Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
File: vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer (raw, json)
Hash identifier: HBdsh7HWq3Zo1VzKBHkRA5Q/RGWJTSKivALIDO9Di4k=
Subject key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA84B774E1F1E9C0022B06622E15D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 89.37.101.0/24
IP: 89.47.58.0/23
IP: 185.131.52.0/22
IP: 188.208.140.0/22
IP: 188.241.60.0/22
IP: 188.241.187.0/24
IP: 2a07:ba00::/29
IP: 2a0b:200::/29
IP: 2a0b:7f40::/29
IP: 2a0c:2b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:84:b7:74:e1:f1:e9:c0:02:2b:06:62:2e:15:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:9b:23:48:6a:db:22:9e:78:26:80:5f:a6:
6c:3e:c2:5b:ac:4e:e5:ca:15:75:27:75:0f:bb:0e:
e1:63:4c:16:f1:b4:15:9b:1b:16:ec:e0:1c:86:63:
f7:2d:eb:4b:44:a2:62:53:d5:49:02:38:00:4c:2b:
b0:c8:26:11:50:38:1e:6e:b9:9c:3c:c6:27:e7:57:
02:c9:24:db:27:0e:06:8c:e1:70:a3:34:2d:3f:45:
29:21:c5:45:26:9c:e9:51:cb:0c:08:04:93:1b:dc:
d1:85:3d:78:8f:ef:34:04:40:6e:82:8b:22:45:f4:
66:2f:13:77:3e:51:06:39:53:8b:4e:9e:63:b9:0b:
03:19:9b:8f:6b:de:f1:3c:54:85:24:98:c2:8e:68:
55:31:56:5e:f4:58:6e:38:0d:22:0e:de:ff:7c:cb:
f8:78:43:38:fa:a5:8e:07:3b:62:c4:82:17:b7:9a:
be:ee:be:c7:f1:d3:a3:a1:65:04:c5:57:f7:28:8e:
e4:fe:30:1a:03:b3:13:29:e4:f4:ff:ec:42:cf:3c:
42:85:aa:b1:91:9b:e1:f4:c3:62:95:29:78:7b:c3:
e7:d7:c9:9e:a8:18:da:7b:8f:91:91:48:ce:1f:18:
9b:d9:a3:cd:0b:43:09:3e:01:f4:f6:93:1d:7c:5a:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.101.0/24
89.47.58.0/23
185.131.52.0/22
188.208.140.0/22
188.241.60.0/22
188.241.187.0/24
IPv6:
2a07:ba00::/29
2a0b:200::/29
2a0b:7f40::/29
2a0c:2b00::/29
Signature Algorithm: sha256WithRSAEncryption
2c:ba:c9:42:e6:b1:59:aa:2d:6f:7b:6e:76:38:16:d3:ed:f5:
50:ff:27:06:b1:4c:35:0b:1d:90:7b:20:16:3e:6f:79:ee:21:
50:a6:45:3b:75:ef:24:16:60:33:d8:98:3d:96:69:a2:6f:7d:
5c:96:2e:e5:25:b8:19:ea:dd:d9:0b:31:52:4f:b3:e9:3e:a9:
00:e2:8e:47:94:fb:96:26:ab:b7:c8:39:d2:d4:5f:2e:0f:32:
71:20:0a:df:c0:f5:f4:7b:0b:43:79:9d:20:1f:08:46:0e:6a:
82:5a:79:36:59:7c:4d:47:5d:db:4c:c4:a7:17:35:50:38:49:
bc:4b:e6:90:29:97:66:67:1f:86:4d:7f:3c:46:76:5c:ca:6c:
b9:13:9e:cb:56:2d:64:25:38:63:81:84:2a:8c:70:71:87:a3:
75:27:58:be:51:0b:d3:28:89:b7:8b:56:88:ab:2d:32:88:5d:
ee:7e:f7:1f:05:bc:05:ac:2a:6e:25:58:fe:00:28:b3:e3:5a:
eb:f9:a3:58:60:bc:57:e6:3b:94:d8:6a:05:bb:4e:db:6e:eb:
df:fb:62:90:8c:68:f8:81:7a:b6:92:2a:64:07:d6:c1:31:05:
9f:26:17:d9:66:c2:1a:41:69:a4:45:94:9a:a7:33:6e:fc:9b:
47:ba:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:10:32 2026 by rpki-client