Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VkRaDdykbWQ2d1kSUWqyHUizxhA.cer
File: VkRaDdykbWQ2d1kSUWqyHUizxhA.cer (raw, json)
Hash identifier: D7Y+JXZc+VncqDglbaR2dxYcwhA6lrLjXnjmKCHtsUg=
Subject key identifier: 56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA4DC7E698D06BF21A645435961F6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 8528
IP: 138.21.0.0/16
IP: 193.8.143.0/24
IP: 193.53.38.0/24
IP: 193.56.119.0/24
IP: 193.57.10.0/23
IP: 193.57.24.0 -- 193.57.26.255
IP: 193.194.132.0/22
IP: 194.41.4.0/22
IP: 194.146.27.0/24
IP: 194.146.54.0/24
IP: 2a00:7ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:4d:c7:e6:98:d0:6b:f2:1a:64:54:35:96:1f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56445a0ddca46d6436775912516ab21d48b3c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:30:de:1e:bc:f0:b3:75:11:14:96:78:46:
90:96:e9:b3:88:ab:7d:dd:da:2a:ba:02:d4:7c:cc:
bf:54:7e:dd:7e:87:3e:70:55:66:ff:ef:0e:cf:aa:
d7:30:f8:5f:66:95:d4:84:73:fc:15:eb:fe:fc:ef:
bd:1a:2f:e8:13:02:85:a5:6e:78:95:1c:a9:b1:94:
81:6d:9a:16:4e:02:cf:5a:88:44:79:4e:a3:f5:b1:
8a:b3:eb:28:33:7a:a3:85:cf:47:de:35:d4:8d:4d:
6e:c5:3e:ca:54:11:65:2f:dd:1d:61:6a:90:34:d6:
e9:48:30:6b:64:99:95:89:86:a1:f2:b4:15:e9:15:
4c:a1:21:9f:de:b7:df:cc:07:15:c1:16:2c:27:87:
3d:2c:64:91:28:ce:de:e6:27:35:f5:1e:49:0b:97:
46:1e:25:02:27:6e:1f:03:cf:69:f8:b9:04:03:b2:
2b:87:1b:28:f7:c0:94:5b:73:70:3b:f9:57:36:79:
d3:c2:aa:21:1b:8b:86:54:74:40:8a:3b:aa:4f:71:
dd:af:72:2d:0e:69:1b:bd:1b:83:96:23:a0:53:11:
f1:39:99:51:2a:77:ce:ee:19:2d:dd:8c:95:fa:c8:
4d:60:e2:36:25:7a:8b:c2:08:8e:46:48:2d:b3:0b:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:5A:0D:DC:A4:6D:64:36:77:59:12:51:6A:B2:1D:48:B3:C6:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/VkRaDdykbWQ2d1kSUWqyHUizxhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.21.0.0/16
193.8.143.0/24
193.53.38.0/24
193.56.119.0/24
193.57.10.0/23
193.57.24.0-193.57.26.255
193.194.132.0/22
194.41.4.0/22
194.146.27.0/24
194.146.54.0/24
IPv6:
2a00:7ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8528
Signature Algorithm: sha256WithRSAEncryption
51:8c:a0:b5:bd:a8:45:14:66:2e:04:ea:78:fd:0e:66:fc:8a:
a1:75:eb:d9:fe:7b:6a:24:f3:a9:45:22:69:0e:a5:01:16:88:
fb:99:85:63:4b:32:df:a5:03:74:a7:37:2d:69:3c:d5:fa:62:
a6:b2:05:37:a1:0d:80:c4:fa:eb:dc:56:16:5a:9f:a6:43:2f:
44:03:a7:6a:62:b4:0a:6b:c9:23:47:4c:64:08:4c:c9:f1:0f:
e0:93:fd:34:d1:aa:99:eb:e8:28:48:5c:5a:b7:c4:3d:90:c5:
1c:22:9e:a6:3b:09:f0:b9:cc:dd:b2:54:db:49:0b:ed:ce:76:
be:f7:5e:4d:e4:2e:32:66:eb:0c:54:c4:fb:50:aa:4c:8e:7c:
1d:85:3e:4d:15:29:e9:e7:f9:26:3f:20:b8:16:fe:f6:ef:7a:
47:b5:70:70:a4:1d:32:c1:5b:ac:73:6f:4f:91:37:f8:c9:6a:
83:d1:08:99:69:82:7c:7a:71:1b:9f:37:98:cc:60:30:56:72:
39:8d:ac:51:e7:c1:ce:f6:a1:e1:b8:42:dc:0c:ca:76:83:92:
bb:31:1d:3b:d8:15:97:8c:ab:39:a2:57:d1:a3:37:98:5c:49:
05:b0:ee:26:32:92:c6:d5:5e:2c:29:21:5a:c4:b6:00:a6:be:
75:36:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:26:50 2026 by rpki-client