Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
File: Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer (raw, json)
Hash identifier: sNhr04vQY+dAplDGc70EgoF6uzKTUtlhAEkNXeMV/c4=
Subject key identifier: 56:2E:3E:E9:19:37:12:90:42:43:7A:74:1C:B5:B5:A0:C3:EA:9F:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D428C57F65CA2D4D70416BC147FF9DFCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Mar 2026 06:19:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213731
IP: 185.210.230.0/24
IP: 2a14:a800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:8c:57:f6:5c:a2:d4:d7:04:16:bc:14:7f:f9:df:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 06:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=562e3ee91937129042437a741cb5b5a0c3ea9f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:38:6e:bd:0e:b0:8f:59:da:51:a9:92:81:
6c:b2:8c:61:18:c7:36:8f:a1:ac:72:46:33:e9:9a:
a3:4d:e1:b7:a9:ff:47:b1:b1:6f:bf:6e:50:79:5b:
ef:b8:1d:74:b0:60:71:c3:51:03:95:7f:4b:a1:32:
71:ab:de:25:9d:5b:54:0a:31:4c:09:3d:3e:6c:ea:
2c:57:bc:a2:c2:a3:bf:36:e4:99:cf:5a:98:61:89:
b3:5a:67:1f:34:25:f6:ce:d3:56:63:d0:b4:5b:e9:
69:7b:ff:c2:66:69:28:f6:17:f6:aa:d7:56:76:98:
d3:f1:80:92:3f:b7:12:44:45:ae:98:0c:ce:a1:79:
a0:ce:63:f0:9f:fe:21:69:89:db:09:85:74:3a:8c:
3d:f4:5b:84:b1:f1:34:bb:c5:ff:25:53:3e:c0:a2:
33:56:52:74:b9:0e:f4:21:1c:b3:74:9f:bd:81:c8:
66:43:40:22:b1:31:66:cb:74:e1:ad:02:69:06:38:
8e:4e:72:8f:dd:37:c2:29:0a:17:69:95:99:7b:8c:
10:7c:66:41:19:ff:4f:4b:7c:94:f9:70:7e:e1:aa:
a4:89:db:9e:77:03:ba:c7:81:aa:53:06:f0:45:9e:
af:32:02:9b:73:b5:5b:a1:10:8f:af:73:81:bf:cb:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:3E:E9:19:37:12:90:42:43:7A:74:1C:B5:B5:A0:C3:EA:9F:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.230.0/24
IPv6:
2a14:a800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213731
Signature Algorithm: sha256WithRSAEncryption
56:86:f6:d2:b0:66:75:5b:72:a5:65:50:26:b1:f8:1f:7e:e4:
53:eb:af:cb:22:d4:69:91:45:96:f7:76:11:3a:4a:4a:6d:6d:
61:6f:e2:90:4d:13:4a:15:ee:26:e7:6c:ed:bb:9d:3e:c6:fd:
78:fa:17:7b:9d:2e:41:ee:dd:6a:3d:ca:5b:f2:20:60:19:15:
0b:8f:d9:50:2c:15:31:2e:39:f6:29:a5:77:39:80:2b:6e:ab:
0a:f5:94:cf:56:8c:59:a2:c4:ff:10:da:61:a7:a3:26:ce:af:
43:ff:f2:ce:52:89:0b:9d:44:3a:69:2a:58:30:86:83:14:1f:
c1:c0:72:e0:3e:5f:86:3a:9d:11:d5:12:bb:d2:89:e1:60:19:
81:17:20:d8:2a:18:85:74:31:e2:67:46:d8:a0:73:8d:51:fe:
d3:b0:86:85:dc:62:37:4d:7c:93:b1:97:95:96:94:66:7b:01:
56:93:bd:79:a2:6b:1d:58:e8:a1:cb:ea:ae:05:ba:56:49:a3:
14:d5:28:18:6f:ed:42:e9:2c:d3:0f:05:4a:d2:b2:71:18:30:
c3:46:88:21:5f:b9:e1:64:58:87:7f:a6:aa:c1:0e:72:de:18:
ba:22:05:a4:cb:c9:1d:f9:68:87:7a:91:79:11:41:ab:8e:a2:
dd:d8:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:03:22 2026 by rpki-client