Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
File: VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer (raw, json)
Hash identifier: KhBm7APjyh330yRoRIlzseeJkVYWCxO++6qmFYYFBGk=
Subject key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C28D1F56115FB1A0E22D582B78FE2F861
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Feb 2026 13:22:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208115
AS: 210413
AS: 212756
IP: 45.157.52.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:d1:f5:61:15:fb:1a:0e:22:d5:82:b7:8f:e2:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 4 13:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:aa:cd:a1:d3:dc:c3:e4:be:21:6e:ce:02:
ae:85:65:b0:c5:5c:cc:75:e6:14:a5:f0:ca:cf:b5:
3f:83:0a:15:7b:27:12:e6:d6:61:0e:89:54:5e:85:
40:83:c0:d6:55:78:5f:e1:5a:71:4f:c4:b7:83:e3:
f2:9e:23:1d:d4:9b:e2:bb:38:b5:20:57:9a:28:c3:
a7:40:56:ad:0a:5c:b4:dc:ce:5b:9a:18:bd:d3:9e:
32:3f:a5:fe:88:de:05:be:b3:02:12:37:84:a2:0e:
a9:0c:27:81:72:9c:3b:2c:8d:80:c3:26:2f:c5:f5:
c4:74:4f:02:92:38:ed:d3:a1:f1:bb:68:d0:8f:31:
34:a2:b2:45:90:46:b3:4a:12:54:ee:d1:80:f7:8d:
ea:f8:8e:55:ce:17:72:87:22:80:23:51:d1:0e:40:
16:6a:fc:9b:83:ce:aa:35:67:2e:f6:f5:a4:ad:c0:
9f:b0:a9:e2:72:78:8c:c8:70:59:ec:b6:65:3d:5f:
b2:00:09:1a:fc:2d:71:2d:55:96:18:02:6e:5a:f9:
bd:cf:9f:4a:07:eb:aa:4f:cc:b2:0a:f4:69:56:f6:
5b:4c:65:02:04:b5:48:c2:f6:9b:a9:ca:89:0c:f5:
c1:68:a7:9f:7a:e7:ce:a8:9c:82:cc:6b:d6:93:fa:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208115
210413
212756
Signature Algorithm: sha256WithRSAEncryption
9f:d8:73:a8:71:7f:f4:aa:34:b2:a0:aa:eb:e0:d2:30:20:90:
45:47:25:20:8f:45:d3:81:27:8a:28:13:d6:ce:2a:d5:0d:b9:
d6:07:ef:88:7f:1a:da:0f:fc:09:b7:1b:35:60:29:4d:0f:27:
4f:1f:2f:40:af:0b:ae:e9:aa:62:ae:b7:eb:65:ad:df:70:c0:
83:0e:f0:73:7d:1b:12:e5:ba:3c:fb:6b:12:e3:c4:91:17:c5:
a6:6e:9f:6f:90:d0:dd:05:28:94:11:78:4e:a6:3a:71:f1:b4:
ac:bf:85:dc:5c:ba:f1:66:f8:ac:d4:a0:46:10:ea:d3:5b:dc:
11:d8:f1:da:c0:fe:32:cd:5c:42:56:75:e3:90:98:d1:44:e0:
88:bb:90:7c:87:4a:11:ba:b7:7f:8f:98:35:d2:32:16:f9:b7:
ed:25:2f:68:24:21:e6:1a:23:c5:7f:11:92:0d:24:c3:77:ef:
20:d1:f1:e4:b9:a5:b6:37:9e:df:1e:b4:af:70:78:d8:d5:a3:
0f:49:0d:24:7f:9c:8a:c2:d1:f2:48:e9:82:3c:ca:32:ae:ad:
85:9c:43:c4:56:b7:32:fe:f8:e2:d6:e4:e0:2a:fb:c0:a9:43:
b1:1a:56:c1:f3:1a:c4:f5:36:c5:eb:41:d4:56:04:75:d1:c7:
ae:ff:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:36:58 2026 by rpki-client