Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
File: VZhirROQ5Nv4grUie8kzUPLYBxM.cer (raw, json)
Hash identifier: sly3x0Izf0UihbJVQMwc8brDftIT4pD94eQWo42Fw3Q=
Subject key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A35F3BE62F49595B31D39701C47BA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204769
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:5f:3b:e6:2f:49:59:5b:31:d3:97:01:c4:7b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:51:8c:19:51:8e:fa:17:e4:76:1c:13:f0:
e8:57:f3:d9:39:30:66:16:90:7d:f4:d0:67:32:8c:
8e:96:02:bd:ec:8d:30:7f:93:98:12:15:6a:20:d5:
8b:78:56:f0:0b:a5:2f:68:0e:a1:6a:42:a0:9b:aa:
2e:74:b2:f5:18:3d:23:49:75:6c:19:0c:aa:17:be:
8e:b6:75:de:14:3b:ef:a5:d3:d4:6f:09:61:c3:e1:
5e:fa:41:db:d2:df:4c:4b:67:38:ca:b8:87:e8:73:
71:ed:5f:12:5a:41:24:85:86:96:98:4f:d9:d4:49:
06:ba:0d:41:a2:ef:0c:7b:df:73:81:78:c4:f7:e2:
cc:31:ac:9a:f3:4e:5e:1e:82:82:59:f1:f6:4d:2b:
c5:aa:0d:c6:09:ca:25:0b:f1:0c:cf:31:5c:f5:a9:
51:f3:09:73:a9:24:2f:d2:eb:b3:9e:f8:85:bf:36:
e4:a1:f6:f5:3e:7e:dd:c9:2c:50:cd:49:3e:f0:29:
f1:de:c1:1d:76:5e:52:6c:70:01:f2:87:9b:80:cd:
6b:5d:fa:73:cc:a2:31:70:4f:9c:b2:af:72:ac:16:
e4:64:02:b4:ce:b8:04:e9:3a:a1:2b:74:b0:33:6d:
5b:8f:02:07:07:af:8e:62:b0:1c:5b:b8:a6:b9:61:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204769
Signature Algorithm: sha256WithRSAEncryption
78:ca:a2:6a:40:da:e7:ae:53:b1:c6:fa:dc:8f:af:16:dd:cc:
ad:0a:a3:3f:17:43:34:b5:20:91:83:f9:92:da:2c:6b:b4:ac:
0e:9a:3d:bb:53:02:c0:5a:08:fb:93:48:cb:49:d4:89:cc:7d:
8f:07:fd:d5:c2:7b:62:2f:31:23:12:40:f5:bb:73:a5:7f:81:
8b:c6:fc:bb:ba:47:cb:8f:48:fd:de:8c:ba:aa:b3:99:99:2b:
60:c5:13:6b:08:0b:c6:bc:fc:f7:3b:3a:5b:0c:b5:de:79:fa:
b5:1c:c8:b3:40:20:77:c9:bd:69:04:50:b3:ab:0d:8a:5a:2f:
a6:15:da:a9:2c:9d:19:73:78:ec:df:31:35:e3:78:39:b3:d6:
36:87:ce:54:77:65:7f:1f:c0:4e:9c:ae:3e:42:47:70:ac:16:
ea:28:66:0e:b7:e3:03:3e:48:ea:8a:52:da:c3:b0:60:63:b8:
94:0d:bb:ab:14:79:50:46:7a:cc:ef:ac:79:a3:aa:e7:28:86:
38:95:3c:46:f7:bd:9e:3a:92:d8:9d:50:19:ef:97:a5:a2:be:
b4:ee:f2:4d:44:1c:a5:0e:91:f6:0d:08:8e:a7:ef:65:ad:5d:
5b:44:2d:5f:69:56:96:40:d8:67:c5:04:ee:44:d3:55:46:f4:
78:2d:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:22 2026 by rpki-client