Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
File: vnApzozJt4fZQyPgyg0U3R4AQ-w.cer (raw, json)
Hash identifier: bwdAt3zkjG4PU9dlwlVJwl7BDIev6DjYqFyBUmj+8C0=
Subject key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E8DEC4046F7ED26F15C07B5917D21E497
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 14:38:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 31699
IP: 217.173.80.0/20
IP: 2a00:d7c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:ec:40:46:f7:ed:26:f1:5c:07:b5:91:7d:21:e4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 3 14:38:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:87:1a:7a:71:2b:21:c3:5f:94:44:37:5d:
d1:3a:29:be:e0:70:c5:7b:5e:ff:f0:db:02:10:fd:
5b:b3:9a:34:d9:22:02:49:e6:ee:e6:e4:04:ee:e3:
e6:bd:83:df:f6:1e:8f:e8:9e:e2:9b:1c:47:f7:d5:
2c:52:cd:3e:42:5f:00:28:1a:40:f7:00:2a:7c:54:
9e:b9:7e:83:d8:ce:15:6e:d9:55:e3:cd:8c:31:85:
1f:69:bc:26:47:15:3f:36:e3:b4:08:43:5d:a3:7a:
23:20:07:ef:43:eb:c9:b3:05:e5:c5:b7:0f:da:ad:
0c:84:bf:48:a0:d3:45:d8:cd:ba:57:40:0a:43:81:
2e:92:a8:98:8f:28:49:0d:ec:36:ff:cd:7e:86:90:
a1:14:77:76:76:39:89:be:58:e5:58:94:4c:7a:96:
8b:f1:e6:25:15:ff:d1:58:21:f3:c5:ac:69:1d:7b:
a6:cc:50:75:7a:78:55:b0:05:49:17:6b:13:95:1b:
48:02:20:02:d1:d3:72:4f:af:67:bc:18:4f:15:0c:
3f:f1:1d:64:0c:f0:b4:29:a5:6c:79:ce:75:ee:35:
bf:5e:33:30:6a:f9:20:b4:f9:64:6b:09:8e:22:ba:
39:e5:51:17:02:ad:f2:d3:f6:a0:ee:7c:6e:ab:f2:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.80.0/20
IPv6:
2a00:d7c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31699
Signature Algorithm: sha256WithRSAEncryption
68:76:38:3a:92:9a:1d:45:ea:cc:79:0b:66:9c:c2:e6:88:bf:
07:c1:8c:85:a7:10:11:f8:9d:fe:df:32:7d:86:98:d5:ea:9f:
d9:c5:96:bc:f4:20:58:34:74:12:7c:be:2e:38:09:c0:fd:c6:
d6:fa:0e:90:05:d0:32:bd:86:d6:1f:5b:ac:53:66:30:01:ca:
c4:73:dd:5c:e6:74:8f:e6:33:2e:48:4c:b3:6d:7c:26:08:28:
7a:6d:33:8b:f6:0b:5d:85:4f:53:12:73:c7:30:81:ad:82:d3:
77:a7:3e:d0:08:51:88:20:25:2f:87:10:27:cd:b1:55:21:fa:
1f:94:c9:1c:6d:81:52:0e:ea:3c:bb:10:be:6e:27:b6:22:3b:
8c:41:db:a9:32:e9:3e:84:61:ae:dd:3a:ed:80:90:8c:02:17:
54:3a:c6:46:cb:7d:83:48:ef:a5:81:ca:66:6b:e4:01:22:e4:
8a:e4:4e:27:cc:99:73:9e:35:e4:39:67:0f:79:54:c9:87:84:
22:0e:6b:e7:82:c8:19:10:11:90:ca:a6:66:03:e4:f3:9b:95:
61:58:42:89:91:8f:56:86:05:1d:8d:84:9d:1a:d9:bf:7f:c1:
68:fd:81:24:a9:e3:d3:e1:21:11:dd:a0:8e:59:27:32:4c:ac:
12:8c:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:04 2026 by rpki-client