Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
File: VzzskGOoh0GEGQiwxSl_zbtDlTA.cer (raw, json)
Hash identifier: /PSd1yVMXj1UkuWMSmVAI7oK0I0aithaInotY+gDOR4=
Subject key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A11D51BA11F59C67DF9EA55DB3A6C721E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Oct 2025 16:09:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206507
IP: 194.117.64.0/24
IP: 2a14:3740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:d5:1b:a1:1f:59:c6:7d:f9:ea:55:db:3a:6c:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 23 16:09:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=573cec9063a88741841908b0c5297fcdbb439530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:da:66:11:e4:df:4f:1a:55:05:f7:da:ec:
65:1a:47:f5:39:57:ca:6f:f6:de:ba:97:41:23:ac:
f8:19:43:0e:9f:82:36:fa:6f:c0:86:61:5b:b1:b9:
e4:9e:5c:10:5b:c5:6b:0f:6e:ad:79:e7:93:82:58:
45:f7:06:aa:56:51:23:50:f5:0b:4c:aa:55:64:06:
b4:6e:29:d0:64:48:82:cf:4d:d9:11:93:0c:cc:4d:
47:9d:db:af:7d:97:9d:94:86:28:90:c9:85:13:c7:
e8:25:f9:02:3a:6d:b6:17:bd:04:53:8d:dd:61:ca:
3c:1e:ef:b9:19:da:f9:e3:65:59:87:66:d5:56:4c:
ad:b6:61:fe:d5:3c:1f:d3:5f:43:da:c3:07:33:a0:
3f:0b:0c:86:42:9e:4f:2f:4f:a1:09:c9:fc:99:14:
7c:f1:d7:7d:51:6b:ca:82:c6:48:42:82:79:db:97:
ae:57:74:a4:cd:d7:bb:f3:c2:3f:ef:9e:54:85:39:
07:d2:84:c7:d8:a2:c5:b8:92:3c:1d:70:ed:12:e2:
68:97:ed:b0:4c:79:ac:b3:c4:06:0b:b1:cb:38:d4:
d7:63:c5:d4:33:81:08:a5:dd:fe:15:18:13:95:7d:
ba:19:f9:e8:4f:48:60:3e:0b:03:44:fa:cd:11:e2:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.64.0/24
IPv6:
2a14:3740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206507
Signature Algorithm: sha256WithRSAEncryption
30:41:78:3a:22:20:5a:71:0e:e6:a4:56:f3:32:1f:1e:d5:32:
8b:82:d5:02:28:87:7e:92:df:b8:1e:3a:74:6c:5d:48:cf:cd:
5c:de:33:4f:00:f9:76:53:1b:e6:3d:3e:9a:88:72:18:d8:8b:
04:0d:ef:cd:17:58:d6:51:8f:e0:f6:bb:dc:9f:31:8d:16:68:
62:3f:53:33:62:4e:3f:0f:e9:0f:ac:b9:3c:c9:c4:a9:27:4d:
62:d4:c4:6f:73:36:c2:02:6c:82:78:6c:7f:3b:6d:d4:c1:44:
2d:85:bd:e7:04:fe:bf:27:b6:56:05:3c:69:61:e9:d9:ea:47:
5f:c9:a7:bf:68:36:8e:c3:b2:b3:75:e0:fa:3b:f1:d2:73:2e:
21:47:2f:bf:95:e3:a6:c9:d8:3f:e3:63:dc:a9:cf:06:76:a3:
73:c9:2d:1a:9f:e0:44:98:21:44:0f:b7:ad:eb:f8:51:62:dc:
bb:47:32:e5:6c:02:eb:a2:88:08:51:48:16:5a:17:2c:b5:66:
4d:7b:bc:fa:7a:74:21:94:35:80:fb:f7:aa:9d:5b:eb:4d:02:
f5:04:07:9b:63:19:ff:c1:a6:95:02:88:8e:bc:08:33:fd:ea:
51:ae:64:86:ec:b4:62:89:2a:38:0b:d9:35:02:29:54:6f:05:
ee:d1:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:16:07 2025 by rpki-client