9:11:00:38:4f:b2:8a:20:2e:9a:7a:
c2:92:37:8d:96:a9:4c:c0:e0:2d:64:84:c9:7e:fe:
87:d0:6f:97:bf:20:26:c1:77:92:d7:63:ba:f0:ff:
24:38:15:6f:ef:e4:05:04:46:0d:15:e5:0e:ff:5c:
da:c9:8d:9a:94:0e:2e:ac:f0:45:5d:26:56:c4:9f:
a1:f7:cd:87:17:5b:84:05:e7:5b:a9:3d:8e:7e:eb:
81:0d:1c:94:d7:f2:f7:87:2b:06:75:9b:c4:12:29:
84:f5:e3:e3:80:a8:70:e7:ac:6c:9f:80:4e:0b:b4:
83:7f:c9:c8:af:96:b6:4f:62:ff:f2:b3:2a:f1:ae:
50:e3:13:37:93:77:ff:46:32:8e:c0:23:11:00:a4:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.112.0/20
5.101.112.0/20
5.101.176.0/20
5.188.16.0/21
45.67.128.0/22
46.36.216.0/21
159.253.16.0/21
181.114.240.0/20
185.4.72.0/22
IPv6:
2a03:f480::/32
2a09:8240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198068
199867
Signature Algorithm: sha256WithRSAEncryption
62:6e:7d:6e:56:e5:ce:0a:18:5c:13:12:10:a6:8c:67:0f:c5:
fa:05:53:a6:02:47:6a:b8:e5:1c:97:f5:44:1c:ea:99:13:78:
49:3c:6d:62:0f:12:5b:65:f0:9a:8f:5c:8f:59:bc:e1:ad:43:
2a:45:35:6b:9c:43:ed:a4:9c:c8:f4:c9:f1:40:f6:70:9e:60:
e6:15:ca:f7:81:84:75:87:e0:91:28:60:2e:1f:0f:0c:61:aa:
ac:1b:89:5e:5b:76:98:98:fb:e7:34:fe:16:bc:f2:78:78:bc:
88:ee:1e:24:05:63:c3:7b:ce:b6:c0:63:db:3d:f8:37:15:04:
fb:da:29:a4:f8:ec:00:5c:40:af:2d:0c:ac:d8:9c:3b:e0:d2:
30:b1:01:1c:d0:0e:b8:7e:ef:46:ce:ee:50:20:28:9b:8c:49:
6b:0a:a6:3c:80:dc:f3:42:44:e2:92:86:a3:52:e4:50:b7:97:
6b:1e:44:5f:b7:d0:aa:54:ef:67:38:48:35:39:a4:a6:d9:8b:
14:94:9e:34:d2:0c:8e:ef:15:a8:60:0f:bb:02:c2:33:b6:1e:
f8:ac:11:16:34:98:94:c5:ca:db:f4:af:57:b0:aa:8f:99:c1:
b0:2d:ca:d2:fd:d1:99:63:6d:67:1c:56:64:39:af:96:04:a9:
b7:94:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:17:02 2026 by rpki-client