Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer (raw, json)
Hash identifier: v3dK+2uFa9YmaxsbkMtrdOHu9iI0aMsDZMgPDpNTPjg=
Subject key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB3F08147C16B0F5BE272985312BC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215333
IP: 91.90.163.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:3f:08:14:7c:16:b0:f5:be:27:29:85:31:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=559a769412d2d963b491ebe31d44111dcafccc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:46:3d:68:9f:d2:b5:fb:d8:33:5c:2c:6d:
ca:26:9e:ee:57:f2:65:6c:86:0b:05:d2:ba:d0:37:
ba:b5:26:50:a5:10:74:46:ef:d6:e2:b8:cf:76:c3:
c9:bc:10:1c:3e:34:b2:1f:19:28:56:96:78:06:cd:
1e:fa:32:03:ac:55:43:17:2a:28:53:b3:66:18:88:
83:f6:a1:8a:d1:e4:c3:3f:35:1c:2e:be:9d:b4:35:
ce:8b:4d:a8:64:8a:17:58:f3:f1:71:92:85:f1:72:
cd:af:60:40:d6:5f:79:f3:43:8c:f0:98:9a:df:47:
89:2c:c0:1b:25:87:e8:4c:8e:17:88:ff:58:4c:4c:
20:66:55:e2:7a:5c:bd:e6:cb:46:20:8b:df:00:cb:
d0:e8:2c:f8:18:ee:c6:d8:ae:91:1f:d9:a1:9e:6a:
06:04:1a:33:81:43:74:06:7a:21:57:28:9e:58:9e:
aa:65:52:a3:19:ec:60:b7:68:ba:eb:95:f7:e7:2d:
3b:bc:48:44:f2:45:04:d6:38:7f:73:1c:53:e4:ef:
59:aa:f4:41:33:32:86:1b:e0:bd:3b:5c:bb:e8:29:
21:c6:ca:15:09:cf:37:c9:f3:cb:96:02:6f:70:44:
cd:08:cb:ca:05:b6:9e:d8:e2:1d:9a:b0:4a:c8:8d:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.163.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215333
Signature Algorithm: sha256WithRSAEncryption
90:b0:94:e6:c3:51:33:7c:80:2d:c3:a1:33:26:15:07:f7:38:
63:74:e2:c2:a8:d6:0d:48:6d:5b:c0:4b:12:b8:11:47:33:1e:
bc:b4:98:a1:c0:3a:32:c8:cd:56:d1:f5:f0:31:9d:dd:cc:6a:
93:80:07:0f:61:ff:c5:44:78:e0:15:52:26:6b:89:d7:61:9d:
4c:0d:d4:84:7f:48:55:a7:1d:a3:42:e3:8b:78:58:1e:56:f9:
98:0c:fb:56:e9:f0:ac:fe:7f:62:b2:1e:c1:11:4f:a9:b3:97:
39:5d:ee:31:c8:a1:bd:d1:e9:0e:11:99:27:29:2a:82:96:d5:
3a:fe:40:1a:6c:4c:92:71:57:62:90:ac:39:1d:bf:2b:5a:1c:
41:c5:d5:07:18:d9:43:a4:9b:a9:3d:eb:b6:8c:32:b8:4a:38:
58:29:fc:37:b2:00:e6:81:3d:0e:e1:3a:d8:2b:63:9d:e3:df:
65:75:44:51:9f:36:6d:d1:18:51:21:9c:7f:aa:78:93:63:58:
f9:37:ef:29:28:35:e3:df:2c:56:98:db:85:14:1c:b7:8f:6c:
94:16:10:70:2a:5f:d0:3f:7f:7b:37:39:44:9c:5f:4f:fb:d3:
51:5c:d2:ff:09:a3:fe:93:86:e0:48:f3:95:5d:96:96:75:54:
a1:e9:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:53 2026 by rpki-client