Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VuQeJgHcL651xob7L5f8EZqZM9U.cer
File: VuQeJgHcL651xob7L5f8EZqZM9U.cer (raw, json)
Hash identifier: wtmqEGeQpQkNmRrRQcZ1vUgY9jax4G5HFMF4XyczJA8=
Subject key identifier: 56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAAB88469C447FDF09EF832393CA26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 5.253.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:ab:88:46:9c:44:7f:df:09:ef:83:23:93:ca:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56e41e2601dc2fae75c686fb2f97fc119a9933d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:8e:20:4a:bb:4a:bb:79:0d:15:db:47:d9:
cc:e0:cb:38:4f:00:fc:25:ec:a1:48:60:46:73:50:
ff:01:77:69:62:e6:52:23:88:27:5f:1d:f7:cc:8d:
84:91:5f:b9:9d:0e:64:21:d7:8a:fe:4e:27:05:c9:
31:60:0f:4b:a8:01:58:18:82:a6:d6:8d:2b:6d:bf:
67:9d:cd:c5:d0:ec:24:aa:46:5f:7e:c8:e2:a4:d7:
0f:bc:33:09:14:8a:00:c2:91:83:1c:ca:b7:ed:bf:
ad:19:26:9a:cf:86:36:61:d7:7f:20:58:e5:87:f2:
62:67:c0:b2:3e:61:98:9e:cb:fe:a0:90:0c:95:e1:
32:ac:68:ad:d3:ae:f2:f9:a0:9a:fe:4f:da:bc:04:
91:a2:31:af:96:87:04:cc:55:c8:62:9c:3d:20:b3:
3f:7d:db:ba:f0:c2:e2:3d:09:99:69:e7:0c:9c:51:
75:14:4b:12:0f:1d:03:d7:9f:eb:bf:69:30:61:dd:
13:0e:2f:7b:93:b6:a0:0f:7b:50:8f:74:27:79:a4:
4b:ef:04:2b:81:f7:64:c5:60:c3:0c:5d:9e:b5:ab:
a5:32:c1:3d:1f:40:28:2a:c4:06:1a:d4:68:82:33:
a5:58:e6:2a:ea:19:cf:17:f3:0d:8e:20:0b:76:71:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:1E:26:01:DC:2F:AE:75:C6:86:FB:2F:97:FC:11:9A:99:33:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/VuQeJgHcL651xob7L5f8EZqZM9U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.196.0/22
Signature Algorithm: sha256WithRSAEncryption
36:34:8c:b9:02:05:c8:86:1a:6b:fd:0e:03:fc:7e:3c:c3:6e:
b0:96:5a:e3:db:0f:aa:1a:f9:8b:f9:8d:76:ec:5e:43:f4:c7:
26:32:a1:c7:7e:61:51:d8:8f:79:40:a8:0d:1c:f1:93:b9:74:
ab:5b:18:ff:3d:24:1e:e1:2c:04:98:06:69:51:fd:c1:eb:8e:
60:a7:b3:52:d4:07:13:54:fd:dd:06:bb:1f:bc:3e:ca:f0:35:
35:44:4f:5f:10:f6:85:49:72:b0:07:8c:2f:80:48:30:11:b7:
f5:dd:5b:da:31:ed:a1:3e:73:6b:87:af:5e:cb:a3:bc:e4:a0:
17:07:9d:1b:70:7d:66:a6:96:58:1a:c3:bb:ea:7a:f4:80:30:
9d:49:15:c7:a4:23:86:74:81:0e:42:d5:a5:c8:75:f4:58:7b:
aa:4e:fa:b6:42:a4:fa:3d:df:ee:91:21:f6:65:c5:40:24:35:
97:27:fb:6a:48:4c:26:db:eb:da:02:96:7d:e9:8f:a0:6f:9d:
92:4b:5b:5b:c3:f5:a3:11:36:47:41:d0:e1:84:81:69:cc:8a:
a3:ff:47:8f:2f:e0:34:00:99:7e:3f:60:d8:f9:6c:58:0f:ca:
3f:b5:89:71:55:15:74:9f:26:a2:92:84:f5:95:55:a6:e7:5f:
52:9c:07:4a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ8Y+quIRpxEf98J74Mjk8omMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmU0MWUyNjAxZGMyZmFlNzVjNjg2ZmIyZjk3ZmMxMTlhOTkzM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2eOIEq7Srt5DRXbR9nM4Ms4TwD8
JeyhSGBGc1D/AXdpYuZSI4gnXx33zI2EkV+5nQ5kIdeK/k4nBckxYA9LqAFYGIKm
1o0rbb9nnc3F0OwkqkZffsjipNcPvDMJFIoAwpGDHMq37b+tGSaaz4Y2Ydd/IFjl
h/JiZ8CyPmGYnsv+oJAMleEyrGit067y+aCa/k/avASRojGvlocEzFXIYpw9ILM/
fdu68MLiPQmZaecMnFF1FEsSDx0D15/rv2kwYd0TDi97k7agD3tQj3QneaRL7wQr
gfdkxWDDDF2etaulMsE9H0AoKsQGGtRogjOlWOYq6hnPF/MNjiALdnGXJQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFbkHiYB3C+udcaG+y+X/BGamTPVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2E2ZGVm
MS1mNDI1LTQ5YTUtYWFhZi0wN2NiZWRkZDY0MTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvYTZkZWYx
LWY0MjUtNDlhNS1hYWFmLTA3Y2JlZGRkNjQxOC8xL1Z1UWVKZ0hjTDY1MXhvYjdM
NWY4RVpxWk05VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCBf3EMA0GCSqGSIb3DQEBCwUAA4IBAQA2NIy5
AgXIhhpr/Q4D/H48w26wllrj2w+qGvmL+Y127F5D9McmMqHHfmFR2I95QKgNHPGT
uXSrWxj/PSQe4SwEmAZpUf3B645gp7NS1AcTVP3dBrsfvD7K8DU1RE9fEPaFSXKw
B4wvgEgwEbf13VvaMe2hPnNrh69ey6O85KAXB50bcH1mppZYGsO76nr0gDCdSRXH
pCOGdIEOQtWlyHX0WHuqTvq2QqT6Pd/ukSH2ZcVAJDWXJ/tqSEwm2+vaApZ96Y+g
b52SS1tbw/WjETZHQdDhhIFpzIqj/0ePL+A0AJl+P2DY+WxYD8o/tYlxVRV0nyai
koT1lVWm519SnAdK
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:44 2026 by rpki-client