Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
File: vQQTxuRIJSdlFDEhETiDjhM4VN4.cer (raw, json)
Hash identifier: G3+Vo2QQathMZDw+Hb4udu/VGLwrmbquQFOfEn5uqec=
Subject key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D237CA6EAA4E56A96AAE3B07E72C62D28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 25 Mar 2026 05:34:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200841
IP: 2a13:7cc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:7c:a6:ea:a4:e5:6a:96:aa:e3:b0:7e:72:c6:2d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 05:34:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0413c6e4482527651431211138838e133854de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:c5:57:04:ab:c3:75:50:6f:ac:e0:e2:46:
6c:00:6a:11:96:6b:04:f3:dd:33:c0:35:cc:b1:5a:
89:e3:75:05:86:2b:33:64:2b:d8:10:89:69:8f:88:
3e:15:f9:00:8e:83:be:65:71:3a:68:ac:a9:68:c6:
2b:70:21:68:6b:a0:6e:f4:6a:72:62:93:36:9e:24:
75:f3:74:5f:92:75:0d:d3:5a:82:ee:0b:eb:05:13:
64:e5:ed:1e:f0:aa:8f:0d:c4:cd:04:e2:4a:96:6f:
3a:78:f5:79:e3:68:80:2d:7a:8a:60:e1:35:1f:35:
c3:b8:11:64:93:1b:8f:d4:f5:49:86:11:1e:e7:ca:
e6:21:71:e0:07:e4:49:69:22:d8:e4:d2:d4:46:e9:
e6:28:f1:ed:42:8c:23:36:4f:0e:cf:90:b8:29:38:
7f:62:bb:c4:cb:46:a7:1d:b3:3f:6a:40:c2:af:3e:
2d:1a:84:64:cc:ef:78:89:f3:25:82:ad:9e:d2:6b:
a9:d6:a5:02:16:d5:c0:b0:01:27:af:81:89:09:33:
f6:c0:cb:82:96:c7:d1:58:b9:d8:65:29:7a:6b:a9:
83:e3:75:11:7c:05:5b:77:b5:23:89:a9:7b:28:37:
9c:0e:c2:08:87:9b:53:d4:d3:7d:ee:d8:25:76:aa:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7cc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200841
Signature Algorithm: sha256WithRSAEncryption
1a:31:1c:8c:dc:25:c0:18:87:46:e2:0a:a8:65:bc:99:21:49:
08:ae:00:70:dc:76:88:69:58:db:a6:f2:68:a2:85:e3:b7:61:
d2:32:e3:dd:5c:50:f4:0e:5a:2e:a8:4b:0e:f4:0c:56:25:44:
0c:59:53:43:51:84:45:14:a0:d2:d7:ef:d8:87:f6:0a:06:b1:
d2:f5:47:51:97:d4:4e:78:7d:c7:92:4a:75:9b:07:73:e1:79:
b3:4e:43:03:ea:35:49:70:2e:5c:23:fb:50:19:78:55:30:c1:
2d:01:7c:93:61:77:d4:3e:a4:48:1f:69:66:4a:5e:c6:0e:08:
63:23:cc:e5:48:fc:f8:15:48:d7:f5:56:bd:5b:37:77:d4:2b:
92:c6:68:c8:2d:3f:0d:f4:84:d4:b5:96:b7:77:76:8a:82:8d:
60:86:b7:8b:05:57:41:d2:86:95:b8:99:46:24:92:0e:0f:d0:
b8:c0:55:ed:53:65:54:ec:7b:d4:74:4b:f7:c2:50:96:d8:43:
91:2a:f9:a3:d0:b3:8c:b6:11:47:06:e9:a2:cd:5c:29:45:96:
17:d2:34:4a:98:27:2b:c0:28:b8:9c:71:88:32:36:0a:0c:90:
70:72:75:d1:0e:27:c5:cb:a1:95:5a:d9:19:d8:06:43:af:3e:
ce:b0:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:25 2026 by rpki-client