Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer (raw, json)
Hash identifier: QWaWHqvsISYR5l2Kg66gprIy76ut550fyVRNEDRWNkg=
Subject key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB5EFAB4ABE9B72EA2120A3CC25666
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:34 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.197.164.0/22
IP: 2a0a:7bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:5e:fa:b4:ab:e9:b7:2e:a2:12:0a:3c:c2:56:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:73:c9:44:ad:d0:23:62:92:c5:55:39:1d:
f0:94:d2:e0:91:65:23:c4:19:57:34:12:49:f3:1a:
5e:6d:66:4b:7d:93:a8:b9:2b:b8:36:0f:4d:c0:e4:
e2:e6:c6:6e:64:12:6a:16:bc:ea:70:55:f0:b7:fe:
13:5b:82:be:0d:11:76:b4:d1:0d:fa:a0:da:b4:35:
07:7c:19:ab:b4:a1:1c:a0:db:6d:18:d3:3b:9c:d9:
e5:a8:41:7a:0a:ba:c1:3b:c8:ff:d8:2d:d6:7d:7c:
0c:2a:36:f5:93:06:33:a3:bb:31:c9:f7:08:88:11:
b9:db:79:af:26:95:50:70:39:47:6d:a7:4b:4f:63:
bf:9d:a1:43:c5:34:48:f0:10:06:5f:f4:eb:65:33:
63:d7:b9:12:29:11:cd:63:a5:41:88:74:d6:0f:91:
3d:7d:86:8a:ae:0d:aa:6a:92:26:0f:4a:00:1e:14:
12:a8:9a:c8:3d:d0:9f:fb:b4:1a:15:b8:9e:f6:23:
a7:71:29:5e:d3:ab:70:58:70:4b:cf:ab:db:82:5e:
d3:93:55:b7:e2:ad:a5:98:44:b3:86:f5:3a:c2:65:
c3:78:bd:f1:10:86:d1:cc:d4:84:d1:b6:88:a2:66:
6d:98:d5:cf:b1:d7:0d:eb:dc:16:69:97:7c:32:24:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.164.0/22
IPv6:
2a0a:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
58:dc:d9:f0:c3:4e:d4:7d:45:6e:93:e0:d3:19:de:e7:2f:86:
79:25:a0:dd:67:3d:d9:65:81:e9:fb:36:af:11:0e:a1:d8:d3:
14:7b:8b:6a:d6:ff:e4:2d:5c:c2:32:22:a4:5c:79:85:e7:41:
ea:1c:99:d5:6e:cd:ee:f3:ce:9c:c1:0b:75:61:a6:06:8c:fd:
ac:9e:f3:04:79:e4:28:43:9d:cf:3d:03:6c:6b:92:e3:8f:b4:
fb:1c:a3:3e:3c:e4:b7:45:84:6d:dd:ee:13:78:a3:e6:c9:41:
83:be:2f:6d:59:0c:9d:bc:e7:dc:37:31:30:36:54:d1:4a:c1:
a3:ad:15:58:66:d3:bb:b7:9f:c1:a4:f5:82:0b:50:9f:84:8d:
14:26:af:f3:44:2d:f5:7d:89:c3:77:9b:34:96:d7:c7:b4:9d:
c4:91:73:75:ca:91:3a:78:2a:e9:f2:1a:34:e7:77:c1:18:66:
89:f7:3c:5d:84:cb:0b:cd:c2:3b:ae:9d:64:8a:3b:3c:69:90:
77:d8:62:fd:c1:b1:fb:3e:8f:ba:8b:4a:bd:87:5f:2d:28:41:
2c:9a:3c:77:80:be:7c:9a:b0:7d:80:f7:22:6e:7d:68:2a:50:
b0:08:71:c9:ae:81:9e:ba:4c:b3:6d:b0:48:b5:c0:bc:68:fb:
b7:12:f6:f2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZ8Y+176tKvpty6iEgo8wlZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWMyYjNmNTE5MTNiNjg1YWE5OGE2NGY1YTIyMmExYWU2N2IyNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV1zyUSt0CNiksVVOR3wlNLgkWUj
xBlXNBJJ8xpebWZLfZOouSu4Ng9NwOTi5sZuZBJqFrzqcFXwt/4TW4K+DRF2tNEN
+qDatDUHfBmrtKEcoNttGNM7nNnlqEF6CrrBO8j/2C3WfXwMKjb1kwYzo7sxyfcI
iBG523mvJpVQcDlHbadLT2O/naFDxTRI8BAGX/TrZTNj17kSKRHNY6VBiHTWD5E9
fYaKrg2qapImD0oAHhQSqJrIPdCf+7QaFbie9iOncSle06twWHBLz6vbgl7Tk1W3
4q2lmESzhvU6wmXDeL3xEIbRzNSE0baIomZtmNXPsdcN69wWaZd8MiRwmwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFL7Cs/UZE7aFqpimT1oiKhrmeycgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2Q3MjU3
NC0yNzJhLTQwOWQtOWQzYy1lNDlhOWUwNmM3MDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZDcyNTc0
LTI3MmEtNDA5ZC05ZDNjLWU0OWE5ZTA2YzcwMC8xL3ZzS3o5UmtUdG9XcW1LWlBX
aUlxR3VaN0p5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCucWkMA0EAgACMAcDBQMqCnvAMA0GCSqGSIb3
DQEBCwUAA4IBAQBY3Nnww07UfUVuk+DTGd7nL4Z5JaDdZz3ZZYHp+zavEQ6h2NMU
e4tq1v/kLVzCMiKkXHmF50HqHJnVbs3u886cwQt1YaYGjP2snvMEeeQoQ53PPQNs
a5Ljj7T7HKM+POS3RYRt3e4TeKPmyUGDvi9tWQydvOfcNzEwNlTRSsGjrRVYZtO7
t5/BpPWCC1CfhI0UJq/zRC31fYnDd5s0ltfHtJ3EkXN1ypE6eCrp8ho053fBGGaJ
9zxdhMsLzcI7rp1kijs8aZB32GL9wbH7Po+6i0q9h18tKEEsmjx3gL58mrB9gPci
bn1oKlCwCHHJroGeukyzbbBItcC8aPu3Evby
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:28 2026 by rpki-client