Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_zVCuU4Ii793ruGzOUIxUtrvXg0.cer
File: _zVCuU4Ii793ruGzOUIxUtrvXg0.cer (raw, json)
Hash identifier: hAN95269Di5ktlQEfacLrlRV95Am5kQv4daacReaMXg=
Subject key identifier: FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E03616CB77DA5906B75C9C03205D4ADE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 07 May 2026 16:59:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205856
IP: 185.203.252.0/22
IP: 2a0b:d6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:61:6c:b7:7d:a5:90:6b:75:c9:c0:32:05:d4:ad:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 16:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff3542b94e088bbf77aee1b339423152daef5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:5a:92:92:01:fb:ad:b9:22:21:de:b5:dc:
05:a3:47:95:31:b1:4d:db:3d:fd:c7:4e:8b:d9:87:
ba:1d:1a:ac:5e:ab:28:22:e9:3b:1a:ae:da:87:95:
71:a8:4d:4b:12:fa:14:56:fb:d5:4a:47:26:2c:81:
10:d8:9e:1a:da:54:7c:20:90:cc:55:d1:00:1f:2c:
fe:9d:45:8c:e6:26:22:94:f3:23:58:7b:d6:4a:fc:
bc:30:af:26:24:44:a3:55:ed:5f:65:ef:96:06:1f:
51:88:c9:fd:1f:6f:e8:ed:fe:56:b3:ce:76:e9:63:
f4:de:66:7c:2b:10:76:c5:cc:dd:db:5f:b1:66:35:
15:e9:d7:05:9b:7c:70:89:e8:ae:06:29:df:ae:aa:
8a:d0:34:27:fb:a4:7b:fa:33:a7:0c:1e:2a:50:04:
bf:f6:41:ac:5b:e7:8b:e6:c3:0b:88:8e:d9:17:9d:
98:d1:72:a8:0b:cc:4f:e3:b6:bf:90:8b:8c:ed:70:
b8:37:94:08:ab:bf:ff:6a:96:26:d9:63:2d:76:4e:
82:f4:4a:d4:50:b4:3b:2b:37:d0:5c:ed:f0:8d:81:
4b:82:be:11:e2:2f:70:a4:ca:63:1e:ad:ce:c9:58:
21:a2:2f:af:ad:5b:d0:58:d9:97:59:ad:d6:c9:9b:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:42:B9:4E:08:8B:BF:77:AE:E1:B3:39:42:31:52:DA:EF:5E:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/550bb2-5a50-4784-8dab-3d0e9fe01bd8/1/_zVCuU4Ii793ruGzOUIxUtrvXg0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.252.0/22
IPv6:
2a0b:d6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205856
Signature Algorithm: sha256WithRSAEncryption
34:e6:fd:d4:f1:45:0a:d7:39:63:3b:51:52:25:b5:14:f3:00:
84:07:92:76:5e:7e:c7:4c:34:51:b8:90:3e:f6:35:05:b6:36:
f6:51:72:8e:65:68:06:bc:fc:99:38:eb:c8:0e:56:6f:19:88:
7b:2e:11:7d:f7:39:99:86:f1:52:d5:f7:89:ca:e5:f2:5f:e7:
af:1c:2c:4f:10:b5:7e:e2:2c:22:a0:ae:f4:6b:e7:82:d6:08:
1a:02:04:9e:9a:a1:35:5d:1a:5f:36:68:43:82:e4:1d:ba:4b:
91:d2:ca:3e:51:1c:4e:8a:0b:9e:86:b7:6e:ee:94:64:fe:e2:
09:71:c1:b1:1c:dc:04:7b:45:b9:7f:f0:22:e2:0f:60:87:4f:
31:8e:cb:85:47:ce:2d:e9:77:0b:1c:01:95:14:88:0a:83:42:
d9:1a:d4:84:71:05:9d:c1:67:0a:08:aa:b0:f4:a4:0a:ce:2a:
3f:ae:a9:0c:4b:66:c4:b7:9d:25:d1:65:06:ec:d3:d8:ed:d3:
7f:d4:6a:a7:80:6f:6c:f8:5f:d8:23:9d:18:87:3f:f5:30:53:
ab:65:57:dc:fc:36:76:d1:c8:07:90:bf:d3:a9:7f:c2:77:e9:
12:b6:04:4e:66:d1:b4:40:dd:d1:ab:2a:84:b7:02:15:57:13:
a9:08:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:55 2026 by rpki-client