Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/VZIrWR63tJk7kn7dQgglvNi0CnY.cer
File: VZIrWR63tJk7kn7dQgglvNi0CnY.cer (raw, json)
Hash identifier: Yawh06pZwRy5d87lnAa3xxAS/K+IBlkXXGEUTiDlHD4=
Subject key identifier: 55:92:2B:59:1E:B7:B4:99:3B:92:7E:DD:42:08:25:BC:D8:B4:0A:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FD5A575F371BA87488D92170AB48A05F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 06 Aug 2026 05:56:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 209866
IP: 2a09:dd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:a5:75:f3:71:ba:87:48:8d:92:17:0a:b4:8a:05:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 05:56:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55922b591eb7b4993b927edd420825bcd8b40a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:26:a0:23:6a:bc:d2:04:b0:92:77:b5:55:
7f:43:bf:b6:43:0e:0d:67:4d:00:1f:21:29:eb:4f:
fe:3b:8a:b5:8e:c7:c2:f4:a9:d6:99:66:16:23:e8:
2b:a0:9b:9a:33:b0:2e:8c:fd:61:f8:6a:3d:d3:84:
d0:02:b1:14:b9:1d:e7:fb:6b:71:ce:2b:2d:40:87:
ae:33:65:04:e9:bd:de:7b:8c:2d:f1:7b:00:cb:21:
e1:2e:b3:54:dc:d1:56:d3:9a:a9:8e:9f:32:26:44:
41:52:fe:97:83:b9:a3:c5:d0:25:8a:19:04:1b:18:
50:23:4e:3a:24:f3:a7:d5:65:86:d3:e5:3a:6c:20:
c8:10:f5:6d:1c:f3:a6:e6:01:b0:2d:04:8b:85:cc:
ba:a8:3a:46:15:a6:30:fc:44:88:4e:fe:ba:45:58:
6a:05:4c:c6:62:4e:e6:c7:81:ec:1f:20:f6:b5:2a:
59:5d:c0:4f:4f:f1:b3:8e:07:53:2c:d4:ee:d9:5d:
d0:c0:e9:09:46:f0:46:fc:67:72:cb:53:3d:69:02:
08:04:92:20:7f:36:50:45:71:17:0b:54:fe:d8:99:
28:a6:bb:42:2c:71:ad:82:90:80:1b:15:59:1b:11:
3c:ee:a1:cb:4a:90:69:e3:1f:41:8e:8d:6e:6c:3a:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:2B:59:1E:B7:B4:99:3B:92:7E:DD:42:08:25:BC:D8:B4:0A:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/64c0f781-751d-4eef-bd2d-7bba70e04831/0/55922B591EB7B4993B927EDD420825BCD8B40A76.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:dd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209866
Signature Algorithm: sha256WithRSAEncryption
37:26:57:23:b4:8b:fc:6f:1a:e6:85:1c:d9:0b:95:5d:28:5d:
78:a1:42:f1:ae:3e:24:10:64:7a:e8:03:ee:46:13:25:8c:fb:
33:87:ec:f4:15:8d:39:5a:95:5b:57:cf:cf:35:35:2a:82:86:
d1:f0:7f:65:2b:5c:1a:26:e8:9f:d4:4d:fc:92:84:4d:f2:00:
66:d2:8d:3a:c5:66:15:f7:95:3b:0e:99:97:b4:98:c9:e0:89:
73:e5:22:66:9d:ca:56:a5:84:5c:ca:bd:33:1e:6d:31:a5:ec:
8d:7d:9a:8c:f0:3c:d9:d9:ec:92:fe:e9:e9:ee:fa:5a:e7:72:
48:7a:29:f0:9c:58:ad:dd:af:f9:39:bc:44:e1:fd:e4:ed:6f:
64:f6:d2:b4:b6:7d:0a:f3:ad:f4:f2:3b:6a:9b:ed:42:19:67:
d6:33:06:ed:9b:fc:87:7f:56:70:c1:bb:3f:47:92:be:34:03:
fa:09:a6:ee:61:c4:77:f2:9d:15:46:b1:16:bf:63:39:b4:9a:
6f:12:1b:4f:fe:2f:e6:5d:01:da:51:d3:34:d5:b7:c8:fe:a3:
34:51:f5:00:58:a7:21:02:30:41:da:de:d1:0f:bb:47:77:a2:
2c:e5:97:f4:87:a7:55:14:44:3c:22:90:5a:02:49:a8:de:99:
65:57:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:34 2026 by rpki-client