Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
File: QVirbnb4R2lcj-tZTLBd4xkeeHc.cer (raw, json)
Hash identifier: rYInho7j/hHEw1NUT9m9hSfG8kNmTJ+IQMK3RLTSkf4=
Subject key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EFED303E2397F216EAA1F2AC049C0A3FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 25 Jun 2026 12:48:22 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 152.237.224.0/19
IP: 177.177.0.0/19
IP: 177.177.224.0/19
IP: 186.241.160.0/19
IP: 201.4.0.0/18
IP: 201.50.0.0/18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:d3:03:e2:39:7f:21:6e:aa:1f:2a:c0:49:c0:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 25 12:48:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:e1:48:95:0d:35:64:ae:35:51:be:7a:2f:
55:d3:81:87:e2:a3:79:cf:d2:d6:62:e8:59:8a:36:
dc:b8:f4:c0:68:45:77:9b:99:84:7d:ac:22:c3:02:
36:16:97:7b:60:07:8a:87:9c:de:8e:30:6f:9b:2b:
64:50:cc:78:74:1c:77:3a:c6:c1:3d:49:7c:f6:ba:
27:7f:63:f4:a6:91:44:51:48:8e:f0:b1:12:08:43:
92:7b:e0:74:d5:c8:5f:bf:61:56:76:64:d3:22:e3:
ce:26:e8:45:46:74:0a:7e:dd:37:fd:ae:ef:57:b8:
16:34:2a:f3:cd:d8:b2:8d:03:0d:f6:af:a7:f0:86:
84:a1:0a:51:65:b9:f7:f5:81:0d:88:a4:50:f6:2a:
21:3f:d1:00:09:20:dd:87:3e:b6:b1:bb:2d:9b:ab:
44:cd:96:ab:ab:2c:d2:a9:c0:6c:63:d9:73:fa:60:
7b:c6:34:c9:71:e7:db:d4:88:cd:45:d9:30:90:86:
a6:ef:07:20:ae:58:d9:81:fa:f1:f7:3a:20:3d:06:
91:d7:f6:9d:ce:e9:fb:d3:b1:e8:91:64:c8:b5:15:
18:a3:7d:81:2e:01:5c:09:38:33:91:08:87:61:97:
ae:12:fa:4c:6d:9e:eb:83:60:75:1e:be:16:c1:24:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.224.0/19
177.177.0.0/19
177.177.224.0/19
186.241.160.0/19
201.4.0.0/18
201.50.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:1e:7d:a5:af:bc:5e:90:29:ea:83:f5:1a:c1:35:09:e0:e0:
c0:3d:c7:b6:6a:29:46:08:7c:4c:96:0d:7a:91:e3:df:96:8c:
90:7f:81:f1:f7:c4:d8:05:ff:d9:2e:2c:91:f0:12:26:cc:d1:
36:de:63:2a:75:82:de:a3:fe:79:b6:51:a5:29:8b:b9:46:37:
2e:cf:11:f1:f6:fb:58:ba:40:ad:c7:12:8d:3e:3b:48:f7:60:
74:53:e3:4f:85:8d:f9:a4:66:b5:21:41:3c:e8:0f:d2:61:c2:
8f:f3:30:9b:3e:0e:dc:a2:6d:cf:51:87:46:1d:24:f0:da:b8:
70:ac:b5:a6:66:0f:7b:66:61:9b:ed:80:d0:dc:5f:9c:48:08:
53:f6:43:33:92:99:9b:9e:54:02:98:ae:e2:f3:29:70:70:7f:
6c:32:55:b4:02:6a:de:09:6b:8e:a4:33:e3:2c:00:8d:f1:77:
82:1b:61:03:54:4f:22:d1:7f:29:63:8f:05:43:4d:67:12:54:
27:2c:f4:f4:08:d9:13:10:1e:b8:b7:36:cd:f9:64:88:87:f1:
13:b5:45:ba:ec:73:fd:08:04:cd:27:bb:d0:65:c4:f1:46:dd:
3a:5b:06:63:ca:91:19:2f:9b:0f:92:fe:3d:a8:c9:d6:62:c9:
37:19:a0:5f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZ7+0wPiOX8hbqofKsBJwKP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjI1MTI0ODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTU4YWI2ZTc2Zjg0NzY5NWM4ZmViNTk0Y2IwNWRlMzE5MWU3ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHPhSJUNNWSuNVG+ei9V04GH4qN5
z9LWYuhZijbcuPTAaEV3m5mEfawiwwI2Fpd7YAeKh5zejjBvmytkUMx4dBx3OsbB
PUl89ronf2P0ppFEUUiO8LESCEOSe+B01chfv2FWdmTTIuPOJuhFRnQKft03/a7v
V7gWNCrzzdiyjQMN9q+n8IaEoQpRZbn39YENiKRQ9iohP9EACSDdhz62sbstm6tE
zZarqyzSqcBsY9lz+mB7xjTJcefb1IjNRdkwkIam7wcgrljZgfrx9zogPQaR1/ad
zun707HokWTItRUYo32BLgFcCTgzkQiHYZeuEvpMbZ7rg2B1Hr4WwSRTyQIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFEFYq252+EdpXI/rWUywXeMZHnh3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0
NWVhLTA3YjktNDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI2
OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkxODg0LzAvNDE1OEFCNkU3NkY4
NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAME
BZjt4AMEBbGxAAMEBbGx4AMEBbrxoAMEBskEAAMEBskyADANBgkqhkiG9w0BAQsF
AAOCAQEAex59pa+8XpAp6oP1GsE1CeDgwD3HtmopRgh8TJYNepHj35aMkH+B8ffE
2AX/2S4skfASJszRNt5jKnWC3qP+ebZRpSmLuUY3Ls8R8fb7WLpArccSjT47SPdg
dFPjT4WN+aRmtSFBPOgP0mHCj/Mwmz4O3KJtz1GHRh0k8Nq4cKy1pmYPe2Zhm+2A
0NxfnEgIU/ZDM5KZm55UApiu4vMpcHB/bDJVtAJq3glrjqQz4ywAjfF3ghthA1RP
ItF/KWOPBUNNZxJUJyz09AjZExAeuLc2zflkiIfxE7VFuuxz/QgEzSe70GXE8Ubd
OlsGY8qRGS+bD5L+PajJ1mLJNxmgXw==
-----END CERTIFICATE-----
Generated at Sun Jul 12 07:20:35 2026 by rpki-client